Edit tour

Windows Analysis Report
https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage

Overview

General Information

Sample URL:	https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage
Analysis ID:	1447008
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

AI detected suspicious javascript

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Executes massive DNS lookups (> 100)

HTML page contains hidden URLs or javascript code

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6456 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious javascript

Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	LLM: Score: 8 Reasons: The code contains obfuscated and encoded data which is a common technique used in malicious scripts to hide their true purpose. The presence of a large array of seemingly random characters and numbers, along with the undefined variable check, suggests that the script may be attempting to execute hidden or harmful actions. This level of obfuscation is unusual for legitimate purposes and raises significant concerns about the intent of the code. DOM: 0.1.pages.csv
Source: https://c.adsco.re/#0.8392835991586254	LLM: Score: 8 Reasons: The code attempts to send the URL hash and response headers to an external entity via postMessage. This behavior is suspicious and could be used for malicious purposes such as data exfiltration or phishing. DOM: 6.6.pages.csv

Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1716221016&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&pra=5&wgl=1&easpi=0&aihb=0&asro=0&aslmct=0.7&asamct=0.7&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010319&bpp=6&bdt=2780&idt=2658&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8601797745957&frm=20&pv=2&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&...

HTTP Parser: Base64 decoded: m9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgm...

Source: https://www.facebook.com/PatriotJournal

HTTP Parser: <input type="password" .../> found

Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	HTTP Parser: No favicon
Source: https://decide.dev/lad/17146331630347110?pubid=ld-9129-2903&pubo=https%3A%2F%2Fpjnewsletter.com&rid=&width=590&path=%2Fjewish-americans-send-powerful%2F&x=131.5&y=4059.84375&utm_medium=email&utm_source=actengage&embed_type=7&embed_frame_container_type=3	HTTP Parser: No favicon
Source: https://c.adsco.re/#0.8392835991586254	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&scr_y=0&ei...	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?pubId=7cd9d7c7c13ff36&sync_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-0-&adk=1812271808&client=ca-pub-7666278362879166&fa=8&ifi=7&uci=a!7	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-0-&adk=1812271808&client=ca-pub-7666278362879166&fa=8&ifi=7&uci=a!7	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=mgid&endpoint=us-west&gdpr=0&gdpr_consent=&us_privacy=	HTTP Parser: No favicon
Source: https://cdn.connectad.io/connectmyusers.php?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D	HTTP Parser: No favicon
Source: https://ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=aniview&endpoint=us-east	HTTP Parser: No favicon
Source: https://cm.mgid.com/m?cdsp=817115&c=7e43a2ac-3d1d-41f0-a785-c344abfed582	HTTP Parser: No favicon
Source: https://cm.adform.net/cookie?redirect_url=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fbidder%3Dadform%26dataid%3Ddata4%26uuid%3D%24UID	HTTP Parser: No favicon
Source: https://ib.adnxs.com/prebid/setuid?bidder=connectad&gdpr=0&gdpr_consent=&f=i&uid=7e43a2ac-3d1d-41f0-a785-c344abfed582	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://sync-eu.connectad.io/syncer/1?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D	HTTP Parser: No favicon
Source: https://sync-eu.connectad.io/syncer/1?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156077&us_privacy=1YNY&predirect=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata1%26uuid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156077&us_privacy=1YNY&predirect=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata1%26uuid%3D	HTTP Parser: No favicon
Source: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&us_privacy=1YNY&r=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata5%26uuid%3D%7BOPENX_ID%7D	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=7F542745-2D60-41EB-9A96-52B90C82DF34&redir=true&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://widget.us.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=4426393169609033625&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372448948567406736&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5141210831119936251	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9	HTTP Parser: No favicon
Source: https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=25&external_user_id=7F542745-2D60-41EB-9A96-52B90C82DF34	HTTP Parser: No favicon
Source: https://c1.adform.net/serving/cookie/match?party=14&cid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?cb=1716532049499	HTTP Parser: No favicon
Source: https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html#goog_1625940753	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/ecm3?id=4426393169609033625&ex=appnexus.com&gdpr=0	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=cnv.com&id=AQAJpakzu6vM3gIc8dq1AQEBAQEBAQCOqEmULAEBAI6oSZQs&expiration=1716618457&is_secure=true&gdpr=0	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU322PTV&prvid=2034%2C2031%2C2030%2C2074%2C2029%2C2106%2C2028%2C2027%2C2026%2C2025%2C2069%2C437%2C97%2C2109%2C99%2C2045%2C3012%2C2043%2C2087%2C2120%2C201%2C246%2C4%2C521%2C126%2C203%2C2037%2C2113%2C446%2C9%2C2099%2C173%2C251%2C175%2C450%2C2009%2C2126%2C3017%2C2125%2C214%2C338%2C459%2C77%2C2022%2C141%2C262%2C461%2C222%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU322PTV&prvid=2034%2C2031%2C2030%2C2074%2C2029%2C2106%2C2028%2C2027%2C2026%2C2025%2C2069%2C437%2C97%2C2109%2C99%2C2045%2C3012%2C2043%2C2087%2C2120%2C201%2C246%2C4%2C521%2C126%2C203%2C2037%2C2113%2C446%2C9%2C2099%2C173%2C251%2C175%2C450%2C2009%2C2126%2C3017%2C2125%2C214%2C338%2C459%2C77%2C2022%2C141%2C262%2C461%2C222%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=3lift.com&id=3671706280332458943464	HTTP Parser: No favicon
Source: https://bcp.crwdcntrl.net/5/c=4575/rand=575306443/pv=y/int=%23OpR%2341329%23pjnewsletter.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23pjnewsletter.com%20%3A%20Site%20Section%20%3A%20jewish-americans-send-powerful/adv=%23OpR%2342598%23Referral%20Site%20%3A%20/rt=ifr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221071&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078302&bpp=3&bdt=290&idt=658&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&prev_fmts=0x0%2C590x280%2C590x280%2C590x280%2C590x354&n...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221071&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078302&bpp=3&bdt=290&idt=658&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&prev_fmts=0x0%2C590x280%2C590x280%2C590x280%2C590x354&n...	HTTP Parser: No favicon
Source: https://pjnewsletter.com/trump-reveals-amazing-2024/	HTTP Parser: No favicon
Source: https://pjnewsletter.com/trump-reveals-amazing-2024/	HTTP Parser: No favicon
Source: https://pjnewsletter.com/trump-reveals-amazing-2024/	HTTP Parser: No favicon
Source: https://pjnewsletter.com/trump-reveals-amazing-2024/	HTTP Parser: No favicon
Source: https://pjnewsletter.com/trump-reveals-amazing-2024/	HTTP Parser: No favicon
Source: https://pjnewsletter.com/trump-reveals-amazing-2024/	HTTP Parser: No favicon
Source: https://pjnewsletter.com/trump-reveals-amazing-2024/	HTTP Parser: No favicon
Source: https://de.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-Beeswax_n-onetag_cnv_rx&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D70%26external_user_id%3D	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=cnv.com&id=AQAJndZOUe5PFQI4Z1TzAQEBAQEBAQCOqEgj2AEBAI6oSCPY&expiration=1716618493&is_secure=true&gdpr=0	HTTP Parser: No favicon
Source: https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html#goog_324414521	HTTP Parser: No favicon
Source: https://bcp.crwdcntrl.net/5/c=4575/rand=374118104/pv=y/int=%23OpR%2341329%23pjnewsletter.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23pjnewsletter.com%20%3A%20Site%20Section%20%3A%20trump-reveals-amazing-2024/adv=%23OpR%2342598%23Referral%20Site%20%3A%20pjnewsletter.com/rt=ifr	HTTP Parser: No favicon

Source: https://www.facebook.com/PatriotJournal	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/PatriotJournal	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/PatriotJournal	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/PatriotJournal	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.115:443 -> 192.168.2.4:50483 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.117:443 -> 192.168.2.4:51379 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:50272 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:51355 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:49740 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: twitter.com to https://x.com/intent/tweet?text=jewish+voters+blast+biden+with+eye-opening+move+-+this+could+be+an+election+game-changer&url=https%3a%2f%2fpjnewsletter.com%2fjewish-americans-send-powerful%2f

Source: global traffic

DNS traffic detected: number of DNS queries: 270

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=6.4.4 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/social-warfare/assets/css/style.min.css?ver=4.4.4 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/patriotjournal/style.css?v=1.0.20 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/patriotjournal/layouts/fixed-sidebar/style.css?v=1.0.20 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/patriotjournal/js/clever_ads.js HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/logo-1.png HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/israel-dc-768x403.png HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/social-warfare/assets/js/script.min.js?ver=4.4.4 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.3 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/inboxfirst-by-klicked-master/assets/subscribe.js?ver=1.1.2 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13376 HTTP/1.1Host: ruamupr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script/13376 HTTP/1.1Host: widget.adcovery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/j/pjnewsletter.com.1171406.js HTTP/1.1Host: jsc.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/j/pjnewsletter.com.1604063.js HTTP/1.1Host: jsc.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /count.js HTTP/1.1Host: thepatriotjournal.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vef91dfe02fce4ee0ad053f6de4f175db1715022073587 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Scripts/infinity.js.aspx?guid=0d94d46c-3cdb-4ae0-a09a-420aae9253fe HTTP/1.1Host: cdn.engine.4dsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.woff?ver=4.4.4 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script/US/1/13376 HTTP/1.1Host: widget.adcovery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/mick-pic-150x150.jpg HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/logo-1.png HTTP/1.1Host: pjnewsletter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/israel-dc-768x403.png HTTP/1.1Host: pjnewsletter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script/US/1/13376 HTTP/1.1Host: ruamupr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/j/pjnewsletter.com.1171406.es6.js HTTP/1.1Host: jsc.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /count-data.js?1=27459637%20https%3A%2F%2Fthepatriotjournal.com%2F%3Fp%3D27459637 HTTP/1.1Host: thepatriotjournal.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /easylist/13285 HTTP/1.1Host: souhaija.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/fetch HTTP/1.1Host: dotsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/ajs.js HTTP/1.1Host: cdn2.decide.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /p/j/pjnewsletter.com.1604063.es6.js HTTP/1.1Host: jsc.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track?pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&cb=1716532010397&r=pjnewsletter.com&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d65=Control&d66=8&d74=&e=playerLoaded&str=autostart HTTP/1.1Host: track1.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.4.4 HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_6L5Q55KN3H=GS1.1.1716532011.1.0.1716532011.0.0.0; _ga=GA1.1.1010184661.1716532012
Source: global traffic	HTTP traffic detected: GET /images/18529/18529-375x250.jpg HTTP/1.1Host: ruamupr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18710/18710-375x250.jpg HTTP/1.1Host: ruamupr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18662/18662-375x250.jpg HTTP/1.1Host: ruamupr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pl/3393/13376/yyxxzxyxyy.GIF HTTP/1.1Host: ruamupr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lad/17027843280544614?pubid=ld-2572-4971&pubo=https%3A%2F%2Fpjnewsletter.com&rid=&width=1000&path=%2Fjewish-americans-send-powerful%2F&x=131.5&y=163.875&utm_medium=email&utm_source=actengage&embed_type=7&embed_frame_container_type=3 HTTP/1.1Host: decide.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: c.adsco.reConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lad/17146331630347110?pubid=ld-9129-2903&pubo=https%3A%2F%2Fpjnewsletter.com&rid=&width=590&path=%2Fjewish-americans-send-powerful%2F&x=131.5&y=4059.84375&utm_medium=email&utm_source=actengage&embed_type=7&embed_frame_container_type=3 HTTP/1.1Host: decide.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /awl/3393/13376/18529,18710,18662/xzyxxyxxzz.GIF HTTP/1.1Host: ruamupr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18529/18529-375x250.jpg HTTP/1.1Host: widget.adcovery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18710/18710-375x250.jpg HTTP/1.1Host: widget.adcovery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/mick-pic-150x150.jpg HTTP/1.1Host: pjnewsletter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_6L5Q55KN3H=GS1.1.1716532011.1.0.1716532011.0.0.0; _ga=GA1.2.1010184661.1716532012; _gid=GA1.2.297082714.1716532012; _gat_UA-71705037-13=1
Source: global traffic	HTTP traffic detected: GET /images/18783/18783-375x250.jpg HTTP/1.1Host: widget.adcovery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /awl/3393/13376/18529,18710,18783/xzzxzzxzzx.GIF HTTP/1.1Host: widget.adcovery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/154908708357560?v=2.9.156&r=stable&domain=pjnewsletter.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: pjnewsletter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Tag.vrfy?time=240&id=0d94d46c-3cdb-4ae0-a09a-420aae9253fe&rand=16024&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=-300&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&kw=&bp=%7B%7D HTTP/1.1Host: engine.4dsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-7666278362879166&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1716221016&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&pra=5&wgl=1&easpi=0&aihb=0&asro=0&aslmct=0.7&asamct=0.7&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010319&bpp=6&bdt=2780&idt=2658&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8601797745957&frm=20&pv=2&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2695 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9378512249&adk=3988068036&adf=2307578502&pi=t.ma~as.9378512249&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010325&bpp=3&bdt=2786&idt=2706&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=1024&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=2746 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9847014599&adk=3441210196&adf=4066527037&pi=t.ma~as.9847014599&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010328&bpp=13&bdt=2789&idt=2811&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=1925&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&btvi=2&fsb=1&dtd=2815 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=6035134773&adk=1088046264&adf=3378254834&pi=t.ma~as.6035134773&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010341&bpp=1&bdt=2802&idt=2829&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=2491&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=3&fsb=1&dtd=3036 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 6.adsco.reConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532013842654359696&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&site=733245&i=1&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0 HTTP/1.1Host: c.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CaoeEbr%7C&abl=CA&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=3465 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 4.adsco.reConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18529/18529-375x250.jpg HTTP/1.1Host: ruamupr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18710/18710-375x250.jpg HTTP/1.1Host: ruamupr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18662/18662-375x250.jpg HTTP/1.1Host: ruamupr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track?pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&cb=1716532010397&r=pjnewsletter.com&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d65=Control&d66=8&d74=&e=playerLoaded&str=autostart HTTP/1.1Host: track1.aniview.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /awl/3393/13376/18529,18710,18783/xzzxzzxzzx.GIF HTTP/1.1Host: widget.adcovery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18529/18529-375x250.jpg HTTP/1.1Host: widget.adcovery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pl/3393/13376/yyxxzxyxyy.GIF HTTP/1.1Host: ruamupr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18710/18710-375x250.jpg HTTP/1.1Host: widget.adcovery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/18783/18783-375x250.jpg HTTP/1.1Host: widget.adcovery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /awl/3393/13376/18529,18710,18662/xzyxxyxxzz.GIF HTTP/1.1Host: ruamupr.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-71705037-13&cid=1010184661.1716532012&jid=1346688145&gjid=165817769&_gid=297082714.1716532012&_u=YADAAEAAAAAAACAAI~&z=455863173 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: c.adsco.reConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/gstats HTTP/1.1Host: souhaija.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 4.adsco.reConnection: keep-aliveOrigin: https://c.adsco.reUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://c.adsco.re/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Scripts/MediaScripts/b.js?v=4 HTTP/1.1Host: cdn.engine.4dsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: c.adsco.reConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://c.adsco.re/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Scripts/MediaScripts/push.js?v=4 HTTP/1.1Host: cdn.engine.4dsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 6.adsco.reConnection: keep-aliveOrigin: https://c.adsco.reUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://c.adsco.re/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/4575/cc_af.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=3722/pe=y/callback=g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback?41947963 HTTP/1.1Host: ad.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /images/mgid/mgid_ua.svg HTTP/1.1Host: cdn.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
Source: global traffic	HTTP traffic detected: GET /images/logos/Adchoices.svg HTTP/1.1Host: cdn.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
Source: global traffic	HTTP traffic detected: GET /1604063/1?cmpreason=wvz&w=300&h=795&sz=297x236&szp=1,2,3&szl=1;2;3&cols=1&sessionId=66503333-055f9&sessionPage=1&sessionNumberWeek=1&sessionNumber=1&lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532019398489248870&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0&mp4=1&ap=1&consentStrLen=0&uniqId=16514&niet=4g&nisd=false&pv=5&lct=1716458280&jsv=es6&pageView=1&dpr=1&ref=&hashCommit=428598fd&apt=2024-05-16T20%3A18%3A31%2B00%3A00&tfre=11632 HTTP/1.1Host: servicer.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
Source: global traffic	HTTP traffic detected: GET /Scripts/ippnotice.js?v=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2&80249607 HTTP/1.1Host: cdn.engine.4dsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CElMHMDNQZrrcD6eU7_UPu4uiiAOG65bpd9bFhf3eEL_hHhABILjbvStgyQagAZ26zZoDyAEBqQIiF0A1MwcoPqgDAcgDywSqBKcCT9Asl5OXzJvRQQpqX5lWBTLp6TcZQMtO7xJ23rUHI5L095cVIAMYmiLRO_q_nj6XNQTeGk0hEyBjv0f7umT8giBEoRpy-gnw0PBMUkHMBeciYVe2ZIY-1mcXkv7uQ1D45uuroBROJssJv-01I9csc5xFq2oanmjqHbLGXFYIZAuJ0G3jjx4k37sYYUzln4HIJkORcHmkNuYw-zQZXm6zKiLj8GKlT_W8S2e0OsZ8KaUppig19pBIPKhxUj9hP52YJYauPvkKAUjdW9V5a6Ra8ZfIc93RTQSS5KmDt97XxZu5SuB-wIomg_Nt0gwo7KHG27aMC-AykgfeGuGy1KG7EVBbKogpyRKtF_KnkpAD8HzmC64g_PLj4Ptjhn-IAJSLGoEr7dJ2esAEntqhm5IEiAXMu9rPRpIFBAgEGAGSBQQIBRgEoAYCgAfLxbJlqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQtv8C0ggkCIBhEAEYHzICigI6CYBAgMCAgICgKEi9_cE6WOKUzIjUpYYDmgmYAWh0dHBzOi8vbWVkaWNhbHN0dWR5aHVuZ2FyeS5jb20vcHJlLW1lZGljYWw_dXRtX3NvdXJjZT1nb29nbGVhZHMmdXRtX21lZGl1bT1jcGMmdXRtX2NhbXBhaWduPWFkcy00MyZ1dG1faWQ9NDMmdXRtX3Rlcm09JnV0bV9zb3VyY2U9Z29vZ2xlJnV0bV9tZWRpdW09Y3BjgAoByAsB2gwRCgsQ8MeSmbKyjrL1ARICAQPYEw2IFAPQFQGYFgGAFwGyFxwKGggAEhRwdWItNzY2NjI3ODM2Mjg3OTE2NhgAshgJEgKLVBgCIgEA&sigh=NJfKFE-4vBw&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwDaQooL90qYTeD_eDZCvFMGKJKs43LLl_5MJWPDpsc8GQ0yq7FGBJ37-7qxH7zXyJj1vccZx7Qu0qedydtnGyIH9vd4AHvNgVgbVP2zSt0YAQ&cbvp=2&vis=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=
Source: global traffic	HTTP traffic detected: GET /pv/?lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532013842654359696&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&site=733245&i=1&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0 HTTP/1.1Host: c.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /i.js?muid=o4n2DX9tTBrn&cbuster=1716532021707697797340 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /g/19574287/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwczovL2ltZ2hvc3RzLmNvbS90LzIwMjQtMDUvODI1Mjk4LzBlMzNmNTcyZjI2NzU3MWQ3ZWVhNjJkMjhlYzlkYmZiLnBuZw.webp?v=1716532022-QkteOGqeVaRcUJ02RxM5pJXViDpBNmbZFN-ozX0Ytaw HTTP/1.1Host: s-img.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Redirect.eng?MediaSegmentId=79057&dcid=1_ctx_19447f0d-6c1d-469b-90ed-716e90133242&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=-300&dst=True&v=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ftp9dKTijyUY1DoM0PXjOb7V8-PAm5K2yYFfRrH8tmMpVo-oX3bhntyeY00SFTAlPNOY8KxP6wdjHHZrwEzcZJ1BhsgJrIXyBhQ2cxeD_xgJf8g2OtgqfML26TQEIjZcDeUsig_m9fjiLGSqWrRzq4SOPgBdijpliEbSbjNu4rj0gi0crzlqMs5wzRELNRksHq6m1wM12ykDyySoSp7SQPGG25cjGvUPMzAyNeyc8i8kDlNMcuuyAiIfAt3vCDd_0PiNybdaHwey9X2brLpi7YviOrfkKhNqrQi3898KZLBu0&kw=&mw=800&mh=600&at=&abr=false&res=1280x1024 HTTP/1.1Host: engine.4dsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/19586376/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wNS83ODMzODUvNmYyMDQyNjAxZTQ4ZmE3NmRkNmRiOTZiNDg2OTc5ZDEuanBn.webp?v=1716532022-rlwLC0T0ZIliwQjwfcwCAKIGvNrQ4ESjT1wePK-FokQ HTTP/1.1Host: s-img.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pjnewsletter.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 6.adsco.reConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1.0/id5-api.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: c.adsco.reConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p HTTP/1.1Host: adsco.reConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 4.adsco.reConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=3722/ctax=Campaigns%5EExpose%5EViewers%5EPlacement%20111992%20-%20Viewer HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGMTBgQAAF4fCp8%3D"; _cc_aud="ABR4nGNgYGBICzA2YYADAA5WAR4%3D"
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=intentiq&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16afc0b29e2a47c4091aea1e77b64c9d.webp HTTP/1.1Host: de9a11s35xj3d.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c?v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyYzYhmwnRFTU4GOhSVcCXGjw7uJOs&v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76bFDl5xvVQU4rWzN5S_2tbuwqvfipqPw01I0PbiW_12CM-_N3sSmDR4P6wyYzYhmwh-vYa_Zsq_IqIeVGeEg4GM&fw=1&f=1&cid=1604063&cbuster=1716532023447415882264&pageImp=1&pvid=18fa947eb118598204d&pv=3&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy2WImwGwvmvL0y0Gz&rid=a1c9a944-1996-11ef-9b76-c84bd68370c0&tt=Referral&ts=actengage&iv=11&completion=2,3&muidn=o4n2DX9tTBrn HTTP/1.1Host: c.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /track?r=pjnewsletter.com&sn=&ic=0&tgt=0&app=&wi=540&he=303&test=5&d36=6.2.212&apppkg=&fv=3&proto=https&d65=Control&d66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&e=inventory&vi=0&plt=2&cb=1716532023413 HTTP/1.1Host: track1.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1x1.gif?id=825298&type=c&tg=d67dc17da8918b77c2d9121386e379a0&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=006f8 HTTP/1.1Host: a.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /1x1.gif?id=783385&type=c&tg=f8602a8c26ce5bee805634dcb1adaca2&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=0bc4c HTTP/1.1Host: a.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /api/adserver/tag/5/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532023417&wfc=1 HTTP/1.1Host: go1.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532025; tuuid_lu=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=intentiq&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532025; tuuid_lu=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9
Source: global traffic	HTTP traffic detected: GET /images/logos/Adchoices.svg HTTP/1.1Host: cdn.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /images/mgid/mgid_ua.svg HTTP/1.1Host: cdn.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ftp9dKTijyUY1DoM0PXjOb7V8-PAm5K2yYFfRrH8tmMpVo-oX3bhntyeY00SFTAlPNOY8KxP6wdjHHZrwEzcZJ1BhsgJrIXyBhQ2cxeD_xgJf8g2OtgqfML26TQEIjZcDeUsig_m9fjiLGSqWrRzq4SOPgBdijpliEbSbjNu4rj0gi0crzlqMs5wzRELNRksHq6m1wM12ykDyySoSp7SQPGG25cjGvUPMzAyNeyc8i8kDlNMcuuyAiIfAt3vCDd_0PiNybdaHwey9X2brLpi7YviOrfkKhNqrQi3898KZLBu0&PassBackUrl=&res=1280x1024&dcid=1_ctx_19447f0d-6c1d-469b-90ed-716e90133242&cu=&kw=&mw=800&mh=600 HTTP/1.1Host: engine.4dsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectmyusers.php?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D HTTP/1.1Host: cdn.connectad.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /712107.gif?partner_uid=o4n2DX9tTBrn& HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=mgid HTTP/1.1Host: rtb-usw.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532025; tuuid_lu=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=7cd9d7c7c13ff36&sync_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.mgid.com/m?cdsp=834104&c=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGPL3%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARq1E%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2ZIABRgaGWQuBNAAcEAJf"
Source: global traffic	HTTP traffic detected: GET /712056.gif? HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e4e1f5fe20753b6b614cda48b7e3c9f7.gif?redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D827026%26c%3D%5BUID%5D HTTP/1.1Host: cs.krushmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
Source: global traffic	HTTP traffic detected: GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /google?muidn=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&google_ula={guid},5&google_gid=CAESEGgG85p4mYXYSAnb9PGD50k&google_cver=1 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=827026&c=6cc08fb7-b307-5fe5-8438-f3b954a6a4a3 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D834104%26c%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncer/1?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D HTTP/1.1Host: sync-eu.connectad.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cdn.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cadsync
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D709070%26c%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A//cm.mgid.com/m%3Fcdsp%3D779131%26c%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=136&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=57e618150c70d90&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /mgid?c=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=&cd=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D556372%26c%3D%24%7BUSER%7D HTTP/1.1Host: cm.rtbsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D52%26key%3DBUYERUID HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m?cdsp=834104&c=4426393169609033625 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /i.gif?muidf=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: cm.idealmedia.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3nL6n2ZQMzyqTujYGQDkRw==
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D55%26key%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=aniview&gdpr=0&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adxcm.aspx?ssp=B81743F7-B474-4C19-8479-8697021ABDD2&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D31%26key%3D%24%24visitor_cookie%24%24 HTTP/1.1Host: inv-nets.admixer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D709070%26c%3D%24UID&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf
Source: global traffic	HTTP traffic detected: GET /server_match?partner_id=1944&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?&gdpr=0&us_privacy=1---&cb=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F7%2F17902%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D0%26gpp_sid%3D%26us_privacy%3D%26A%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Damx_com%26cbx%3DaHR0cHM6Ly9jbS5tZ2lkLmNvbS9tP2Nkc3A9Nzc5MTMxJmM9%26uid%3D HTTP/1.1Host: id.a-mx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=136&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=532c50a4-cd6b-40c9-b238-9f975626694b#1716532028798
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9&ckls=true&ci=7c0kCriUA6&nc=false&trid=-1958837753 HTTP/1.1Host: sync1.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intentIQ=7c0kCriUA6; IQver=1.9
Source: global traffic	HTTP traffic detected: GET /bounce HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=161673&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?muidf=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532028,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=556372&c=23fe11c4-ed15-5d1a-95bd-f620677ba1a0 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=connectad&gdpr=0&gdpr_consent=&f=i&uid=7e43a2ac-3d1d-41f0-a785-c344abfed582 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?biddername=9&key=73e2d52bb252aa355f5ddbe59e41688&gpp_sid=&gpp=&_fw_gdpr=0&_fw_gdpr_consent= HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790
Source: global traffic	HTTP traffic detected: GET /sync?ssp=rtaplus&user_id=7e43a2ac-3d1d-41f0-a785-c344abfed582&gdpr=0&us_privacy=1YNY HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=31&key=c3f2dced77d84f53905889bf42173c38 HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=55&key=4426393169609033625 HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790
Source: global traffic	HTTP traffic detected: GET /m?cdsp=817115&c=7e43a2ac-3d1d-41f0-a785-c344abfed582 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&us_privacy=1YNY&r=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata5%26uuid%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=23&key=99e92fd7-7df6-414d-ad83-81abe903bf95 HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790
Source: global traffic	HTTP traffic detected: GET /pub/sync?pub6103523253312&gdpr=0&consent=&us_privacy= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user-sync?zone=176971&t=image&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D27%26buyeruid%3D%7BUID%7D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEqlwFodHRwczovL3N5bmMuYW5pdmlldy5jb20vY29va2llc3luY2VuZHBvaW50P2F1aWQ9MTcxNjUzMjAyNTk0NS0xNzIwMzExNTAwMTQtMDAwMjAxLTAwMi0wMDQ3OTAmYmlkZGVybmFtZT01MiZrZXk9dWEtZDNhNWE1NjctODlkZC0zM2VkLWJlMjAtNDBjYmIzMDg3MDgxMgIbITgB HTTP/1.1Host: sync.adkernel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m?cdsp=709070&c=ItUjALZH-23s9-wqRaSHYOyf HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=aniview&zcc=1&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D&cb=1716532029220 HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.29%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=connectad HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
Source: global traffic	HTTP traffic detected: GET /cchain/7/17902?gpp=&gdpr_consent=&gdpr=0&gpp_sid=&us_privacy=&A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=amx_com&cbx=aHR0cHM6Ly9jbS5tZ2lkLmNvbS9tP2Nkc3A9Nzc5MTMxJmM9&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?partner_id=1944&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%7BPUB_USER_ID%7D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f102e783-2700-4bb9-aa0d-8e4779f6d278; tuuid_lu=1716532029
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1716532029111.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fbidder%3Dsovrn%26dataid%3Ddata12%26uuid%3D%24UID&us_privacy=1YNY HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf
Source: global traffic	HTTP traffic detected: GET /ps/?_=1716532029111.&ri=0013300001hSPhhAAG&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553%26partner_url%3Dhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fbiddername%253D215%2526auid%253D1716532025945-172031150014-000201-002-004790%2526gdpr%253D0%2526gdpr_consent%253D%2526ccpa%253D1---%2526key%253D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGPL3%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARq1E%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2ZIABRgaGWQuBNAAcEAJf"
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=161673&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID&rdf=1 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&ts=1716532029111.6&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
Source: global traffic	HTTP traffic detected: GET /e4e1f5fe20753b6b614cda48b7e3c9f7.gif?gdpr=0&gdpr_consent=&ccpa=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D675043%26c%3D%5BUID%5D HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /umatch/1?bidder=rtbhouse&dataid=data6&uuid=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=connectad HTTP/1.1Host: sync.connectad.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlIyK1FYcVgwL2xKUDZzVlR4REVzWUE9PSIsInZhbHVlIjoiWDlxMXBSeGNvY1JlN04rTCtFcWQ2WThPRjZGSVNCcHQ3VHJEWkZKQjlnL0ZaNUtvRVJuQkJ2cExIZXIrSTZ5NHk4Njc0Z0E1MHYvTGE1Wk9WbHA5UXRxcWxiK2dNSUlDTjRiSnhOYnZ6eGdaWnBSTnBpY2lpYnVYdHBRZ2E4aVkrQnA1NXRybFcwcUltczhpMXZ6U013PT0iLCJtYWMiOiJhZGU2NjZhMDRlODMwMTE5NjI0NjM3N2ZmNDU1NWFkNWMzZDBkYWVkZmY0YmJmOTM2ZmE4OGQ0MzE4M2I3MmYyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /match?external_user_id=o4n2DX9tTBrn&publisher_dsp_id=490&dsp_callback=1&&gdpr=0&gdpr-consent=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%834124%7D HTTP/1.1Host: match.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f102e783-2700-4bb9-aa0d-8e4779f6d278; tuuid_lu=1716532029
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=rtaplus&user_id=7e43a2ac-3d1d-41f0-a785-c344abfed582&gdpr=0&us_privacy=1YNY HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=a9b9419f-523a-42c9-8786-88279e65c003; c=1716532029; tuuid_lu=1716532029
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=the33across&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /34b9aae5baa016b251b9fc488f4a97cd.gif?puid=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&ccpa_consent= HTTP/1.1Host: sync.e-volution.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cchain/0?&cb=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D176971%26dsp%3D343983%26t%3Dimage%26uid%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /umatch/1?bidder=sovrn&dataid=data12&uuid=ItUjALZH-23s9-wqRaSHYOyf HTTP/1.1Host: sync.connectad.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlIyK1FYcVgwL2xKUDZzVlR4REVzWUE9PSIsInZhbHVlIjoiWDlxMXBSeGNvY1JlN04rTCtFcWQ2WThPRjZGSVNCcHQ3VHJEWkZKQjlnL0ZaNUtvRVJuQkJ2cExIZXIrSTZ5NHk4Njc0Z0E1MHYvTGE1Wk9WbHA5UXRxcWxiK2dNSUlDTjRiSnhOYnZ6eGdaWnBSTnBpY2lpYnVYdHBRZ2E4aVkrQnA1NXRybFcwcUltczhpMXZ6U013PT0iLCJtYWMiOiJhZGU2NjZhMDRlODMwMTE5NjI0NjM3N2ZmNDU1NWFkNWMzZDBkYWVkZmY0YmJmOTM2ZmE4OGQ0MzE4M2I3MmYyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /m?cdsp=665953&c=f102e783-2700-4bb9-aa0d-8e4779f6d278 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=796887&c=212620189715653 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=779131&c=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=0 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /sync/openx/51acd139-e56b-e718-c937-224392025bee?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=327352f8-d01a-4565-9f98-77efcc2259b7; c=1716532030; tuuid_lu=1716532030
Source: global traffic	HTTP traffic detected: GET /match?bid=dn2m51u&uid=o4n2DX9tTBrn&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/19574287/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwczovL2ltZ2hvc3RzLmNvbS90LzIwMjQtMDUvODI1Mjk4LzBlMzNmNTcyZjI2NzU3MWQ3ZWVhNjJkMjhlYzlkYmZiLnBuZw.webp?v=1716532022-QkteOGqeVaRcUJ02RxM5pJXViDpBNmbZFN-ozX0Ytaw HTTP/1.1Host: s-img.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /g/19586376/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wNS83ODMzODUvNmYyMDQyNjAxZTQ4ZmE3NmRkNmRiOTZiNDg2OTc5ZDEuanBn.webp?v=1716532022-rlwLC0T0ZIliwQjwfcwCAKIGvNrQ4ESjT1wePK-FokQ HTTP/1.1Host: s-img.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /c?v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyYzYhmwnRFTU4GOhSVcCXGjw7uJOs&v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76bFDl5xvVQU4rWzN5S_2tbuwqvfipqPw01I0PbiW_12CM-_N3sSmDR4P6wyYzYhmwh-vYa_Zsq_IqIeVGeEg4GM&fw=1&f=1&cid=1604063&cbuster=1716532023447415882264&pageImp=1&pvid=18fa947eb118598204d&pv=3&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy2WImwGwvmvL0y0Gz&rid=a1c9a944-1996-11ef-9b76-c84bd68370c0&tt=Referral&ts=actengage&iv=11&completion=2,3&muidn=o4n2DX9tTBrn HTTP/1.1Host: c.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /m?cdsp=827026&c=6cc08fb7-b307-5fe5-8438-f3b954a6a4a3 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /google?muidn=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&google_ula={guid},5&google_gid=CAESEGgG85p4mYXYSAnb9PGD50k&google_cver=1 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ftp9dKTijyUY1DoM0PXjOb7V8-PAm5K2yYFfRrH8tmMpVo-oX3bhntyeY00SFTAlPNOY8KxP6wdjHHZrwEzcZJ1BhsgJrIXyBhQ2cxeD_xgJf8g2OtgqfML26TQEIjZcDeUsig_m9fjiLGSqWrRzq4SOPgBdijpliEbSbjNu4rj0gi0crzlqMs5wzRELNRksHq6m1wM12ykDyySoSp7SQPGG25cjGvUPMzAyNeyc8i8kDlNMcuuyAiIfAt3vCDd_0PiNybdaHwey9X2brLpi7YviOrfkKhNqrQi3898KZLBu0&PassBackUrl=&res=1280x1024&dcid=1_ctx_19447f0d-6c1d-469b-90ed-716e90133242&cu=&kw=&mw=800&mh=600 HTTP/1.1Host: engine.4dsply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IKSR={}; INF_DFL8=false; IUID=604bb3ab-a770-46f1-9190-d795b2aaca34; ISSH=73827E; VMI=; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2024-05-24T06:26:55.6674781Z"}; ILPLU=#5/24/2024 6:26:55 AM; ILEALC=#5/24/2024 6:26:55 AM; ILMPF=#True; IPMPLU=#1/1/0001 12:00:00 AM; IPMUID=#; BSWUID=#; IBL=#[]; IOPT=#[]; ISH=#{"22696":[{"SId":"73827E","D":"24/5/23T23:26:56"}]}; ISH_Q=#[22696]
Source: global traffic	HTTP traffic detected: GET /track?r=pjnewsletter.com&sn=&ic=0&tgt=0&app=&wi=540&he=303&test=5&d36=6.2.212&apppkg=&fv=3&proto=https&d65=Control&d66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&e=inventory&vi=0&plt=2&cb=1716532023413 HTTP/1.1Host: track1.aniview.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
Source: global traffic	HTTP traffic detected: GET /1x1.gif?id=783385&type=c&tg=f8602a8c26ce5bee805634dcb1adaca2&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=0bc4c HTTP/1.1Host: a.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /1x1.gif?id=825298&type=c&tg=d67dc17da8918b77c2d9121386e379a0&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=006f8 HTTP/1.1Host: a.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
Source: global traffic	HTTP traffic detected: GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=675043&c=0ff1c4a5-e08d-421b-badf-e6142feb667b HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /umatch/1?dataid=data5&uuid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a HTTP/1.1Host: sync.connectad.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlIyK1FYcVgwL2xKUDZzVlR4REVzWUE9PSIsInZhbHVlIjoiWDlxMXBSeGNvY1JlN04rTCtFcWQ2WThPRjZGSVNCcHQ3VHJEWkZKQjlnL0ZaNUtvRVJuQkJ2cExIZXIrSTZ5NHk4Njc0Z0E1MHYvTGE1Wk9WbHA5UXRxcWxiK2dNSUlDTjRiSnhOYnZ6eGdaWnBSTnBpY2lpYnVYdHBRZ2E4aVkrQnA1NXRybFcwcUltczhpMXZ6U013PT0iLCJtYWMiOiJhZGU2NjZhMDRlODMwMTE5NjI0NjM3N2ZmNDU1NWFkNWMzZDBkYWVkZmY0YmJmOTM2ZmE4OGQ0MzE4M2I3MmYyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /m?cdsp=834104&c=4426393169609033625 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /api/adserver/tag/5/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532023417&wfc=1 HTTP/1.1Host: go1.aniview.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
Source: global traffic	HTTP traffic detected: GET /5/c=3722/ctax=Campaigns%5EExpose%5EViewers%5EPlacement%20111992%20-%20Viewer HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGPL3%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARq1E%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2ZIABRgaGWQuBNAAcEAJf"
Source: global traffic	HTTP traffic detected: GET /bounce HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#1
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16afc0b29e2a47c4091aea1e77b64c9d.webp HTTP/1.1Host: de9a11s35xj3d.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9&ckls=true&ci=7c0kCriUA6&nc=false&trid=-1958837753 HTTP/1.1Host: sync1.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intentIQ=7c0kCriUA6; IQver=1.9; IQMID=137264047#1716532029761; IQPData=137264047#1716532029745#0#1716532029745; intentIQCDate=1716532029753; CSDT=UEQ6MTUzNThfMCZVRGZkU3Ex; ASDT=0
Source: global traffic	HTTP traffic detected: GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m?cdsp=665953&c=%FD4124} HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /sync?p=evol&redir=https%3A%2F%2Fsync.e-volution.ai%2F40425ffe10103241a433b21c10aa797b.gif?puid={uid} HTTP/1.1Host: srv.aso1.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak\|t
Source: global traffic	HTTP traffic detected: GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532026400&plt=2&asid=64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C650c2ceaf96af061180a223b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C64e4aab4c56614fd36087918&ofpr=%2C1%2C1%2C1%2C1.4%2C1.25%2C1%2C1&fpo=%2C%2C%2C%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1%2C1%2C1%2C1 HTTP/1.1Host: track1.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEKxcbJCz5zyxgFEK_iiZGYg&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak\|t
Source: global traffic	HTTP traffic detected: GET /m?cdsp=556372&c=23fe11c4-ed15-5d1a-95bd-f620677ba1a0 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=709070&c=ItUjALZH-23s9-wqRaSHYOyf HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /track/cmb/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSgCMgsI6sie5Kjx_TwQBTgB
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSgCMgsI6sie5Kjx_TwQBTgB
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak\|t
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3671706280332458943464; tluid=3671706280332458943464
Source: global traffic	HTTP traffic detected: GET /m129331.jpg HTTP/1.1Host: digiadsply.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD4zUGYCELJAFvC_17AscA26pytyXQoFEgEBAQGEUWZaZtwr0iMA_eMAAA&S=AQAAAr0R_l4KJV9yn-8d-jhudxw
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJW*q_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=bs&ovsid=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/JQJVgZiOg-5TSAw2pZLVBw?csrc=&gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=16&user_id=CAESEEMff3yn0Jz7yUW5T8EZNUE&google_cver=1&ssp=rtaplus&bsw_param=a9b9419f-523a-42c9-8786-88279e65c003&gdpr_consent=&gdpr=0 HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532031; tuuid_lu=1716532031; tuuid=327352f8-d01a-4565-9f98-77efcc2259b7
Source: global traffic	HTTP traffic detected: GET /match/bounce/?bid=dn2m51u&uid=o4n2DX9tTBrn&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=49087993&p=156077&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNY HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SyncRTB3=1717718400%3A220; ipc=161673^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID^1^0; pi=161673:2; KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; chkChromeAb67Sec=1
Source: global traffic	HTTP traffic detected: GET /usersync/turn/8792414088104974232?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.29%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push/check?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1716532031795; TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZlAzPgAAKneghQAZ&_test=ZlAzPgAAKneghQAZ HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SyncRTB3=1717718400%3A220; ipc=161673^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID^1^0; pi=161673:2; KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; chkChromeAb67Sec=1
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?biddername=215&auid=1716532025945-172031150014-000201-002-004790&gdpr=0&gdpr_consent=&ccpa=1---&key=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=&xi=33&xu=3671706280332458943464 HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /40425ffe10103241a433b21c10aa797b.gif?puid=390d70214744565173549ca7ef99c13d6d3019f2 HTTP/1.1Host: sync.e-volution.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: v_usr=dea6b5ce-8eb0-4fbd-a447-2f5d230e440b; v_red=4
Source: global traffic	HTTP traffic detected: GET /pixel/1?dataid=data3&uuid=327352f8-d01a-4565-9f98-77efcc2259b7 HTTP/1.1Host: sync-eu.connectad.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sync-eu.connectad.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlkrNmpleFlWRWFxZ3RUd1MyYStDa3c9PSIsInZhbHVlIjoiUEVGRS83UzR3MS9tbXBLdHlmWWpHOVNqMGx3U1BaL1p2ZlFLRW1sakhYM2JQSGhzS3VHeE1KbVBXZlFzazFYeTI3cHhONnZubEsvK2xxT0FBNUZva05qQ1BSaVF3NFY3Qm5QNEdoNzUrN2taVGFEOWE2WmhDUUF3N2Z1dnh3elZhQjhld0h5dmhlRXBSREw2OXhOS2g4enZPc0pnNGc5YTduWlF1VTAvOW9XTUtpV0FRZ2JvLzlnLzQyU2pUWFV5RGFuUm9ld200REtBY1l1bXhzUE50dmZaWlp1TytWY3gzY29DOGNDR0lRQT0iLCJtYWMiOiJiNmVlYjNlYjI4ZDFmN2ExNjFkZTNjMDExYWFiMTgzNjJmMzJhOTM5MDBjMGFlMGYzNzZhYThjNDEwYmQ1ZTY1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /m?cdsp=43070&c=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=665953&c=f102e783-2700-4bb9-aa0d-8e4779f6d278 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=796887&c=212620189715653 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=4426393169609033625 HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /m?cdsp=779131&c=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=0 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=675043&c=0ff1c4a5-e08d-421b-badf-e6142feb667b HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /ps/?xi=99&us_privacy=&xu=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD~A HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /m?cdsp=665953&c=%FD4124} HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532031; tuuid_lu=1716532031; tuuid=327352f8-d01a-4565-9f98-77efcc2259b7
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEKxcbJCz5zyxgFEK_iiZGYg&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /gm/v3 HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#2
Source: global traffic	HTTP traffic detected: GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532026400&plt=2&asid=64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C650c2ceaf96af061180a223b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C64e4aab4c56614fd36087918&ofpr=%2C1%2C1%2C1%2C1.4%2C1.25%2C1%2C1&fpo=%2C%2C%2C%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1%2C1%2C1%2C1 HTTP/1.1Host: track1.aniview.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?biddername=5&pid=59c9148628a0612da3689288&key=LWKAUNHL-D-BFYD HTTP/1.1Host: sync.aniview.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
Source: global traffic	HTTP traffic detected: GET /m129331.jpg HTTP/1.1Host: digiadsply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=ZTkwNDY0YjctYmNiMC0yYmY1LWVkMDAtNmUwZmE3Yjc1OGM3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LWKAUNHL-D-BFYD&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync/openx/51acd139-e56b-e718-c937-224392025bee?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=YAm-fjTBRB2GxG2EiqWDgw&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=7F542745-2D60-41EB-9A96-52B90C82DF34&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=33&external_user_id=3671706280332458943464&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ipc=161673^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID^1^0; KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; chkChromeAb67Sec=2; pi=156077:3; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJWq_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30&gdpr=0 HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity/envelope?pid=105 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=the33across&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; c=1716532031; tuuid_lu=1716532031
Source: global traffic	HTTP traffic detected: GET /i/231/8.gif?o=api&id5id=ID5U60D8kuyqjuyq4y-AGkkfd2s00CjK_Y8Nw4MavDQ5GChKe5LEBa3C9wfjxiCMq-9&gdpr_consent=undefined&gdpr=false HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#2
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.e-volution.ai%2F3b2daa038df3c30052752dd6f56bb9f0.gif%3Fpuid%3D%24UID%26gdpr%3D[GDPR]%26gdpr_consent%3D[GDPR_CONSENT]%26us_privacy%3D[CCPA_CONSENT] HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJW*q_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /cookie/?ssp=9&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topics_frame.html?bidder=openx HTTP/1.1Host: pa.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
Source: global traffic	HTTP traffic detected: GET /web/cookie/bidswitch/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: sonata-notifications.taptapnetworks.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=dn2m51u&google_gid=CAESEK6XEEHIgPaZKgYSt5TDsHM&google_cver=1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=200&key=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_5=LWKAUNHL-D-BFYD
Source: global traffic	HTTP traffic detected: GET /3b2daa038df3c30052752dd6f56bb9f0.gif?puid=4426393169609033625&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&us_privacy=[CCPA_CONSENT] HTTP/1.1Host: sync.e-volution.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: v_usr=dea6b5ce-8eb0-4fbd-a447-2f5d230e440b; v_red=4\|38
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=4426393169609033625&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&partnerID=161673&pmc=1&pr=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D712807%26c%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=30&p=59&cp=id5&cu=1&url=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F203%2F7%2F2.gif%3Fpuid%3D%40%40CRITEO_USERID%40%40%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dis.eu.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372448948567406736&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=413&ssp=pubmatic&user_id=csonata_9e3fb671-cc11-4e32-a9a9-a424db4bec5f&bsw_param=327352f8-d01a-4565-9f98-77efcc2259b7&expires=10&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
Source: global traffic	HTTP traffic detected: GET /m?cdsp=712807&c=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /oiad745.gif?gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&us_privacy=[US_PRIVACY]&redir=https%3A%2F%2Fsync.e-volution.ai%2F159323af27f5e0e6efefdcdf238951e6.gif%3Fpuid%3D%7B%24PARTNER_UID%7D HTTP/1.1Host: us.ck-ie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSABKAIyCwjqyJ7kqPH9PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://pjnewsletter.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJW*q_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /instream/video/client.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?xi=1&xu=LWKAUNHL-D-BFYD HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=99&external_user_id=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD%7EA&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5141210831119936251 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; PugT=1716532035; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736
Source: global traffic	HTTP traffic detected: GET /live/liveCS.php?source=external&advId=100&advUuid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: live.primis.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; PugT=1716532035; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=8792414088104974232
Source: global traffic	HTTP traffic detected: GET /c/231/203/7/2.gif?puid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#3; 3pi=
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bidswitch&ttd_tpi=1&ttd_puid=the33across&gdpr=&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSABKAIyCwjqyJ7kqPH9PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=sharethrough HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1Host: ipac.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1Host: d5p.de17a.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9
Source: global traffic	HTTP traffic detected: GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=30&external_user_id=LWKAUNHL-D-BFYD&ts=1716532036&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /umatch/1?dataid=data1&uuid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.connectad.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=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
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGwoMc2hhcmV0aHJvdWdoEgsIprfz7ZLx_TwQBRgBIAEoAjILCLCt9pqp8f08EAU4AVoMc2hhcmV0aHJvdWdoYAI.
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/7F542745-2D60-41EB-9A96-52B90C82DF34?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=7F542745-2D60-41EB-9A96-52B90C82DF34&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDSYNC=190u~2ili; A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
Source: global traffic	HTTP traffic detected: GET /us?loc=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F434%2F6%2F3.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&consent= HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20782884&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
Source: global traffic	HTTP traffic detected: GET /match?bid=1mpjpn0&turn_id=8792414088104974232&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
Source: global traffic	HTTP traffic detected: GET /sync/prebid?gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dopenx%26uid%3D%24%7BUID%7D HTTP/1.1Host: rtb.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58570/occ?uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDSYNC=190u~2ili; A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
Source: global traffic	HTTP traffic detected: GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1Host: core.iprom.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWKAUNHL-D-BFYD HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intentIQ=7c0kCriUA6; IQver=1.9; IQMID=137264047#1716532029761; IQPData=137264047#1716532029745#0#1716532029745; intentIQCDate=1716532029753; CSDT=UEQ6MTUzNThfMCZVRGZkU3Ex; ASDT=0
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dappnexus%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191503&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dindex_rtb%26uid%3D HTTP/1.1Host: ssum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aRnoeUPME7uQmKvEjTsZbhMmGQ3TrrYor31ZdZdcbtc
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=2373818703 HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AFFICHE_W=1cd23kFpmYfV88
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dsovrn%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; _ljtrtb_80=LWKAUNHL-D-BFYD
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4541464280 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCITylJ2p8f08EAU4AVoJYmlkc3dpdGNoYAI.
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; amdgt_lk%40cfs=1
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=93&user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&expires=30&ssp=the33across&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_21} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
Source: global traffic	HTTP traffic detected: GET /sync?ssp=adaptmx&user_id=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
Source: global traffic	HTTP traffic detected: GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=532c50a4-cd6b-40c9-b238-9f975626694b#1716532028798; _ssuma=eyIzOSI6MTcxNjUzMjAyOTQyMywiNyI6MTcxNjUzMjAyOTQyM30
Source: global traffic	HTTP traffic detected: GET /c/231/434/6/3.gif?puid=1f42063c-1e64-4491-87eb-aa2cbcbeb39f&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=bs&ovsid=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: contextual.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAJTiE7MoGcAABTuYnJhWg; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=amx&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&do=pjnewsletter.com HTTP/1.1Host: ow.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69
Source: global traffic	HTTP traffic detected: GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dindex_rtb%26uid%3D&gdpr=0&gdpr_consent=&s=191503&us_privacy=&C=1 HTTP/1.1Host: ssum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZlAzRkt3uaUAAD53AR3IEwAA; CMPS=1233; CMPRO=1233
Source: global traffic	HTTP traffic detected: GET /bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADGRX_UID=ab2f4a30-1996-11ef-b02a-b3dce69ae9da
Source: global traffic	HTTP traffic detected: GET /ps/?xi=10&us_privacy=&xu=120ce5db-d35e-4f16-8347-f58a51fd3b1b HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=67342843&p=156077&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNY HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /usersync/tradedesk/264441c2-0e4b-4098-920f-1c8a6b45a578 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.102%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=amx&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&do=pjnewsletter.com HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dadaptmx%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=openx&uid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=adform&uid=4259863599046777896 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=appnexus&uid=4426393169609033625 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /setuid/yahoo?uid=y-PbfZl6pE2uHzLdIJV6yxRvAif23THj.r9tU7_aI-~A HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; amdgt_lk%40cfs=1; _sv3_7=1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESECrc2Ar-_vJg4cjpdmSF9zs&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=4259863599046777896 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-dsl4wtVE2uUU8Rdkav_IeU5Zg.sDJ70-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=ab2f4a30-1996-11ef-b02a-b3dce69ae9da HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=25&external_user_id=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: green.erne.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=503321D4229142C7A5087AC9113CE764
Source: global traffic	HTTP traffic detected: GET /?partner=214&mapped=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://id5-sync.com/c/231/2/5/4.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZlAzPgAAKneghQAZ&_test=ZlAzPgAAKneghQAZ HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=10&external_user_id=120ce5db-d35e-4f16-8347-f58a51fd3b1b&ts=1716532039&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /m?cdsp=43070&c=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"712807":1716532036,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=4426393169609033625 HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LWKAUNHL-D-BFYD&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /m?cdsp=712807&c=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: cm.mgid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"712807":1716532036,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=33&external_user_id=3671706280332458943464&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.102%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=YAm-fjTBRB2GxG2EiqWDgw&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?biddername=5&pid=59c9148628a0612da3689288&key=LWKAUNHL-D-BFYD HTTP/1.1Host: sync.aniview.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=99&external_user_id=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD%7EA&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /match?uid=ZlAzPgAAKneghQAZ&bid=0rijhbu&dc_rc=3&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /umatch/1?dataid=data1&uuid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.connectad.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=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
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=30&external_user_id=LWKAUNHL-D-BFYD&ts=1716532036&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=731f80cc-470e-4b5f-6ce2-635d7676424c
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AAJTiE7MoGcAABTuYnJhWg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=index_rtb&uid=ZlAzRkt3uaUAAD53AR3IEwAA%261233 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:b87569e9-b5c2-4e16-b58e-f18cc16ffd7e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=MDVlYzYzNWUwOGE3ZWFmZWVjNzM4YWYzNjA3YjIwMzA1ZTlmMjYwMg&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=8554246236155519815
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TFdLQVVOSEwtRC1CRllE&google_push=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:503321D4229142C7A5087AC9113CE764&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; chkChromeAb67Sec=5; pi=156077:4; SPugT=1716532038; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; PugT=1716532038; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da
Source: global traffic	HTTP traffic detected: GET /g/v2/371.json HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156077&gdpr=0&gdpr_consent=&us_privacy=1YNY HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037; chkChromeAb67Sec=5; pi=156077:4
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dadaptmx%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; _ljtrtb_80=LWKAUNHL-D-BFYD
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/7F542745-2D60-41EB-9A96-52B90C82DF34?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWKAUNHL-D-BFYD HTTP/1.1Host: sync.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intentIQ=7c0kCriUA6; IQver=1.9; IQMID=137264047#1716532029761; intentIQCDate=1716532029753; ASDT=0; CSDT=UEQ6MTUxMDZfMCZVRGZkVjBnIzE1MzU4XzAmVURmZFNxMQ; IQPData=137264047#1716532038110#0#1716532029745
Source: global traffic	HTTP traffic detected: GET /csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D175kELn9xvfXoe3C4qjRaWS8%26source_user_id%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-dsl4wtVE2uUU8Rdkav_IeU5Zg.sDJ70-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; chkChromeAb67Sec=5; pi=156077:4; SPugT=1716532038; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; PugT=1716532038; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; chkChromeAb67Sec=5; pi=156077:4; SPugT=1716532038; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; PugT=1716532038; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ*<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; chkChromeAb67Sec=5; pi=156077:4; SPugT=1716532038; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; PugT=1716532038
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037; chkChromeAb67Sec=5; pi=156077:4; SPugT=1716532038
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=503321D4229142C7A5087AC9113CE764
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
Source: global traffic	HTTP traffic detected: GET /map/c=8587/tp=CLOD/tpid=20495bfc7d8dc46d/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=10&external_user_id=120ce5db-d35e-4f16-8347-f58a51fd3b1b&ts=1716532039&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=amx&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&do=pjnewsletter.com HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4426393169609033625; anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]tbnF:^1+9RkhB3zrqv.`'Jrt5LGe:(1a5C2q]>)S?Fn4bzU'Ixpv(E:L>>e5)hn)R8EfNYTnWGlwX=<@[5V!pAuFlW?'2)8bi@6n_Ik8$S6!/D)oz@_-4J]s0eUY-cAC#PK#HJ_H_JV//DXt7@T0M?RT%yDcVb6=dcnB40/+0J2!4UK5ke5!T; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoxOVoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==
Source: global traffic	HTTP traffic detected: GET /?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent HTTP/1.1Host: pixel-eu.onaudience.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8792414088104974232&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; PugT=1716532037
Source: global traffic	HTTP traffic detected: GET /pixel/p-QcHdy7VcGLKJK.gif?idmatch=0&siteId=995936&rndcb=7057081357 HTTP/1.1Host: cms.quantserve.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EJ0BCwH2K_ijAA; mc=66503341-c2a82-65fef-9a444
Source: global traffic	HTTP traffic detected: GET /c/231/2/5/4.gif?puid=4426393169609033625&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=&bidder_id=25&external_user_id=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AAJTiE7MoGcAABTuYnJhWg&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bitoIsSecure=ok; bito=AAJTiE7MoGcAABTuYnJhWg
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&expiration=1716618440&nuid=7F542745-2D60-41EB-9A96-52B90C82DF34&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; chkChromeAb67Sec=5; pi=156077:4; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; SPugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPc
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3Ddn2m51u%26 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]tbnF:^1+9RkhB3zrqv.`'Jrt5LGe:(1a5C2q]>)S?Fn4bzU'Ixpv(E:L>>e5)hn)R8EfNYTnWGlwX=<@[5*V!pAuFlW?'2)8bi@6n_Ik8$S6!/D)oz@_-4J]s0eUY-cAC#PK#HJ_H_JV//DXt7@T0M?RT%yDcVb6=dcnB40/+0J2!4UK5ke5!T; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoxOVoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=175kELn9xvfXoe3C4qjRaWS8&source_user_id=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=462&ssp=adaptmx&user_id=k-ITlwOc5fRVdJJqXINxZak8-LL-h-fL9jO0WZ8A&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
Source: global traffic	HTTP traffic detected: GET /ups/58771/fed?1p=0&gdpr=0&gdpr_consent=&us_privacy=&pixelId=58771&puid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://prebid.a-mo.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6; PugT=1716532040
Source: global traffic	HTTP traffic detected: GET /?partner=104&icm&cver&mapped=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1
Source: global traffic	HTTP traffic detected: GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253DGp1rLOrtXaWRVhMjTQSQjWUQ%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: pixel-eu.onaudience.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156423&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6; KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; PugT=1716532039
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=E325B534875EA12A
Source: global traffic	HTTP traffic detected: GET /usersync/quantcast/dPjxLHH98C1vrfZ9evzpKneooXpv96UodvrYZ9A3? HTTP/1.1Host: sync.1rx.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AAJTiE7MoGcAABTuYnJhWg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=8554246236155519815
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /getuid/id5?r=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F441%2F4%2F5.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?uid=4426393169609033625&bid=2cr76e1&dc_rc=4&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=bid_switch&uid=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: pb-am.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prebid.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
Source: global traffic	HTTP traffic detected: GET /ups/58771/fed?1p=0&gdpr=0&gdpr_consent=&us_privacy=&pixelId=58771&puid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info2?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=E325B534875EA12A
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=8554246236155519815&gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bitoIsSecure=ok; bito=AAJTiE7MoGcAABTuYnJhWg
Source: global traffic	HTTP traffic detected: GET /c/231/441/4/5.gif?puid=e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCLbw6aip8f08EAU4AVoLYWRjb25kdWN0b3JgAg..
Source: global traffic	HTTP traffic detected: GET /csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
Source: global traffic	HTTP traffic detected: GET /ups/58679/cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=Gp1rLOrtXaWRVhMjTQSQjWUQ&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; PugT=1716532039; KRTBCOOKIE_32=11175-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&22715-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&23519-AQAG15iAZjy5FwIlmzX1AQEBA
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAJTiE7MoGcAABTuYnJhWg&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; PugT=1716532039; KRTBCOOKIE_32=11175-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&22715-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&23519-AQAG15iAZjy5FwIlmzX1AQEBAQE
Source: global traffic	HTTP traffic detected: GET /match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-1024KS-b_dA2vXhi9BW7vzHihsG2x_pVkz2skk3Vpg&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F231%2F124%2F3%2F6.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=f102e783-2700-4bb9-aa0d-8e4779f6d278; tuuid_lu=1716532029; um=!490,tXuZIVw39tcQO1WZwtciZFqjqyfcA8Dgckg,1724308030; umeh=!490,0,1778740030,-1
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
Source: global traffic	HTTP traffic detected: GET /?partner=252&mapped=y-Yk23sBpE2pQIvWiGC9Zuef9eG_SlFPzbuA--~A&gdpr=0 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1; done_redirects109=1; done_redirects252=1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; PugT=1716532039; KRTBCOOKIE_32=11175-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&22715-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&23519-AQAG15iAZjy5FwIlmzX1AQEBAQ
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; KRTBCOOKIE_32=11175-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&22715-AQAG15iAZ
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; PugT=1716532039; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1; done_redirects109=1; done_redirects252=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
Source: global traffic	HTTP traffic detected: GET /cq/231/124/3/6.gif?puid=f102e783-2700-4bb9-aa0d-8e4779f6d278&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
Source: global traffic	HTTP traffic detected: GET /match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; KRTBCOOKIE_32=11175-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&22715-AQAG15iAZ
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; SPugT=1716532040; pi=158355:3; chkChromeAb67Sec=6; KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; PugT=1716532039
Source: global traffic	HTTP traffic detected: GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1

Source: chromecache_655.2.dr	String found in binary or memory: "tags":[{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-6EDY1BF25J","vtp_configSettingsTable":["list",["map","parameter","post_id","parameterValue",["macro",1]],["map","parameter","publish_date","parameterValue",["macro",2]],["map","parameter","send_page_view","parameterValue","true"]],"tag_id":3},{"function":"__ua","metadata":["map"],"once_per_event":true,"vtp_overrideGaSettings":true,"vtp_trackType":"TRACK_PAGEVIEW","vtp_gaSettings":["macro",3],"vtp_dimension":["list",["map","index","1","dimension",["macro",2]],["map","index","2","dimension",["macro",1]]],"vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_enableGA4Schema":true,"tag_id":7},{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-6L5Q55KN3H","vtp_configSettingsTable":["list",["map","parameter","send_page_view","parameterValue","true"]],"tag_id":9},{"function":"__hl","tag_id":18},{"function":"__html","metadata":["map"],"once_per_event":true,"vtp_html":["template","\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq\|\|(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq\|\|(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"",["escape",["macro",4],7],"\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=",["escape",["macro",4],12],"\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E\n"],"vtp_supportDocumentWrite":false,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"tag_id":10},{"function":"__html","metadata":["map"],"once_per_event":true,"vtp_html":"\u003Cscript type=\"text\/gtmscript\" data-gtmsrc=\"\/\/souhaija.site\/easylist\/13285\" async defer\u003E\u003C\/script\u003E","vtp_supportDocumentWrite":false,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"tag_id":16},{"function":"__html","metadata":["map"],"once_per_event":true,"vtp_html":"\u003Cmeta name=\"ir-site-verification-token\" value=\"-620934856\"\u003E","vtp_supportDocumentWrite":false,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"tag_id":17}], equals www.facebook.com (Facebook)
Source: chromecache_1130.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_1130.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_799.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr, chromecache_763.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_1231.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr, chromecache_763.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_912.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_822.2.dr	String found in binary or memory: <div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div> equals www.facebook.com (Facebook)
Source: chromecache_1092.2.dr	String found in binary or memory: <div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div> equals www.facebook.com (Facebook)
Source: chromecache_822.2.dr	String found in binary or memory: <div class="swp-hidden-panel-wrap" style="display: none; visibility: collapse; opacity: 0"><div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459637"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div></div><div class="swp-content-locator"></div> </div> equals www.facebook.com (Facebook)
Source: chromecache_822.2.dr	String found in binary or memory: <div class="swp-hidden-panel-wrap" style="display: none; visibility: collapse; opacity: 0"><div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459637"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div></div><div class="swp-content-locator"></div> </div> equals www.twitter.com (Twitter)
Source: chromecache_1092.2.dr	String found in binary or memory: <div class="swp-hidden-panel-wrap" style="display: none; visibility: collapse; opacity: 0"><div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459679"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div></div><div class="swp-content-locator"></div> </div> equals www.facebook.com (Facebook)
Source: chromecache_1092.2.dr	String found in binary or memory: <div class="swp-hidden-panel-wrap" style="display: none; visibility: collapse; opacity: 0"><div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459679"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div></div><div class="swp-content-locator"></div> </div> equals www.twitter.com (Twitter)
Source: chromecache_822.2.dr	String found in binary or memory: <div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459637"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div> <p>Many Jewish Americans are shocked at Joe Biden equals www.facebook.com (Facebook)
Source: chromecache_822.2.dr	String found in binary or memory: <div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459637"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div> <p>Many Jewish Americans are shocked at Joe Biden equals www.twitter.com (Twitter)
Source: chromecache_1092.2.dr	String found in binary or memory: <div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459679"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div> <p>Despite tremendous opposition from Democrats, including four criminal cases, Donald Trump equals www.facebook.com (Facebook)
Source: chromecache_1092.2.dr	String found in binary or memory: <div class="swp_social_panel swp_horizontal_panel swp_shift swp_default_full_color swp_other_full_color swp_individual_full_color scale-100 scale-full_width" data-min-width="1100" data-float-color="#ffffff" data-float="none" data-float-mobile="none" data-transition="slide" data-post-id="27459679"><div class="nc_tweetContainer swp_share_button swp_twitter" data-network="twitter"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://twitter.com/intent/tweet?text=Trump+Unveils+Incredible+2024+Move+-+Donald+Just+Zeroed+in+on+These+2+%27Untouchable%27+States&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_twitter_icon"></i><span class="swp_share">Tweet</span></span></span></span></a></div><div class="nc_tweetContainer swp_share_button swp_facebook" data-network="facebook"><a class="nc_tweet swp_share_link" rel="nofollow noreferrer noopener" target="_blank" href="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F" data-link="https://www.facebook.com/share.php?u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F"><span class="swp_count swp_hide"><span class="iconFiller"><span class="spaceManWilly"><i class="sw swp_facebook_icon"></i><span class="swp_share">Share</span></span></span></span></a></div></div> <p>Despite tremendous opposition from Democrats, including four criminal cases, Donald Trump equals www.twitter.com (Twitter)
Source: chromecache_1178.2.dr, chromecache_899.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_1063.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy and paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]),d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: __d("CometLegalFooter.react",["fbt","ix","BaseMiddot.react","CometErrorBoundary.react","CometLazyPopoverTrigger.react","CometLink.react","CometPressable.react","FBCookieSettingsLoggedOutConfig","JSResourceForInteraction","ServerTime","TetraIcon.react","TetraText.react","XHealthPolicyCometControllerRouteBuilder","XPrivacyPolicyCometControllerRouteBuilder","fbicon","gkx","react","useCurrentRoute"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k=j\|\|d("react"),l=c("JSResourceForInteraction")("CometLegalFooterMoreMenu.react").__setRef("CometLegalFooter.react");function m(){try{var a;return(a=new Date(d("ServerTime").getMillis()))==null?void 0:a.getFullYear()}catch(a){return null}}function a(a){var b=a.isHelpCenter;b=b===void 0?!1:b;var e=a.isPage;e=e===void 0?!1:e;var f=a.onClick;a=d("FBCookieSettingsLoggedOutConfig").should_show_cookie_settings;var g=c("useCurrentRoute")(),j=m(),n=c("XPrivacyPolicyCometControllerRouteBuilder").buildUri({entry_point:"comet_dropdown"}),o=c("XHealthPolicyCometControllerRouteBuilder").buildUri({});e=[{href:"https://www.facebook.com/legal/terms/information_about_page_insights_data",label:h._("Information about Page Insights data"),render:e&&c("gkx")("22806")},{href:n.toString(),label:h._("Privacy"),testid:"CometDropdownPrivacy"},{href:o.toString(),label:h._("Consumer Health Privacy"),render:c("gkx")("2828"),testid:"CometDropdownHealthPrivacy"},{href:"/terms?ref=pf",label:"Impressum/Terms/NetzDG/UrhDaG",render:c("gkx")("22807")&&!c("gkx")("22808")},{href:"/terms?ref=pf",label:h._("Imprint\/terms"),render:c("gkx")("22808")},{href:"/legal/germany/",label:"UrhDaG/MStV",render:c("gkx")("22808")},{href:"/policies?ref=pf",label:h._("Terms"),render:!c("gkx")("22807")&&!c("gkx")("22808"),testid:"CometDropdownTerms"},{href:"/business/",label:h._("Advertising")},{href:"/help/568137493302217",label:k.jsxs(k.Fragment,{children:[h._("Ad choices")," ",k.jsx(c("CometErrorBoundary.react"),{children:k.jsx("span",{className:"x1n2onr6 x1qiirwl",children:k.jsx(c("TetraIcon.react"),{color:"secondary",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie settings"),render:a},{href:encodeURIComponent("https://www.facebook.com/help/cancelcontracts?source=facebook.com"),label:h._("Cancel contracts here"),open_in_new_tab:!0,render:c("gkx")("2344")&&!1}].filter(function(a){return a.render==null\|\|a.render===!0});var p=[];if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoCrawlingPool)&&(g==null?void 0:(o=g.rootView.props)==null?void 0:o.seoCrawlingPool.url)){Array.from(Array((g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.multiple_links)\|\|0)).forEach(function(a,b){p.push(k.jsxs("li",{className:"xt0psk2",children:[k.jsx(c("CometLink.react"),{color:"secondary",href:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.url,onClick:f,weight:"normal",children:g==null?void 0:(a=g.rootView.props)
Source: chromecache_1231.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_784.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_728.2.dr	String found in binary or memory: break;case "MediaFiles":for(var lf=[],Yi=[],ig=[],Ul=q(uf(A)),sh=Ul.next();!sh.done;sh=Ul.next()){var Qb=sh.value;switch(Qb.nodeName){case "MediaFile":var jg=void 0,Jb=V(Qb);if(null==Jb)var th=null;else{-1!=Jb.indexOf("www.youtube.com/get_video")?Q(R(),"hgvu","1"):-1!=Jb.indexOf("redirector.gvt1.com/get_video")&&Q(R(),"hgvuc","1");var cd={};cd.height=kG(Qb,"height");cd.width=kG(Qb,"width");cd.xb=Qb.getAttribute("delivery");cd.bitrate=kG(Qb,"bitrate");cd.Ea=kG(Qb,"minBitrate");cd.maxBitrate=kG(Qb, equals www.youtube.com (Youtube)
Source: chromecache_1238.2.dr	String found in binary or memory: dz.prototype.l=function(a){switch(a.type){case "playing":fz(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&0<ez(this)&&(this.B=!0,fz(this))}};var fz=function(a){!a.g.enabled&&a.B&&(a.D=1E3ez(a),a.C=Date.now(),a.o=!1,a.g.start())};dz.prototype.G=function(){var a=Date.now(),b=a-this.C,c=1E3ez(this);c-this.D<.5b?this.o\|\|(this.o=!0,this.dispatchEvent("playbackStalled")):this.o=!1;this.D=c;this.C=a};var gz="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),hz=/\bocr\b/;function iz(a){if(lb(Jh(a))\|\|lc&&2048<a.length)return!1;try{if((new T(a)).D().match(hz))return!0}catch(b){}return null!=gz.find(function(b){return null!=a.match(b)})};function jz(a,b){return lb(b)?!1:(new RegExp(a)).test(b)}function kz(a){var b={};a.split(",").forEach(function(c){var d=c.split("=");2==d.length&&(c=nb(d[0]),d=nb(d[1]),0<c.length&&(b[c]=d))});return b} equals www.youtube.com (Youtube)
Source: chromecache_1178.2.dr, chromecache_899.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){OC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(RC(w,"iframe_api")\|\|RC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!IC&&PC(y[B],n.xe))return yc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_696.2.dr	String found in binary or memory: function zh(a){try{const b="string"===typeof a?new Jf(a):a;if(yh(b)){const c=b.g.get("url");return"undefined"===typeof c?null:c}}catch(b){}return null}function xh(a,b){return(new RegExp("^https?://([a-z0-9-]{1,63}\\.)("+b.join("\|").replace(/\./g,"\\.")+")(:[0-9]+)?([/?#]\|$)","i")).test(a)};const Ah="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Bh=/\bocr\b/; equals www.youtube.com (Youtube)
Source: chromecache_728.2.dr	String found in binary or memory: l.Rm=function(){this.g&&SG(this.I,YH,null)};l.Zm=function(){w1(this,"adBuffering")};var I2=function(a){var b,c=a.la;if(c.g&&c.g.g)if(c.j){var d=void 0===d?null:d;(b=void 0===b?null:b)\|\|(b="//www.youtube.com/");d?b+=d:(c=F(c.j.id),b=E(c)?null:b+"channel/"+(0==c.lastIndexOf("UC",0)&&24==c.length?c:"UC"+c))}else b=null;else b=null;b&&(a.pause(),a.Sa(b,null,null))};r2.prototype.Mb=function(){v1.prototype.Mb.call(this);null!=this.g&&this.g.se()}; equals www.youtube.com (Youtube)
Source: chromecache_946.2.dr, chromecache_655.2.dr	String found in binary or memory: return b}EC.K="internal.enableAutoEventOnTimer";var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_728.2.dr	String found in binary or memory: this.Kh=h;this.Fa=k;this.gf=n;this.Hb=m;this.ge=p;this.Te=r;this.resources=t};var OD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.mimeType?null:c.mimeType;var d=void 0===c.ga?null:c.ga;c=void 0===c.Ce?null:c.Ce;this.Ka=a;this.ga=d;this.mimeType=b;this.Ce=c},PD=function(a){return"Url"===a.Ka.resourceType?a.Ka.g:null},QD=function(a){return"Html"===a.Ka.resourceType?a.Ka.g:null};var RD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.xb?null:c.xb;var d=void 0===c.mimeType?null:c.mimeType,e=void 0===c.codec?null:c.codec,f=void 0===c.width?null:c.width;c=void 0===c.height?null:c.height;this.url=a;this.xb=b;this.mimeType=d;this.codec=e;this.width=f;this.height=c};var SD=function(a,b){b=void 0===b?{}:b;var c=void 0===b.ga?null:b.ga,d=void 0===b.bitrate?null:b.bitrate,e=void 0===b.Ea?null:b.Ea,f=void 0===b.maxBitrate?null:b.maxBitrate,g=void 0===b.Ja?null:b.Ja;RD.call(this,a,{xb:void 0===b.xb?null:b.xb,mimeType:void 0===b.mimeType?null:b.mimeType,codec:void 0===b.codec?null:b.codec,width:void 0===b.width?null:b.width,height:void 0===b.height?null:b.height});this.ga=c;this.Ea=e\|\|f\|\|d\|\|0;this.maxBitrate=f\|\|e\|\|d\|\|0;this.Ja=g};w(SD,RD);var TD=function(a){a=void 0===a?{}:a;var b=void 0===a.tc?[]:a.tc,c=void 0===a.Ne?[]:a.Ne;this.Ib=void 0===a.Ib?null:a.Ib;this.tc=b;this.Ne=c};var UD=function(a){a=void 0===a?{}:a;var b=void 0===a.Nb?null:a.Nb,c=void 0===a.W?[]:a.W,d=void 0===a.Dc?[]:a.Dc,e=void 0===a.ab?[]:a.ab,f=void 0===a.hh?[]:a.hh,g=void 0===a.pd?null:a.pd,h=void 0===a.ka?null:a.ka,k=void 0===a.ua?[]:a.ua;this.duration=void 0===a.duration?null:a.duration;this.ka=h;this.Nb=b;this.W=c;this.Dc=d;this.ab=e;this.hh=f;this.pd=g;this.ua=k};var VD=function(a){a=void 0===a?{}:a;var b=void 0===a.ga?null:a.ga,c=void 0===a.height?null:a.height,d=void 0===a.width?null:a.width,e=void 0===a.fd?null:a.fd,f=void 0===a.resources?[]:a.resources,g=void 0===a.rg?null:a.rg,h=void 0===a.sg?[]:a.sg,k=void 0===a.ka?null:a.ka;this.id=void 0===a.id?null:a.id;this.ga=b;this.height=c;this.width=d;this.fd=e;this.resources=f;this.rg=g;this.sg=h;this.ka=k};var WD=function(a,b){b=void 0===b?[]:b;this.g=a;this.W=b};var XD=function(a){a=void 0===a?{}:a;var b=void 0===a.Ue?"unknown":a.Ue;this.Ve=(void 0===a.Ve?"unknown":a.Ve)\|\|"unknown";this.Ue=b\|\|"unknown"};var YD=function(a){a=void 0===a?{}:a;var b=void 0===a.id?null:a.id,c=void 0===a.adId?null:a.adId,d=void 0===a.Tb?null:a.Tb,e=void 0===a.qe?null:a.qe,f=void 0===a.Wd?null:a.Wd,g=void 0===a.bb?[]:a.bb;this.Ma=void 0===a.Ma?null:a.Ma;this.id=b;this.adId=c;this.Tb=d;this.qe=e;this.Wd=f;this.bb=g};var ZD=function(a,b){this.url=a;this.g=void 0===b?null:b};var $D=function(a){a=void 0===a?{}:a;var b=void 0===a.ye?null:a.ye,c=void 0===a.Ic?null:a.Ic,d=void 0===a.parameters?null:a.parameters,e=void 0===a.W?[]:a.W;this.vendor=void 0===a.vendor?null:a.vendor;this.ye=b;this.Ic=c;this.parameters=d;this.W=e};var aE=function(a){a=void 0===a?{}:a;var b=void 0===a.errors?[]:a.errors,c=void 0===a.yc?[]:a.yc,d=void 0===a.pa?[]:a.pa,e=void 0===a.sb?[]:a.
Source: chromecache_728.2.dr	String found in binary or memory: this.la;if(b.g&&b.g.g)if(a=b.g.id,b=b.o,b=void 0===b?!1:b,null==a)a=null;else{c=new ox("//www.youtube.com/watch");var d=c.g;d.set("v",a);d.set("feature",b?"trueview-instream":"instream");sx(c,d);a=c.toString()}else a=null;null!==a&&(this.pause(),this.Sa(a,null,null));break;case "muteClicked":this.Ua=this.F;this.setVolume(0);break;case "unmuteClicked":this.setVolume(this.Ua);break;case "skipShown":w1(this,"skippableStateChanged");break;case "skip":w1(this,"skip");this.destroy();break;case "fullscreen":w1(this, equals www.youtube.com (Youtube)
Source: chromecache_728.2.dr	String found in binary or memory: var AF=function(a,b){var c=a.Ta.j;a.Ta.g.forEach(function(d){Iz(b,new Ez("error",d))});c.forEach(function(d){Iz(b,Gz("impression",d.url,d.g))})},BF=function(a,b){a=q(a.pa);for(var c=a.next();!c.done;c=a.next())if((c=c.value.Tb)&&c.ab&&0<c.ab.length){a=q(c.ab);for(c=a.next();!c.done;c=a.next())c=c.value,b.ab.push(new Bz(PD(c),QD(c),c.mimeType,c.ga,c.Ce));break}};var CF=function(a){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack)};w(CF,Error);var DF=function(a){this.j=a;this.g=Date.now()};DF.prototype.reset=function(){this.g=Date.now()};var EF=function(a){a=a.g+a.j-Date.now();return 0<a?a:0};var FF="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),GF=/\bocr\b/;function HF(a){if(E(F(a))\|\|qe&&2048<a.length)return!1;try{if((new ox(a)).R().match(GF))return!0}catch(b){}return null!=FF.find(function(b){return null!=a.match(b)})};var IF=function(a){var b=Error.call(this,a);this.message=b.message;"stack"in b&&(this.stack=b.stack);this.errorCode=a};w(IF,Error);var JF=function(a){if("undefined"!=typeof DOMParser){var b=new DOMParser;a=eA(a);return b.parseFromString(Jd(a),"application/xml")}throw Error("Your browser does not support loading xml documents");};var KF=function(a){Zn.call(this);this.j=a;this.g={}};Va(KF,Zn); equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: pjnewsletter.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ruamupr.com
Source: global traffic	DNS traffic detected: DNS query: tg1.aniview.com
Source: global traffic	DNS traffic detected: DNS query: widget.adcovery.com
Source: global traffic	DNS traffic detected: DNS query: jsc.mgid.com
Source: global traffic	DNS traffic detected: DNS query: thepatriotjournal.disqus.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cdn.engine.4dsply.com
Source: global traffic	DNS traffic detected: DNS query: servicer.mgid.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: disqus.com
Source: global traffic	DNS traffic detected: DNS query: c.disquscdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: souhaija.site
Source: global traffic	DNS traffic detected: DNS query: cdn2.decide.dev
Source: global traffic	DNS traffic detected: DNS query: dotsply.com
Source: global traffic	DNS traffic detected: DNS query: player.avplayer.com
Source: global traffic	DNS traffic detected: DNS query: track1.aniview.com
Source: global traffic	DNS traffic detected: DNS query: c.adsco.re
Source: global traffic	DNS traffic detected: DNS query: decide.dev
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: engine.4dsply.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: adsco.re
Source: global traffic	DNS traffic detected: DNS query: c.mgid.com
Source: global traffic	DNS traffic detected: DNS query: 6.adsco.re
Source: global traffic	DNS traffic detected: DNS query: 4.adsco.re
Source: global traffic	DNS traffic detected: DNS query: gu2nbmodgvw2.l4.adsco.re
Source: global traffic	DNS traffic detected: DNS query: gu2nbmodgvw2.n4.adsco.re
Source: global traffic	DNS traffic detected: DNS query: gu2nbmodgvw2.s4.adsco.re
Source: global traffic	DNS traffic detected: DNS query: _2087._https.4.adsco.re
Source: global traffic	DNS traffic detected: DNS query: _2087._https.6.adsco.re
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: ad.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cdn.mgid.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: player.aniview.com
Source: global traffic	DNS traffic detected: DNS query: rtb-use.mfadsrvr.com
Source: global traffic	DNS traffic detected: DNS query: s-img.mgid.com
Source: global traffic	DNS traffic detected: DNS query: de9a11s35xj3d.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: cm.mgid.com
Source: global traffic	DNS traffic detected: DNS query: cdn.id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: go1.aniview.com
Source: global traffic	DNS traffic detected: DNS query: a.mgid.com
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: cdn.connectad.io
Source: global traffic	DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: rtb-usw.mfadsrvr.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: tracker.direct.e-volution.ai
Source: global traffic	DNS traffic detected: DNS query: cs.krushmedia.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: sync-eu.connectad.io
Source: global traffic	DNS traffic detected: DNS query: prebid.a-mo.net
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: ssp.disqus.com
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: s2s.aniview.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: inv-nets.admixer.net
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: cm.rtbsystem.com
Source: global traffic	DNS traffic detected: DNS query: hde.tynt.com
Source: global traffic	DNS traffic detected: DNS query: ad.360yield.com
Source: global traffic	DNS traffic detected: DNS query: cm.idealmedia.io
Source: global traffic	DNS traffic detected: DNS query: sync1.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: id.a-mx.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: lb.eu-1-id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: cm.adform.net
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: sync.adkernel.com
Source: global traffic	DNS traffic detected: DNS query: t.adx.opera.com
Source: global traffic	DNS traffic detected: DNS query: sync.aniview.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: match.360yield.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: cs.admanmedia.com
Source: global traffic	DNS traffic detected: DNS query: sync.connectad.io
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org

Source: unknown

HTTP traffic detected: POST /f/gstats HTTP/1.1Host: souhaija.siteConnection: keep-aliveContent-Length: 565sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://pjnewsletter.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pjnewsletter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 06:27:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 24 May 2024 06:27:34 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 888b3820bc638c81-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:27:20 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:27:32 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:27:40 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:27:43 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:27:47 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:27:53 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:28:16 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:28:22 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:28:33 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 24 May 2024 06:28:38 GMTContent-Length: 0Connection: close

Source: chromecache_823.2.dr	String found in binary or memory: http://benalman.com/about/license/
Source: chromecache_823.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-bbq-plugin/
Source: chromecache_823.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: http://c.adsco.re
Source: chromecache_1152.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_793.2.dr	String found in binary or memory: http://git.io/TrdQbw
Source: chromecache_1271.2.dr	String found in binary or memory: http://google.com
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: http://google.com/
Source: chromecache_777.2.dr, chromecache_1271.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_823.2.dr	String found in binary or memory: http://js.moatads.com/adsupply745369575533/moatad.js#moatClientLevel1=
Source: chromecache_1271.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_777.2.dr, chromecache_1271.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_728.2.dr	String found in binary or memory: http://tpc.googlesyndication.com/pagead/js/loader21.html
Source: chromecache_793.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_971.2.dr, chromecache_982.2.dr, chromecache_724.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_746.2.dr, chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_728.2.dr	String found in binary or memory: http://www.google.com/adsense/support
Source: chromecache_823.2.dr	String found in binary or memory: http://www.lasvegassun.com/feeds/headlines/all/
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: https://4.adsco.re/
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: https://4.adsco.re:2087/
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: https://6.adsco.re/
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: https://6.adsco.re:2087/
Source: chromecache_1091.2.dr	String found in binary or memory: https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%
Source: chromecache_901.2.dr	String found in binary or memory: https://a.mgid.com/1x1.gif?id=466023
Source: chromecache_611.2.dr	String found in binary or memory: https://a.mgid.com/1x1.gif?id=783385
Source: chromecache_611.2.dr	String found in binary or memory: https://a.mgid.com/1x1.gif?id=825298
Source: chromecache_812.2.dr, chromecache_599.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu
Source: chromecache_805.2.dr, chromecache_1193.2.dr, chromecache_1266.2.dr, chromecache_866.2.dr, chromecache_1049.2.dr, chromecache_774.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_c
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/2024_WNBA_Chicago_Sky/2024_WNBA_Chicago_Sky.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/ASAHI_Superdry_drycrystal_Mar_Japan_2024_Emoji/ASAHI_Superdry_drycry
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/A_Grande_Conquista_2024/A_Grande_Conquista_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Arizona_Dbacks_MLB_2024/Arizona_Dbacks_MLB_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Asahi_Mitsuya_anniversary_Japan_2024_Emoji/Asahi_Mitsuya_anniversary
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10513_MH_Now_March_2024_emoji/BF-10513_MH_Now_March_2024_emoji.pn
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10542_BrandShiseido_24Q1Campaign_v2/BF-10542_BrandShiseido_24Q1Ca
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10628_claro_brasil_Hashmoji_After_V2/BF-10628_claro_brasil_Hashmo
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10645_Hashmoji_suntory_tennen_KirittoKajitsu_19th_Mar/BF-10645_Ha
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10646_Gamelaunch2024MarBrandedHashtag/BF-10646_Gamelaunch2024MarB
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10658_NetflixJP_18ce54ua4fy_Hashmoji_20240405-20240704_Suzume_/BF
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10661_Hashmoji-Masar-Ramadan_2024/BF-10661_Hashmoji-Masar-Ramadan
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10662_Hashmoji_SBA_Ramadan_2024/BF-10662_Hashmoji_SBA_Ramadan_202
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10676_Hubbl_2024_Hashmojis/BF-10676_Hubbl_2024_Hashmojis.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10689_WZM_March_2024_emoji/BF-10689_WZM_March_2024_emoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10693_/BF-10693_.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10713_NetflixJP_18ce54ua4fy_Hashmoji_20240425-20240724_CH/BF-1071
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10714_AllfreeHashumojiApr2024_v2/BF-10714_AllfreeHashumojiApr2024
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10715_MorinagaIce_Mar_2024/BF-10715_MorinagaIce_Mar_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10726_TheYearofCamels2024_Hashmoji_v3/BF-10726_TheYearofCamels202
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10748_Changyou_haikyu_haifura_Mar2024/BF-10748_Changyou_haikyu_ha
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10785_Aplus_sfd_jpbrandedemoji/BF-10785_Aplus_sfd_jpbrandedemoji.
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10788_miHoYo_Archeron_March_2024/BF-10788_miHoYo_Archeron_March_2
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10920_NetflixJP_18ce54ua4fy_Hashmoj_v2/BF-10920_NetflixJP_18ce54u
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10967_India_GeneralElections_Hashmoji_Jun2024/BF-10967_India_Gene
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10984_UngentlemanlyWarfare_AFTER_V3/BF-10984_UngentlemanlyWarfare
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10989_CombateaDengue_noX_2024Hashmoji_V2_Ext/BF-10989_CombateaDen
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-10998_HSR_Aventurine_Emoji_Q2_2024/BF-10998_HSR_Aventurine_Emoji_
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11027_ensemble_stars_Hashmoji_Anniversary2024/BF-11027_ensemble_s
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11031_OKX_Hashmoji/BF-11031_OKX_Hashmoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11033_Binance_2024_Q2_Emoji/BF-11033_Binance_2024_Q2_Emoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11072_EleccionesRD2024/BF-11072_EleccionesRD2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11074_Foris_Limited_2024_Q2_Branded_Hashtag_202404/BF-11074_Foris
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11110_Netmarble_Sololv_ARISE_JP_Applaunch2024_Hashmoji/BF-11110_N
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11123_BSF_RebrandingCampaign_hashmoji_v2/BF-11123_BSF_RebrandingC
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11124-AP_Inspire_Home_Is_Happiness_Q22024/BF-11124-AP_Inspire_Hom
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11137_Mahindra_XUV3XO_Hashmoji_after/BF-11137_Mahindra_XUV3XO_Has
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11138_PlasticWisely/BF-11138_PlasticWisely.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11151_30ebr_Hashmojis_V2/BF-11151_30ebr_Hashmojis_V2.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11222_SumzapInc_jujutsuphanpara_HalfAnniversary_Itadori_2024May_B
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11223_SumzapInc_jujutsuphanpara_HalfAnniversary_Itadori_2024May_B
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11249_MX_PRI2024/BF-11249_MX_PRI2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11259_2024_SHEIN_Eid_Campaign_Hashmoji/BF-11259_2024_SHEIN_Eid_Ca
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11283_Gathern_May2024_Hashmoji/BF-11283_Gathern_May2024_Hashmoji.
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-11291_Tostitos_Mx_SiempreHayQuePonerleATusTostitos_Hashmoji_2024/
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/BF-9382_NBAXLive_CommunityHashtag/BF-9382_NBAXLive_CommunityHashtag.
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Chicago_Bears_NFL_2024_2025_HASHMOJI/Chicago_Bears_NFL_2024_2025_HAS
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Chicago_Cubs_MLB_2024/Chicago_Cubs_MLB_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Cleveland_Browns_NFL_2024_2025_HASHMOJI/Cleveland_Browns_NFL_2024_20
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/CricketTwitter_2021/CricketTwitter_2021.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/CustomLikeClub_ColombiaRituales24May/CustomLikeClub_ColombiaRituales
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DD_CAPCOM_Hashmoji_Launch_2024/DD_CAPCOM_Hashmoji_Launch_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DK_Extension/DK_Extension.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/DK_Pre_SB_202/DK_Pre_SB_202.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Dallas_Cowboys_2024_2025_HASHMOJI/Dallas_Cowboys_2024_2025_HASHMOJI.
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/EMEAMastersEmoji2024/EMEAMastersEmoji2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Emigala_2024/Emigala_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/EveryWoman_2020/EveryWoman_2020.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_MWL_2024/Hashmoji_MWL_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_alli_taisho_3_6/Hashmoji_alli_taisho_3_6.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_essential_jp_4_1/Hashmoji_essential_jp_4_1.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Hashmoji_rohto_uv_3_25_v2/Hashmoji_rohto_uv_3_25_v2.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Heavenburnsred_April_2024_emoji/Heavenburnsred_April_2024_emoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/JBApp_Hashmoji_2024/JBApp_Hashmoji_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/KaijuNo8/KaijuNo8.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MN_Vikings_NFL_2024_2025_HASHMOJI/MN_Vikings_NFL_2024_2025_HASHMOJI.
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MSI_Emoji_2024/MSI_Emoji_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MeToo_Korea_2018_v2/MeToo_Korea_2018_v2.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MediaInformationLiteracyWeeks_2020_ThinkBeforeClicking/MediaInformat
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MediaInformationLiteracyWeeks_2020_ThinkBeforeSharing/MediaInformati
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MeganTheeStallionBOA_Music/MeganTheeStallionBOA_Music.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MiLB_Trophy_2024/MiLB_Trophy_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Milwaukee_Brewers_MLB_2024/Milwaukee_Brewers_MLB_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Minnesota_Twins_MLB_2024/Minnesota_Twins_MLB_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/MyXAnniversary/MyXAnniversary.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBALogo_Hashtag_2023/NBALogo_Hashtag_2023.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBAX_NewCommunityHashtag_V1/NBAX_NewCommunityHashtag_V1.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_Finals_2024/NBA_Finals_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_KnicksHashmoji/NBA_KnicksHashmoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_NetsHashmoji/NBA_NetsHashmoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NBA_Playoffs_2024/NBA_Playoffs_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NE_Patriots_NFL_2024_2025_HASHMOJI/NE_Patriots_NFL_2024_2025_HASHMOJ
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_Bruins_2023/NHL_Bruins_2023.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_Cayotes_2023/NHL_Cayotes_2023.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_MWild_2023/NHL_MWild_2023.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_NJDevils_2023/NHL_NJDevils_2023.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_NewSJSharks_2023/NHL_NewSJSharks_2023.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NHL_Rangers_2023/NHL_Rangers_2023.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NRGEmoji2024/NRGEmoji2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NWSL_League2_Hashtag2024/NWSL_League2_Hashtag2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NWSL_Utah_Hashtag2024/NWSL_Utah_Hashtag2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NavxOMW2R_Music/NavxOMW2R_Music.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Net_Emoji_Evergreen_SpanishAdd/Net_Emoji_Evergreen_SpanishAdd.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/NigerianIdol20242/NigerianIdol20242.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/OverstockCrazyGoodDeals_AllHashmojis_BF-10915/OverstockCrazyGoodDeal
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Romasaga_April_2024_emoji/Romasaga_April_2024_emoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/SF_Giants_MLB_2024_Updated/SF_Giants_MLB_2024_Updated.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/SKGaming2024Emoji/SKGaming2024Emoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/ShinseiFinancial_BF-11017_HashmojiAfter/ShinseiFinancial_BF-11017_Ha
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/SmackDown2024Emoji/SmackDown2024Emoji.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Sony_MarcAnthony_MuevenseAlbum_Music/Sony_MarcAnthony_MuevenseAlbum_
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/SpacesHost_2021/SpacesHost_2021.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/SpotifyJP_King_Prince_TRP_2024MAY/SpotifyJP_King_Prince_TRP_2024MAY.
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/StopViolenceAgainstWomen_2020/StopViolenceAgainstWomen_2020.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/TampaBay_Rays_MLB_2024/TampaBay_Rays_MLB_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/UCL20242/UCL20242.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/UCL24Final2/UCL24Final2.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/UECL20242/UECL20242.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/UEL2024Final/UEL2024Final.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/UWCL24/UWCL24.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/UWCL24Final/UWCL24Final.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/VinceStapleDT/VinceStapleDT.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WNBA_2024_CommissionersCup/WNBA_2024_CommissionersCup.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/WNBA_2024_Phoenix_Mercury/WNBA_2024_Phoenix_Mercury.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/Washington_Nationals_MLB_2024/Washington_Nationals_MLB_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/World_Surf_League_2024/World_Surf_League_2024.png
Source: chromecache_1168.2.dr	String found in binary or memory: https://abs.twimg.com/hashflags/nowruz2018_v4/nowruz2018_v4.png
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_1133.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_1123.2.dr	String found in binary or memory: https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F
Source: chromecache_887.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: https://adsco.re/
Source: chromecache_1277.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_902.2.dr	String found in binary or memory: https://americanjournaldaily.com/wp-content/uploads/2018/08/PJ-Fb-share.jpg
Source: chromecache_871.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_1241.2.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=120&cm=72aac350df2b4a40201cac1fd18dfe1f
Source: chromecache_887.2.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=4&cm=dae58398-27bd-491f-8e75-aff789679896&redir=https%3A%2F%
Source: chromecache_949.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?&gdpr=
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_949.2.dr	String found in binary or memory: https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US
Source: chromecache_1002.2.dr	String found in binary or memory: https://assets.a-mo.net/js/idw.js?
Source: chromecache_1123.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VG
Source: chromecache_646.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=1266022
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: https://c.adsco.re
Source: chromecache_1241.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1040
Source: chromecache_1161.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr, chromecache_655.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_1135.2.dr, chromecache_938.2.dr	String found in binary or memory: https://cdn-ima.33across.com/ima.js
Source: chromecache_1271.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_1271.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_1135.2.dr, chromecache_938.2.dr	String found in binary or memory: https://cdn.browsiprod.com/bootstrap/bootstrap.js
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://cdn.engine.4dsply.com/Scripts/infinity.js.aspx?guid=0d94d46c-3cdb-4ae0-a09a-420aae9253fe
Source: chromecache_1135.2.dr, chromecache_938.2.dr	String found in binary or memory: https://cdn.hadronid.net/hadron.js
Source: chromecache_1123.2.dr	String found in binary or memory: https://cdn.hadronid.net/hadron.js?partner_id=405&sync=1&url=
Source: chromecache_818.2.dr, chromecache_881.2.dr	String found in binary or memory: https://cdn.mgid.com/images/logos/Adchoices.svg
Source: chromecache_818.2.dr, chromecache_881.2.dr	String found in binary or memory: https://cdn.mgid.com/images/mgid/mgid_ua.svg
Source: chromecache_901.2.dr	String found in binary or memory: https://clck.mgid.com/ghits/18571120/i/57935209/0/pp/2/2?h=BEGg1nPVshiHjefJrycpm44GmdCCFY5SIOJ5N-jJN
Source: chromecache_901.2.dr	String found in binary or memory: https://clck.mgid.com/ghits/19505572/i/57935209/0/pp/1/2?h=BEGg1nPVshiHjefJrycpm-x0ykPgwMULmOVL7G29l
Source: chromecache_611.2.dr	String found in binary or memory: https://clck.mgid.com/ghits/19574287/i/57935209/0/pp/1/1?h=iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7Bd
Source: chromecache_611.2.dr	String found in binary or memory: https://clck.mgid.com/ghits/19586376/i/57935209/0/pp/2/1?h=iAUJyjdg8QPC2MmwcJn76bFDl5xvVQU4rWzN5S_2t
Source: chromecache_901.2.dr	String found in binary or memory: https://clck.mgid.com/ghits/d/11469555/i/57935209/pp/3/2?h=BEGg1nPVshiHjefJrycpm4lIvMbuPPpYDWUbW23Qd
Source: chromecache_611.2.dr	String found in binary or memory: https://clck.mgid.com/ghits/d/551166/i/57935209/pp/3/1?h=iAUJyjdg8QPC2MmwcJn76eMNeLIIqO-NTXWKfbwmvA4
Source: chromecache_949.2.dr	String found in binary or memory: https://cm.adform.net/cookie?&gdpr=
Source: chromecache_1123.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ul
Source: chromecache_798.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NzJhYWMzNTBkZjJiNGE0MDIwMWNhYzFmZ
Source: chromecache_798.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=NzJhYWMzNTBkZjJiNGE0MDIwMWNhYzFmZD
Source: chromecache_924.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_924.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZTkwNDY0YjctYmNiMC0yYmY1LWVkMDAtNmUwZm
Source: chromecache_1271.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_1123.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODI0MTY1OC90LzA/url/https%3A%2F%2Fids.ad.gt%2Fapi%2Fv
Source: chromecache_798.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/72aac350df2b4a40201cac1fd18dfe1f/ur
Source: chromecache_611.2.dr	String found in binary or memory: https://de9a11s35xj3d.cloudfront.net/16afc0b29e2a47c4091aea1e77b64c9d.webp
Source: chromecache_746.2.dr	String found in binary or memory: https://developers.google.com/ad-placement
Source: chromecache_1133.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_1133.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_1133.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_1133.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_798.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_1123.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=348447&dpuuid=
Source: chromecache_1048.2.dr	String found in binary or memory: https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.281139774378
Source: chromecache_1162.2.dr	String found in binary or memory: https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.360972254239
Source: chromecache_646.2.dr	String found in binary or memory: https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.828875872226
Source: chromecache_887.2.dr	String found in binary or memory: https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=70&external_user_id=b300bb13-ab4c-
Source: chromecache_1238.2.dr	String found in binary or memory: https://f.creativecdn.com
Source: chromecache_784.2.dr	String found in binary or memory: https://fburl.com/comet_preloading
Source: chromecache_784.2.dr	String found in binary or memory: https://fburl.com/dialog-provider).
Source: chromecache_784.2.dr	String found in binary or memory: https://fburl.com/wiki/m19zmtlh
Source: chromecache_1287.2.dr	String found in binary or memory: https://fburl.com/wiki/xrzohrqb
Source: chromecache_1152.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_1238.2.dr	String found in binary or memory: https://fledge.as.criteo.com
Source: chromecache_1238.2.dr	String found in binary or memory: https://fledge.eu.criteo.com
Source: chromecache_1238.2.dr	String found in binary or memory: https://fledge.us.criteo.com
Source: chromecache_669.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_1271.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_1271.2.dr, chromecache_728.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_669.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_1271.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/%
Source: chromecache_1197.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js
Source: chromecache_1197.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js/blob/master/LICENSE
Source: chromecache_623.2.dr	String found in binary or memory: https://github.com/emn178/js-md5
Source: chromecache_1288.2.dr	String found in binary or memory: https://github.com/faisalman/ua-parser-js
Source: chromecache_623.2.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_823.2.dr	String found in binary or memory: https://github.com/georgekosmidis/jquery-hashchange
Source: chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	String found in binary or memory: https://github.com/nodeca/pako
Source: chromecache_1112.2.dr	String found in binary or memory: https://github.com/prebid/Shared-id-v2/
Source: chromecache_665.2.dr, chromecache_839.2.dr, chromecache_700.2.dr, chromecache_714.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_839.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_665.2.dr, chromecache_700.2.dr, chromecache_714.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.31.1/LICENSE
Source: chromecache_1241.2.dr	String found in binary or memory: https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=72aac350df2b4a40201cac1fd18dfe1f
Source: chromecache_696.2.dr	String found in binary or memory: https://googleads.g.doubleclick-cn.net
Source: chromecache_1238.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_1277.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_728.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/td/auctionwinner?status=nowinner
Source: chromecache_1092.2.dr	String found in binary or memory: https://gopdailybrief.com/trump-reveals-amazing-2024/
Source: chromecache_1092.2.dr	String found in binary or memory: https://gopdailybrief.com/trump-reveals-amazing-2024/#article
Source: chromecache_1092.2.dr	String found in binary or memory: https://gopdailybrief.com/trump-reveals-amazing-2024/#breadcrumb
Source: chromecache_1092.2.dr	String found in binary or memory: https://gopdailybrief.com/trump-reveals-amazing-2024/#primaryimage
Source: chromecache_1092.2.dr	String found in binary or memory: https://gopdailybrief.com/trump-reveals-amazing-2024/#respond
Source: chromecache_1161.2.dr	String found in binary or memory: https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=
Source: chromecache_743.2.dr	String found in binary or memory: https://help.x.com/rules-and-policies/twitter-cookies
Source: chromecache_1188.2.dr	String found in binary or memory: https://help.x.com/rules-and-policies/twitter-rules
Source: chromecache_1241.2.dr	String found in binary or memory: https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=72aac350df2b4a40201cac1fd18dfe1f
Source: chromecache_696.2.dr	String found in binary or memory: https://i1.ytimg.com/vi/$
Source: chromecache_949.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb
Source: chromecache_887.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_1241.2.dr	String found in binary or memory: https://id5-sync.com/s/19/9.gif?puid=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0
Source: chromecache_643.2.dr	String found in binary or memory: https://id5.io/
Source: chromecache_1123.2.dr	String found in binary or memory: https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3D
Source: chromecache_1123.2.dr	String found in binary or memory: https://ids.ad.gt/api/v1/g_hosted?id=
Source: chromecache_1123.2.dr	String found in binary or memory: https://ids.ad.gt/api/v1/halo_match?id=
Source: chromecache_1123.2.dr	String found in binary or memory: https://ids.ad.gt/api/v1/ip_match?id=
Source: chromecache_1123.2.dr	String found in binary or memory: https://image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match
Source: chromecache_949.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr=
Source: chromecache_696.2.dr	String found in binary or memory: https://imasdk.googleapis-cn.com
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/car.js
Source: chromecache_841.2.dr, chromecache_896.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/vpaid_adapter.js?adtagurl=https://pubads.g.doubleclick.ne
Source: chromecache_728.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/simid/simid_trueview_%s.html
Source: chromecache_901.2.dr	String found in binary or memory: https://img.rtbsystem.org/256/181/281/6f7cc2dd-9f2f-4b2a-9fbc-56c37d5018ff.jpg/16x9/492
Source: chromecache_1230.2.dr	String found in binary or memory: https://interactiveadvertisingbureau.github.io/Open-Measurement-SDKJS/iframes.html#om-sdk-js-session
Source: chromecache_818.2.dr	String found in binary or memory: https://jsc.mgid.com/p/j/pjnewsletter.com.1171406.es5.js
Source: chromecache_818.2.dr	String found in binary or memory: https://jsc.mgid.com/p/j/pjnewsletter.com.1171406.es6.js
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://jsc.mgid.com/p/j/pjnewsletter.com.1171406.js
Source: chromecache_881.2.dr	String found in binary or memory: https://jsc.mgid.com/p/j/pjnewsletter.com.1604063.es5.js
Source: chromecache_881.2.dr	String found in binary or memory: https://jsc.mgid.com/p/j/pjnewsletter.com.1604063.es6.js
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://jsc.mgid.com/p/j/pjnewsletter.com.1604063.js
Source: chromecache_813.2.dr	String found in binary or memory: https://lexical.dev/docs/error?
Source: chromecache_1123.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=
Source: chromecache_798.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_924.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0
Source: chromecache_1241.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0
Source: chromecache_1161.2.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_1133.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_1231.2.dr	String found in binary or memory: https://optout.aboutads.info/
Source: chromecache_1261.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://p.ad.gt
Source: chromecache_1123.2.dr	String found in binary or memory: https://p.ad.gt/api/v1/p/405
Source: chromecache_696.2.dr	String found in binary or memory: https://pagead2.googlesyndication-cn.com/pagead/gen_204
Source: chromecache_899.2.dr, chromecache_1279.2.dr, chromecache_655.2.dr, chromecache_897.2.dr, chromecache_930.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_1189.2.dr, chromecache_589.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/control/omweb-v1.js
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/experimental/omweb-v1.js
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_696.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: chromecache_971.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_971.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_971.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_971.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_971.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_971.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_601.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_696.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jserror&
Source: chromecache_1010.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=mys&d=
Source: chromecache_1277.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_746.2.dr, chromecache_777.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_589.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_1189.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr, chromecache_655.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_992.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_746.2.dr, chromecache_777.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_822.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-7666278362879166
Source: chromecache_696.2.dr, chromecache_777.2.dr, chromecache_992.2.dr, chromecache_1277.2.dr, chromecache_1238.2.dr, chromecache_1271.2.dr, chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_1277.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_746.2.dr, chromecache_777.2.dr, chromecache_1277.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_1046.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_589.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_1189.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_902.2.dr	String found in binary or memory: https://patriotjournal.org/
Source: chromecache_902.2.dr	String found in binary or memory: https://patriotjournal.org/#/schema/logo/image/
Source: chromecache_902.2.dr	String found in binary or memory: https://patriotjournal.org/#breadcrumb
Source: chromecache_902.2.dr	String found in binary or memory: https://patriotjournal.org/#organization
Source: chromecache_902.2.dr	String found in binary or memory: https://patriotjournal.org/#website
Source: chromecache_902.2.dr	String found in binary or memory: https://patriotjournal.org/?s=
Source: chromecache_902.2.dr	String found in binary or memory: https://patriotjournal.org/page/2/
Source: chromecache_798.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_887.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0
Source: chromecache_1161.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_co
Source: chromecache_949.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr=
Source: chromecache_887.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c315c481-2ec0-48d6-b201-
Source: chromecache_1123.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3185&partner_device_id=
Source: chromecache_798.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=72aac350df2b4a40201cac
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/#/schema/logo/image/
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/#/schema/person/1a85ae6b6a51673e14caaa483bc46787
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/#organization
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/#website
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/?p=27459637
Source: chromecache_1092.2.dr	String found in binary or memory: https://pjnewsletter.com/?p=27459679
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/?s=
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/about/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/after-biden-shocks-america/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/after-star-anti-trump-witness/
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/author/adamcasalino/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/biden-doj-prolife-activists/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/cnn-report-bad-3-decades/
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/correction-policy/
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/email-opt-out/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/gop-bill-defeat-left/?utm_souce=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/gop-bill-defeat-left/?utm_source=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/gop-leader-election-registered/?utm_souce=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/gop-leader-election-registered/?utm_source=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/house-dems-turn-on-joe-biden/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/house-gop-drop-mega-bomb/
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/jewish-americans-send-powerful/
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/jewish-americans-send-powerful/#article
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/jewish-americans-send-powerful/#breadcrumb
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/jewish-americans-send-powerful/#primaryimage
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/jewish-americans-send-powerful/#respond
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/jewish-americans-send-powerful/comment/
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/jewish-americans-send-powerful/feed/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/nikki-haley-finally-makes-her/
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/ownership/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/page/2/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/page/283/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/page/3/
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/privacy/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/psaki-lying-biden-punishment/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/squad-suffers-loss-sister/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/supreme-court-petitioned-by/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/top-hollywood-icon-exposed/?utm_souce=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/top-hollywood-icon-exposed/?utm_source=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-biden-debate-betting/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-fans-send-big-message/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-pick-job-texas/?utm_souce=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-pick-job-texas/?utm_source=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-reveals-amazing-2024/
Source: chromecache_1092.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-reveals-amazing-2024/comment/
Source: chromecache_1092.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-reveals-amazing-2024/feed/
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-win-biden-viral/?utm_souce=crec&utm_medium=website
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/trump-win-biden-viral/?utm_source=crec&utm_medium=website
Source: chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-admin/admin-ajax.php
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/inboxfirst-by-klicked-master/assets/subscribe.js?ver=1.1
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.3
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/css/style.min.css?ver=4.4.4
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.eot?ver=4.4.4
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.eot?ver=4.4.4#i
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.svg?ver=4.4.4#1
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.ttf?ver=4.4.4
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.woff?ver=4.4.4
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.b
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/js/script.min.js?ver=4.4.4
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/themes/patriotjournal/js/clever_ads.js
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/themes/patriotjournal/layouts/fixed-sidebar/style.css?v=1.0.20
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/themes/patriotjournal/style.css?v=1.0.20
Source: chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2018/08/PJ-Fb-share.jpg
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2018/10/TransgenderPicFI-768x403.jpg);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2019/02/CohenSwearingFI-768x403.jpg);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2019/03/TrumpMAGAThumbsUpFI-768x403.jpg);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2019/06/cnn-1-768x403.png);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2019/10/spectrumptex-1-768x403.png);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2020/03/trumpbidenspec-768x403.jpg);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2022/02/jenpsaki-768x403.jpg);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2022/12/supremecourtdoj-768x403.png);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2023/01/HollywoodPic1FI-768x403.jpg);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/2024election-768x403.png);
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/favicon-3-1.png
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/haley-1-768x403.png);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/hunter-biden-768x403.png);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/logo-1.png
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/mick-pic-150x150.jpg
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/touch-icon-1.png
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/trump-biden-768x403.png);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/trump-speech-1024x538.png);
Source: chromecache_1092.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/trump-speech-768x403.png
Source: chromecache_1092.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/01/trump-speech.png
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/05/biden-congress-1024x538.png);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png);
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/05/israel-dc-768x403.png
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/05/israel-dc.png
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/05/jayapalsanderssquad-768x403.jpg);
Source: chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-content/uploads/2024/05/supremecourt-climateprotest-768x403.png);
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-json/
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americ
Source: chromecache_1092.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals
Source: chromecache_822.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-json/wp/v2/posts/27459637
Source: chromecache_1092.2.dr	String found in binary or memory: https://pjnewsletter.com/wp-json/wp/v2/posts/27459679
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://pjnewsletter.com/xmlrpc.php?rsd
Source: chromecache_981.2.dr	String found in binary or memory: https://player.avplayer.com/script/
Source: chromecache_924.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/51acd139-e56b-e718-c937-224392025bee?gdpr=0
Source: chromecache_1238.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/adsid/integrator.json?aos=
Source: chromecache_728.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/ata-qr
Source: chromecache_1091.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3
Source: chromecache_611.2.dr	String found in binary or memory: https://rtb-use.mfadsrvr.com/sync?ssp=intentiq&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b
Source: chromecache_611.2.dr	String found in binary or memory: https://rtb-use.mfadsrvr.com/sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b
Source: chromecache_887.2.dr	String found in binary or memory: https://rtb.openx.net/sync/dds
Source: chromecache_949.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?&gdpr=
Source: chromecache_901.2.dr	String found in binary or memory: https://s-img.mgid.com/g/18571120/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2Fy
Source: chromecache_901.2.dr	String found in binary or memory: https://s-img.mgid.com/g/19505572/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2Fy
Source: chromecache_611.2.dr	String found in binary or memory: https://s-img.mgid.com/g/19574287/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2Fy
Source: chromecache_611.2.dr	String found in binary or memory: https://s-img.mgid.com/g/19586376/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2Fy
Source: chromecache_924.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38e
Source: chromecache_1241.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=72aac350df2b4a40201cac
Source: chromecache_728.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_728.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_1238.2.dr, chromecache_728.2.dr	String found in binary or memory: https://s0.2mdn.net/instream/video/client.js
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_729.2.dr	String found in binary or memory: https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Source: chromecache_1091.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26pa
Source: chromecache_798.2.dr, chromecache_1241.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_1123.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=
Source: chromecache_614.2.dr, chromecache_707.2.dr	String found in binary or memory: https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js
Source: chromecache_1135.2.dr, chromecache_938.2.dr	String found in binary or memory: https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher-stub.min.js
Source: chromecache_1238.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/ima_ppub_config
Source: chromecache_1271.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_611.2.dr	String found in binary or memory: https://servicer.mgid.com/pixel?h=kEUEaoikOiMbSgFGsoYjJzXrcWkeBRJ3IdQJivqJOScGEpSxz0Nr9fgyvyoxLnnD2W
Source: chromecache_1123.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/ium?sourceid=15&uid=
Source: chromecache_949.2.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=191503&gdpr=
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vef91dfe02fce4ee0ad053f6de4f175db1715022073587
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_871.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_728.2.dr	String found in binary or memory: https://support.google.com/ads/answer/10923348
Source: chromecache_1231.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647
Source: chromecache_1052.2.dr	String found in binary or memory: https://sync-eu.connectad.io/syncer/1
Source: chromecache_924.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_1123.2.dr	String found in binary or memory: https://sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3
Source: chromecache_1161.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_1091.2.dr	String found in binary or memory: https://sync.adotmob.com/cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%
Source: chromecache_1123.2.dr	String found in binary or memory: https://sync.colossusssp.com/ebfa23da174faa55634171c5e49d0152.gif?puid=
Source: chromecache_924.2.dr	String found in binary or memory: https://sync.connectad.io/umatch/1?dataid=data5&uuid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a
Source: chromecache_1123.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?https://ids.ad.gt/api/v1/son_match?id=
Source: chromecache_887.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=
Source: chromecache_1241.2.dr	String found in binary or memory: https://sync.sharethis.com/lotame?uid=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0
Source: chromecache_1123.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3D
Source: chromecache_887.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=268
Source: chromecache_798.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_871.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_798.2.dr	String found in binary or memory: https://tags.bluekai.com/site/5907?limit=0&id=5283defe8db625a5edfac58f7d0521d2
Source: chromecache_1135.2.dr, chromecache_938.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/
Source: chromecache_1238.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr, chromecache_655.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_1092.2.dr, chromecache_822.2.dr	String found in binary or memory: https://tg1.aniview.com/api/adserver/spt?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc89
Source: chromecache_822.2.dr	String found in binary or memory: https://thepatriotjournal.com/?p=27459637
Source: chromecache_1092.2.dr	String found in binary or memory: https://thepatriotjournal.com/?p=27459679
Source: chromecache_1123.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=50242&puid=
Source: chromecache_1241.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=7&puid=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0
Source: chromecache_988.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Compose.94fcb44a.
Source: chromecache_932.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.NetworkInstrument
Source: chromecache_1129.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.9bb55bba.j
Source: chromecache_732.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/en.3567814a.js.map
Source: chromecache_1068.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AppModules.855c25
Source: chromecache_931.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioDock.c04ca70
Source: chromecache_1166.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.175df38a.
Source: chromecache_723.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.richScribeAction.
Source: chromecache_623.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/main.8bf92a8a.js.map
Source: chromecache_1099.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.8461959a.j
Source: chromecache_870.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.common.ab59dafa.
Source: chromecache_593.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.Dropdown.826a7b
Source: chromecache_891.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.IntentPrompt.5a
Source: chromecache_1122.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.s.2c515aba.js.m
Source: chromecache_570.2.dr, chromecache_1066.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.AboutThisA
Source: chromecache_1188.2.dr, chromecache_1258.2.dr, chromecache_1089.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.AudioSpace
Source: chromecache_727.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~
Source: chromecache_1100.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie
Source: chromecache_1096.2.dr, chromecache_1262.2.dr, chromecache_801.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Compose~bu
Source: chromecache_719.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Compose~lo
Source: chromecache_597.2.dr, chromecache_919.2.dr, chromecache_945.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Compose~on
Source: chromecache_1018.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.LiveEvent~
Source: chromecache_1036.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.ReaderMode
Source: chromecache_804.2.dr, chromecache_686.2.dr, chromecache_588.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.TwitterArt
Source: chromecache_952.2.dr, chromecache_713.2.dr, chromecache_1111.2.dr, chromecache_1026.2.dr, chromecache_743.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules
Source: chromecache_972.2.dr, chromecache_986.2.dr, chromecache_917.2.dr, chromecache_1208.2.dr, chromecache_622.2.dr, chromecache_1119.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AudioDock~
Source: chromecache_641.2.dr, chromecache_1067.2.dr, chromecache_1035.2.dr, chromecache_855.2.dr, chromecache_657.2.dr, chromecache_744.2.dr, chromecache_742.2.dr, chromecache_862.2.dr, chromecache_816.2.dr, chromecache_833.2.dr, chromecache_581.2.dr, chromecache_563.2.dr, chromecache_1003.2.dr, chromecache_708.2.dr, chromecache_1245.2.dr, chromecache_948.2.dr, chromecache_842.2.dr, chromecache_590.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DMDrawer~b
Source: chromecache_943.2.dr, chromecache_821.2.dr, chromecache_850.2.dr, chromecache_1195.2.dr, chromecache_1065.2.dr, chromecache_650.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DashMenu~l
Source: chromecache_1264.2.dr, chromecache_1120.2.dr, chromecache_778.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.SideNav~bu
Source: chromecache_1190.2.dr, chromecache_900.2.dr, chromecache_1151.2.dr, chromecache_653.2.dr, chromecache_1204.2.dr, chromecache_1152.2.dr, chromecache_1246.2.dr, chromecache_1154.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.Typeahead~
Source: chromecache_644.2.dr, chromecache_1007.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.directMess
Source: chromecache_782.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.EmojiPic
Source: chromecache_942.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl
Source: chromecache_793.2.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/vendor.8075d18a.js.map
Source: chromecache_1189.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_1271.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_1189.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_822.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=Jewish
Source: chromecache_1092.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=Trump
Source: chromecache_1123.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi
Source: chromecache_1161.2.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82
Source: chromecache_1161.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_887.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=ebaf34f4-adad-4f18-abc7-f5bcfaf662ce
Source: chromecache_949.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58570/occ?uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Source: chromecache_887.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_901.2.dr	String found in binary or memory: https://us2.rtbsystem.org/kuzv/rurl/57935209/1435566377/0.728381/0/other/901010101/21001/70462608979
Source: chromecache_901.2.dr	String found in binary or memory: https://us2.rtbsystem.org/kuzv/vurl/57935209/1435566377/0.728381/0/other/901010101/21001/70462608979
Source: chromecache_818.2.dr, chromecache_881.2.dr	String found in binary or memory: https://widgets.mgid.com/%lang/%utm%id
Source: chromecache_823.2.dr	String found in binary or memory: https://www.adsupply.com/
Source: chromecache_823.2.dr	String found in binary or memory: https://www.adsupplymedia.com/_assets/logos/adsupplylogo_110x42.png
Source: chromecache_823.2.dr	String found in binary or memory: https://www.adsupplymedia.com/_assets/logos/adsupplylogo_220x84.png
Source: chromecache_1265.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_1092.2.dr	String found in binary or memory: https://www.foxnews.com/politics/2024-showdown-blue-states-trump-aims-to-turn-red-in-november
Source: chromecache_822.2.dr	String found in binary or memory: https://www.foxnews.com/politics/first-on-fox-top-gop-jewish-group-steps-up-spending-on-behalf-of-tr
Source: chromecache_655.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_871.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_871.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_871.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_899.2.dr, chromecache_655.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_871.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_1277.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_1189.2.dr, chromecache_1271.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr, chromecache_655.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_971.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr, chromecache_655.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_871.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_1092.2.dr, chromecache_822.2.dr, chromecache_902.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/arrow_left_24px_grey_800.svg
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/close_24px_grey_700.svg
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_blue_600.svg
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_grey_800.svg
Source: chromecache_1271.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/%
Source: chromecache_1130.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_946.2.dr, chromecache_1178.2.dr, chromecache_899.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_818.2.dr, chromecache_881.2.dr	String found in binary or memory: https://www.mgid.com/services/privacy-policy
Source: chromecache_1231.2.dr	String found in binary or memory: https://www.youronlinechoices.com/
Source: chromecache_1178.2.dr, chromecache_899.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_949.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=adaptmx&user_id=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=
Source: chromecache_732.2.dr	String found in binary or memory: https://x.com/en/privacy
Source: chromecache_1231.2.dr	String found in binary or memory: https://youradchoices.ca/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 51303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 51504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 51339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 51507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 51209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 51475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.115:443 -> 192.168.2.4:50483 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.228.174.117:443 -> 192.168.2.4:51379 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@97/1235@997/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6456 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6456 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	0%	Virustotal		Browse
https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://bugs.jquery.com/ticket/12282#comment:15	0%	URL Reputation	safe
https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.9bb55bba.js	0%	URL Reputation	safe
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/MiLB_Trophy_2024/MiLB_Trophy_2024.png	0%	URL Reputation	safe
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11137_Mahindra_XUV3XO_Hashmoji_after/BF-11137_Mahindra_XUV3XO_Has	0%	Avira URL Cloud	safe
https://pjnewsletter.com/trump-pick-job-texas/?utm_souce=crec&utm_medium=website	0%	Avira URL Cloud	safe
https://abs.twimg.com/hashflags/NWSL_Utah_Hashtag2024/NWSL_Utah_Hashtag2024.png	0%	URL Reputation	safe
https://track1.aniview.com/track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=98319&t=1716532085&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=&d64=41081c8e6dc158cf4f1008529d55df0e&d63=41081c8e6dc158cf4f1008529d55df0e&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=57055280734&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532107520&plt=2&asid=652f7c84df7d58a4eb009797%2C64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C650c2ceaf96af061180a223b%2C64e4aab4c56614fd36087918&ofpr=1%2C%2C1%2C1%2C1.25%2C1%2C1.4%2C1&fpo=%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C	0%	Avira URL Cloud	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/JBApp_Hashmoji_2024/JBApp_Hashmoji_2024.png	0%	URL Reputation	safe
https://f.creativecdn.com	0%	Avira URL Cloud	safe
https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F	0%	Avira URL Cloud	safe
https://ad.360yield.com/ul_cb/server_match?partner_id=1944&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%7BPUB_USER_ID%7D	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund.f0d3ab5a.js	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-content/uploads/2018/08/PJ-Fb-share.jpg	0%	Avira URL Cloud	safe
https://cm.mgid.com/m?cdsp=556372&c=23fe11c4-ed15-5d1a-95bd-f620677ba1a0	0%	Avira URL Cloud	safe
https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F	0%	Virustotal		Browse
https://pjnewsletter.com/trump-pick-job-texas/?utm_souce=crec&utm_medium=website	0%	Virustotal		Browse
https://pjnewsletter.com/wp-content/uploads/2018/08/PJ-Fb-share.jpg	0%	Virustotal		Browse
https://ib.adnxs.com/getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3Ddn2m51u%26	0%	Avira URL Cloud	safe
https://a.mgid.com/1x1.gif?id=466023	0%	Avira URL Cloud	safe
https://ids.ad.gt/api/v1/g_hosted?id=	0%	Avira URL Cloud	safe
https://adsco.re/	0%	Avira URL Cloud	safe
https://f.creativecdn.com	0%	Virustotal		Browse
https://pjnewsletter.com/wp-content/uploads/2023/01/HollywoodPic1FI-768x403.jpg	0%	Avira URL Cloud	safe
https://ids.ad.gt/api/v1/g_hosted?id=	0%	Virustotal		Browse
https://i1.ytimg.com/vi/$	0%	Virustotal		Browse
https://adsco.re/	0%	Virustotal		Browse
https://i1.ytimg.com/vi/$	0%	Avira URL Cloud	safe
https://jsc.mgid.com/p/j/pjnewsletter.com.1604063.es6.js	0%	Avira URL Cloud	safe
https://sync.aniview.com/cookiesyncendpoint?biddername=5&pid=59c9148628a0612da3689288&key=LWKAUNHL-D-BFYD	0%	Avira URL Cloud	safe
https://bidder.criteo.com/cdb?ptv=144&profileId=185&av=36&wv=8.48.0&bundle=fbTzt19mayUyRlE5bzNzQSUyQjhwc09TOVRxZXRZM3ZKOWVHckNyUnlhSGRhdkFXa1JDR25MU2xXSTBHTTJXRWRrSW1FVGsyJTJGb2hVaGFMTjR6emFqQmlwV1dtb2Y5T09jaXdxWUdBZWxoJTJGalBKVDJ6Z201THMlMkJtWlB2aWNOZiUyRk1DdVlrV09sdXZ5RDYzazZWTVZ4cUlUbVlrQllQYzBTbTNLczNMUXlrR1NFTCUyQiUyQnJUJTJCeGclM0Q&cb=42170846370	0%	Avira URL Cloud	safe
https://ruamupr.com/images/18710/18710-375x250.jpg	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund.671b1f7a.js	0%	Avira URL Cloud	safe
https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fpjnewsletter.com&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png);	0%	Avira URL Cloud	safe
https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=adform&uid=4259863599046777896	0%	Avira URL Cloud	safe
https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:b87569e9-b5c2-4e16-b58e-f18cc16ffd7e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png);	0%	Virustotal		Browse
https://static.xx.fbcdn.net/rsrc.php/v3iZ5G4/yu/l/en_GB/PsMWZhnzbaR.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-content/uploads/2023/01/HollywoodPic1FI-768x403.jpg	0%	Virustotal		Browse
https://abs.twimg.com/hashflags/BF-10984_UngentlemanlyWarfare_AFTER_V3/BF-10984_UngentlemanlyWarfare	0%	Avira URL Cloud	safe
https://jsc.mgid.com/p/j/pjnewsletter.com.1171406.es6.js	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=8792414088104974232&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u&	0%	Avira URL Cloud	safe
https://rtb-use.mfadsrvr.com/sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b	0%	Avira URL Cloud	safe
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D709070%26c%3D%24UID&sovrn_retry=true	0%	Avira URL Cloud	safe
https://ssc-cms.33across.com/ps/?us_privacy=&ts=1716532090375.7&ri=85&ru=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%2F33across%3Fus_privacy%3D	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png	0%	Virustotal		Browse
https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.281139774378	0%	Avira URL Cloud	safe
https://contextual.media.net/cksync.html?cs=8&vsid=3595336326404779000V10&type=opx&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js	0%	Virustotal		Browse
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODI0MTY1OC90LzA/url/https%3A%2F%2Fids.ad.gt%2Fapi%2Fv	0%	Avira URL Cloud	safe
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu	0%	Avira URL Cloud	safe
https://id5-sync.com/c/231/1242/0/9.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://ssc-cms.33across.com/ps/?_=1716532090375.&ri=0013300001hSPhhAAG&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X	0%	Avira URL Cloud	safe
https://go1.aniview.com/api/adserver/tag/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=83389&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=940526eb-9660-48fb-9fc3-ce624089be48&rando=91&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532083395&AV_C_USER_ID=1716532025945-172031150014-000201-002-004790&wfc=1	0%	Avira URL Cloud	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.8461959a.j	0%	Avira URL Cloud	safe
https://ps.eyeota.net/pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b505f6c0c7ad914	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund.671b1f7a.js	0%	Virustotal		Browse
https://b1sync.zemanta.com/usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2	0%	Avira URL Cloud	safe
https://clck.mgid.com/ghits/19574287/i/57935209/0/pp/1/1?h=iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7Bd	0%	Avira URL Cloud	safe
https://patriotjournal.org/?s=	0%	Avira URL Cloud	safe
https://a.mgid.com/1x1.gif?id=825298&type=c&tg=d67dc17da8918b77c2d9121386e379a0&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=006f8	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?&google_nid=B765081F39B1F7&google_push=AXcoOmQBxYHCQQXFqqG2RfWeN1HRttmUVC1nFSiJlptxI2mqLud0pGrsUGBr9clrRAm08YNTZHN1LA3UvYrGZV4opgUXIqnwMYbUVro&google_hm=v4QH1eXLhoQHGKCl9IwBDQ	0%	Avira URL Cloud	safe
https://x.bidswitch.net/ul_cb/sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-admin/admin-ajax.php	0%	Avira URL Cloud	safe
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODI0MTY1OC90LzA/url/https%3A%2F%2Fids.ad.gt%2Fapi%2Fv	0%	Virustotal		Browse
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3	0%	Avira URL Cloud	safe
https://sync.1rx.io/usersync/bidswitch/120ce5db-d35e-4f16-8347-f58a51fd3b1b?gdpr=&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553	0%	Avira URL Cloud	safe
https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=3184881043&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=545D93AA-8C23-48E3-990F-41B7E69E2AFB&nel=1&eid=44752995%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532117417&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=4416241992297525&scor=3188310632622092&ged=ve4_td0_tt0_pd0_la0_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16427	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/modules.audio.8461959a.js	0%	Avira URL Cloud	safe
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	0%	Avira URL Cloud	safe
https://cm.mgid.com/m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://x.com/x/migrate	0%	Avira URL Cloud	safe
https://bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VG	0%	Avira URL Cloud	safe
https://rtb2-useast.xaprio.net/vtrack?i=-xwQ-8j_JYQ_0_0&event=fail&code=901	0%	Avira URL Cloud	safe
https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9&ckls=true&ci=7c0kCriUA6&nc=false&trid=-1958837753	0%	Avira URL Cloud	safe
https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEGeUdGikQC7kKtONtMpEWjs&google_cver=1	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYDvhqDQqMOD11Fc14g2ab1uPdxZ6p5RmsdR8wjeOHrLKw&oe=6677A34B&_nc_sid=7da55a	0%	Avira URL Cloud	safe
https://pjnewsletter.com/gop-bill-defeat-left/?utm_souce=crec&utm_medium=website	0%	Avira URL Cloud	safe
https://twitter.com/intent/tweet?text=Trump	0%	Avira URL Cloud	safe
https://c.mgid.com/c?v=297\|236\|8\|BEGg1nPVshiHjefJrycpm-x0ykPgwMULmOVL7G29losOkpjVsQfs8fvLjPifqjMEksntDCjZorhqhl0LgPP4us_5hbpFeDS30kQ_okEg3gk&v=297\|236\|8\|BEGg1nPVshiHjefJrycpm44GmdCCFY5SIOJ5N-jJNMdSo6m9OLK-wd47isnqmzrPksntDCjZorhqhl0LgPP4upiYEQbpKI9xrdoau1WV0DU&fw=1&f=1&cid=1604063&cbuster=1716532086081937858707&pageImp=1&pvid=18fa948f56ea8b5551e&pv=3&h2=xwIziUS4wo_UT2mUEzXCZgeiD4KdQcpbK56rnhPMeKdaqis2N7xEL3haFLY3LCBO&rid=c78efa6a-1996-11ef-8297-c84bd68370b4&tt=Referral&ts=pjnewsletter.com&iv=11&completion=2,3&muidn=o4n2DX9tTBrn	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Dopx%26refUrl%3D%26vid%3D65320528243595336326404779000V10%26axid_e%3D%26ovsid%3D	0%	Avira URL Cloud	safe
https://pjnewsletter.com/wp-content/uploads/2019/06/cnn-1-768x403.png);	0%	Avira URL Cloud	safe
https://dsp-media.eskimi.com/assets/js/e/utr.min.js?vv=0&trv=0&trve=0&src=utr&bId=1716532081333.2.fV4aFMLDonJ85kzpjgiusA&baId=ead-a23c63435ae7ed639763f101de087282&mr=0	0%	Avira URL Cloud	safe
https://www.cloudflare.com/5xx-error-landing	0%	Avira URL Cloud	safe
https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.d69da22a.js	0%	Avira URL Cloud	safe
https://token.rubiconproject.com/token?pid=50242&puid=	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c315c481-2ec0-48d6-b201-ac605ed957ab	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	172.217.16.194	true	false	unknown
de9a11s35xj3d.cloudfront.net	65.9.7.102	true	false	unknown
um.simpli.fi	35.204.74.118	true	false	unknown
cms-xch.33across.com	34.117.239.71	true	false	unknown
global.px.quantserve.com	91.228.74.159	true	false	unknown
ssum.casalemedia.com	104.18.36.155	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
rtb.openx.net	35.186.253.211	true	false	unknown
1.cpm.ak-is2.net	77.245.57.72	true	false	unknown
bttrack.com	192.132.33.69	true	false	unknown
platform.twitter.map.fastly.net	146.75.120.157	true	false	unknown
xaprio.rtb-as-useast.ak-is2.net	174.137.133.49	true	false	unknown
t.co	104.244.42.133	true	false	unknown
mwzeom.zeotap.com	104.22.50.98	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
facebook.com	157.240.251.35	true	false	unknown
sync.intentiq.com	18.239.69.3	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
bcp.crwdcntrl.net	54.220.158.112	true	false	unknown
match.adsrvr.org	35.71.131.137	true	false	unknown
creativecdn.com	185.184.8.90	true	false	unknown
uip.semasio.net	77.243.51.121	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	3.65.80.227	true	false	unknown
s-img.mgid.com	104.19.131.76	true	false	unknown
m.deepintent.com	38.91.45.7	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
pixel.onaudience.com	15.235.15.221	true	false	unknown
d1ykf07e75w7ss.cloudfront.net	18.239.70.203	true	false	unknown
go1sc.aniview.com	173.0.146.6	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	unknown
rtb.adgrx.com	54.217.19.5	true	false	unknown
config.aps.amazon-adsystem.com	18.244.28.23	true	false	unknown
jsc.mgid.com	104.19.130.76	true	false	unknown
pjnewsletter.com	104.26.3.234	true	false	unknown
sync-sc.aniview.com	96.46.186.182	true	false	unknown
iad-2-sync.go.sonobi.com	69.166.1.66	true	false	unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	unknown
hbx.media.net	92.123.16.20	true	false	unknown
pool-bid-gce-us.dorpat.iponweb.net	35.207.24.140	true	false	unknown
s2s-sc-main-was.aniview.com	172.240.45.70	true	false	unknown
hde.tynt.com	67.202.105.32	true	false	unknown
cm.idealmedia.io	104.18.140.15	true	false	unknown
pixel-eu.onaudience.com	141.94.171.212	true	false	unknown
widget.adcovery.com	188.114.96.3	true	false	unknown
cdn.engine.4dsply.com	104.16.202.119	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
scontent-hou1-1.xx.fbcdn.net	157.240.24.13	true	false	unknown
api.rlcdn.com	34.120.133.55	true	false	unknown
cdn.connectad.io	104.22.55.206	true	false	unknown
spug-lhrc.pubmnet.com	185.64.190.81	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
adsco.re	162.252.214.5	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
video.xx.fbcdn.net	157.240.253.2	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.76.144.165	true	false	unknown
pubads.g.doubleclick.net	216.58.206.34	true	false	unknown
us2.rtbsystem.org	142.0.197.196	true	false	unknown
global.ib-ibi.com	64.58.232.179	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	unknown
match.adsby.bidtheatre.com	134.122.57.34	true	false	unknown
sync.e-volution.ai	109.206.161.21	true	false	unknown
matching.truffle.bid	23.88.86.2	true	false	unknown
pool-usw.dorpat.iponweb.net	35.212.212.222	true	false	unknown
tpop-api.twitter.com	104.244.42.194	true	false	unknown
sync-eu.connectad.io	104.22.54.206	true	false	unknown
httplogserver-lb.global.unified-prod.sharethis.net	3.66.33.135	true	false	unknown
img.rtbsystem.org	104.27.203.88	true	false	unknown
sync.1rx.io	46.228.174.117	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	54.195.158.29	true	false	unknown
idaas-ext.cph.liveintent.com	52.201.179.227	true	false	unknown
dotsply.com	172.66.43.213	true	false	unknown
spug-amsfpairbc.pubmnet.com	198.47.127.20	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	unknown
nydc1.outbrain.org	70.42.32.159	true	false	unknown
srv.aso1.net	104.21.234.154	true	false	unknown
d1jvc9b8z3vcjs.cloudfront.net	108.138.8.164	true	false	unknown
analytics-alv.google.com	216.239.36.181	true	false	unknown
inv-nets-nyc-s1.admixer.net	216.219.92.22	true	false	unknown
ad.crwdcntrl.net	54.77.98.227	true	false	unknown
s0.2mdn.net	142.250.184.230	true	false	unknown
prod.disqus.map.fastlylb.net	199.232.192.134	true	false	unknown
pb-am.a-mo.net	147.75.84.158	true	false	unknown
cs.digbearings.com	54.195.106.144	true	false	unknown
ps.eyeota.net	52.57.150.20	true	false	unknown
gu2nbmodgvw2.l4.adsco.re	185.200.118.51	true	false	unknown
xapads.rtb-useast.ak-is2.net	198.134.116.50	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.214.77.117	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	52.213.145.82	true	false	unknown
cs531.wpc.edgecastcdn.net	192.229.220.133	true	false	unknown
engine.4dsply.com	104.16.203.119	true	false	unknown
d231vab146qzfb.cloudfront.net	99.86.4.41	true	false	unknown
exchange.mediavine.com	3.76.153.167	true	false	unknown
decide.dev	34.149.139.129	true	false	unknown
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
lexicon.33across.com	35.244.193.51	true	false	unknown
cs.yellowblue.io	99.80.151.237	true	false	unknown
match-eu-central-1-ecs.sharethrough.com	18.192.200.108	true	false	unknown
static.nl3.vip.prod.criteo.net	178.250.1.3	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://track1.aniview.com/track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=98319&t=1716532085&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=&d64=41081c8e6dc158cf4f1008529d55df0e&d63=41081c8e6dc158cf4f1008529d55df0e&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=57055280734&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532107520&plt=2&asid=652f7c84df7d58a4eb009797%2C64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C650c2ceaf96af061180a223b%2C64e4aab4c56614fd36087918&ofpr=1%2C%2C1%2C1%2C1.25%2C1%2C1.4%2C1&fpo=%2C%2C%2C%2C%2C%2C%2C&ri=%2C%2C%2C%2C%2C%2C%2C	false	Avira URL Cloud: safe	unknown
https://ad.360yield.com/ul_cb/server_match?partner_id=1944&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%7BPUB_USER_ID%7D	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund.f0d3ab5a.js	false	Avira URL Cloud: safe	unknown
https://cm.mgid.com/m?cdsp=556372&c=23fe11c4-ed15-5d1a-95bd-f620677ba1a0	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3Ddn2m51u%26	false	Avira URL Cloud: safe	unknown
https://pjnewsletter.com/wp-content/uploads/2023/01/HollywoodPic1FI-768x403.jpg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID	false	URL Reputation: safe	unknown
https://jsc.mgid.com/p/j/pjnewsletter.com.1604063.es6.js	false	Avira URL Cloud: safe	unknown
https://sync.aniview.com/cookiesyncendpoint?biddername=5&pid=59c9148628a0612da3689288&key=LWKAUNHL-D-BFYD	false	Avira URL Cloud: safe	unknown
https://bidder.criteo.com/cdb?ptv=144&profileId=185&av=36&wv=8.48.0&bundle=fbTzt19mayUyRlE5bzNzQSUyQjhwc09TOVRxZXRZM3ZKOWVHckNyUnlhSGRhdkFXa1JDR25MU2xXSTBHTTJXRWRrSW1FVGsyJTJGb2hVaGFMTjR6emFqQmlwV1dtb2Y5T09jaXdxWUdBZWxoJTJGalBKVDJ6Z201THMlMkJtWlB2aWNOZiUyRk1DdVlrV09sdXZ5RDYzazZWTVZ4cUlUbVlrQllQYzBTbTNLczNMUXlrR1NFTCUyQiUyQnJUJTJCeGclM0Q&cb=42170846370	false	Avira URL Cloud: safe	unknown
https://ruamupr.com/images/18710/18710-375x250.jpg	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fpjnewsletter.com&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund.671b1f7a.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=adform&uid=4259863599046777896	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:b87569e9-b5c2-4e16-b58e-f18cc16ffd7e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iZ5G4/yu/l/en_GB/PsMWZhnzbaR.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID	false	URL Reputation: safe	unknown
https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=8792414088104974232&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u&	false	Avira URL Cloud: safe	unknown
https://jsc.mgid.com/p/j/pjnewsletter.com.1171406.es6.js	false	Avira URL Cloud: safe	unknown
https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ssc-cms.33across.com/ps/?us_privacy=&ts=1716532090375.7&ri=85&ru=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%2F33across%3Fus_privacy%3D	false	Avira URL Cloud: safe	unknown
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D709070%26c%3D%24UID&sovrn_retry=true	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://contextual.media.net/cksync.html?cs=8&vsid=3595336326404779000V10&type=opx&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b	false	Avira URL Cloud: safe	unknown
https://gum.criteo.com/syncframe?origin=publishertag&topUrl=pjnewsletter.com#{%22uid%22:{%22origin%22:0},%22lwid%22:{%22origin%22:0},%22bundle%22:{%22value%22:%22H4rMkl9taFJjaE94eVhIWmhzOSUyQjlxd1dnN0xJRlU3YkRhUWVSSmwlMkYlMkZIQ2psUkUxdVpTdWJWbmMwWXB3V0xMcUttJTJCSDRNOWJjZFRsaEh2dzhDeTRUNHF0UFJUYTdaeTRMQWhEemd4TVdRa1gxUjBtaFNJckpyTVdCNmJOdXhLWklqTmJlU25zdWRzczRnZE5QVmhMWjRQZ2ZQYlV2UzhNaDFiNUw4d2hITnN6OE5zWSUzRA%22,%22origin%22:3},%22optout%22:{%22value%22:false,%22origin%22:0},%22sid%22:{%22origin%22:0},%22tld%22:%22pjnewsletter.com%22,%22topUrl%22:%22pjnewsletter.com%22,%22version%22:144,%22cw%22:true,%22lsw%22:true,%22origin%22:%22publishertag%22,%22requestId%22:%220.8846530221903095%22}	false		unknown
https://id5-sync.com/c/231/1242/0/9.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://ssc-cms.33across.com/ps/?_=1716532090375.&ri=0013300001hSPhhAAG&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X	false	Avira URL Cloud: safe	unknown
https://go1.aniview.com/api/adserver/tag/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=83389&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=940526eb-9660-48fb-9fc3-ce624089be48&rando=91&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532083395&AV_C_USER_ID=1716532025945-172031150014-000201-002-004790&wfc=1	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b505f6c0c7ad914	false	Avira URL Cloud: safe	unknown
https://b1sync.zemanta.com/usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.9bb55bba.js	false	URL Reputation: safe	unknown
https://a.mgid.com/1x1.gif?id=825298&type=c&tg=d67dc17da8918b77c2d9121386e379a0&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=006f8	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?&google_nid=B765081F39B1F7&google_push=AXcoOmQBxYHCQQXFqqG2RfWeN1HRttmUVC1nFSiJlptxI2mqLud0pGrsUGBr9clrRAm08YNTZHN1LA3UvYrGZV4opgUXIqnwMYbUVro&google_hm=v4QH1eXLhoQHGKCl9IwBDQ	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/ul_cb/sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync/bidswitch/120ce5db-d35e-4f16-8347-f58a51fd3b1b?gdpr=&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=3184881043&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=545D93AA-8C23-48E3-990F-41B7E69E2AFB&nel=1&eid=44752995%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532117417&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=4416241992297525&scor=3188310632622092&ged=ve4_td0_tt0_pd0_la0_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16427	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/modules.audio.8461959a.js	false	Avira URL Cloud: safe	unknown
https://cm.mgid.com/m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	false	Avira URL Cloud: safe	unknown
https://x.com/x/migrate	false	Avira URL Cloud: safe	unknown
https://rtb2-useast.xaprio.net/vtrack?i=-xwQ-8j_JYQ_0_0&event=fail&code=901	false	Avira URL Cloud: safe	unknown
https://gum.criteo.com/syncframe?origin=publishertag&topUrl=pjnewsletter.com#{%22uid%22:{%22origin%22:0},%22lwid%22:{%22origin%22:0},%22bundle%22:{%22value%22:%22fbTzt19mayUyRlE5bzNzQSUyQjhwc09TOVRxZXRZM3ZKOWVHckNyUnlhSGRhdkFXa1JDR25MU2xXSTBHTTJXRWRrSW1FVGsyJTJGb2hVaGFMTjR6emFqQmlwV1dtb2Y5T09jaXdxWUdBZWxoJTJGalBKVDJ6Z201THMlMkJtWlB2aWNOZiUyRk1DdVlrV09sdXZ5RDYzazZWTVZ4cUlUbVlrQllQYzBTbTNLczNMUXlrR1NFTCUyQiUyQnJUJTJCeGclM0Q%22,%22origin%22:3},%22optout%22:{%22value%22:false,%22origin%22:0},%22sid%22:{%22origin%22:0},%22tld%22:%22pjnewsletter.com%22,%22topUrl%22:%22pjnewsletter.com%22,%22version%22:144,%22cw%22:true,%22lsw%22:true,%22origin%22:%22publishertag%22,%22requestId%22:%220.8170738368574129%22}	false		unknown
https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9&ckls=true&ci=7c0kCriUA6&nc=false&trid=-1958837753	false	Avira URL Cloud: safe	unknown
https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEGeUdGikQC7kKtONtMpEWjs&google_cver=1	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYDvhqDQqMOD11Fc14g2ab1uPdxZ6p5RmsdR8wjeOHrLKw&oe=6677A34B&_nc_sid=7da55a	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Dopx%26refUrl%3D%26vid%3D65320528243595336326404779000V10%26axid_e%3D%26ovsid%3D	false	Avira URL Cloud: safe	unknown
https://c.mgid.com/c?v=297\|236\|8\|BEGg1nPVshiHjefJrycpm-x0ykPgwMULmOVL7G29losOkpjVsQfs8fvLjPifqjMEksntDCjZorhqhl0LgPP4us_5hbpFeDS30kQ_okEg3gk&v=297\|236\|8\|BEGg1nPVshiHjefJrycpm44GmdCCFY5SIOJ5N-jJNMdSo6m9OLK-wd47isnqmzrPksntDCjZorhqhl0LgPP4upiYEQbpKI9xrdoau1WV0DU&fw=1&f=1&cid=1604063&cbuster=1716532086081937858707&pageImp=1&pvid=18fa948f56ea8b5551e&pv=3&h2=xwIziUS4wo_UT2mUEzXCZgeiD4KdQcpbK56rnhPMeKdaqis2N7xEL3haFLY3LCBO&rid=c78efa6a-1996-11ef-8297-c84bd68370b4&tt=Referral&ts=pjnewsletter.com&iv=11&completion=2,3&muidn=o4n2DX9tTBrn	false	Avira URL Cloud: safe	unknown
https://dsp-media.eskimi.com/assets/js/e/utr.min.js?vv=0&trv=0&trve=0&src=utr&bId=1716532081333.2.fV4aFMLDonJ85kzpjgiusA&baId=ead-a23c63435ae7ed639763f101de087282&mr=0	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.d69da22a.js	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c315c481-2ec0-48d6-b201-ac605ed957ab	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich.5ffff2aa.js	false	Avira URL Cloud: safe	unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.e-volution.ai%2F3b2daa038df3c30052752dd6f56bb9f0.gif%3Fpuid%3D%24UID%26gdpr%3D[GDPR]%26gdpr_consent%3D[GDPR_CONSENT]%26us_privacy%3D[CCPA_CONSENT]	false	Avira URL Cloud: safe	unknown
https://proton.ad.gt/join-ad-interest-groups.html?evid=PL2EH78S	false		unknown
https://track1.aniview.com/track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532026400&plt=2&asid=64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C650c2ceaf96af061180a223b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C64e4aab4c56614fd36087918&ofpr=%2C1%2C1%2C1%2C1.4%2C1.25%2C1%2C1&fpo=%2C%2C%2C%2C%2C%2C%2C&ri=1%2C1%2C1%2C1%2C1%2C1%2C1%2C1	false	Avira URL Cloud: safe	unknown
https://rtb2-useast.xaprio.net/vtrack?i=drSf6g5wEww_0_0&event=fail&code=901	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iMSf4/yS/l/en_GB/yBXOsimGcZKLsi-rwUHCTl9YgrH-m4a6jZ0Ta9E4kz0K_s-WrgVtL_OGB5ZoB1cLpch5bjod9Ki8-f0RvFaDRltmkNkYY8jZuVHuwwDateX8xhNBFZ41W3g_g8nScjVqE0xbaPP6WhMS7bc_HmQ2JWvIJ2r9mkoV0ZzHknm8734VNtKL.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=4426393169609033625&gdpr=0&gdpr_consent=	false		unknown
https://creativecdn.com/cm-notify?pi=connectad	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://abs.twimg.com/hashflags/BF-11137_Mahindra_XUV3XO_Hashmoji_after/BF-11137_Mahindra_XUV3XO_Has	chromecache_1168.2.dr	false	Avira URL Cloud: safe	unknown
https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F	chromecache_1123.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://f.creativecdn.com	chromecache_1238.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pjnewsletter.com/trump-pick-job-texas/?utm_souce=crec&utm_medium=website	chromecache_902.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pjnewsletter.com/wp-content/uploads/2018/08/PJ-Fb-share.jpg	chromecache_822.2.dr, chromecache_902.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://a.mgid.com/1x1.gif?id=466023	chromecache_901.2.dr	false	Avira URL Cloud: safe	unknown
https://ids.ad.gt/api/v1/g_hosted?id=	chromecache_1123.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://adsco.re/	chromecache_578.2.dr, chromecache_1042.2.dr, chromecache_858.2.dr, chromecache_565.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://i1.ytimg.com/vi/$	chromecache_696.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_871.2.dr	false	URL Reputation: safe	unknown
https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png);	chromecache_902.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_823.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-10984_UngentlemanlyWarfare_AFTER_V3/BF-10984_UngentlemanlyWarfare	chromecache_1168.2.dr	false	Avira URL Cloud: safe	unknown
https://rtb-use.mfadsrvr.com/sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b	chromecache_611.2.dr	false	Avira URL Cloud: safe	unknown
https://youradchoices.ca/	chromecache_1231.2.dr	false	URL Reputation: safe	unknown
https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.281139774378	chromecache_1048.2.dr	false	Avira URL Cloud: safe	unknown
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODI0MTY1OC90LzA/url/https%3A%2F%2Fids.ad.gt%2Fapi%2Fv	chromecache_1123.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu	chromecache_812.2.dr, chromecache_599.2.dr	false	Avira URL Cloud: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.8461959a.j	chromecache_1099.2.dr	false	Avira URL Cloud: safe	unknown
https://clck.mgid.com/ghits/19574287/i/57935209/0/pp/1/1?h=iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7Bd	chromecache_611.2.dr	false	Avira URL Cloud: safe	unknown
https://patriotjournal.org/?s=	chromecache_902.2.dr	false	Avira URL Cloud: safe	unknown
https://pjnewsletter.com/wp-admin/admin-ajax.php	chromecache_822.2.dr, chromecache_902.2.dr	false	Avira URL Cloud: safe	unknown
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3	chromecache_1091.2.dr	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb	chromecache_949.2.dr	false	Avira URL Cloud: safe	unknown
https://bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VG	chromecache_1123.2.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/hashflags/MiLB_Trophy_2024/MiLB_Trophy_2024.png	chromecache_1168.2.dr	false	URL Reputation: safe	unknown
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	chromecache_1238.2.dr	false	URL Reputation: safe	unknown
https://pjnewsletter.com/gop-bill-defeat-left/?utm_souce=crec&utm_medium=website	chromecache_902.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet?text=Trump	chromecache_1092.2.dr	false	Avira URL Cloud: safe	unknown
https://pjnewsletter.com/wp-content/uploads/2019/06/cnn-1-768x403.png);	chromecache_902.2.dr	false	Avira URL Cloud: safe	unknown
http://mathiasbynens.be/	chromecache_1271.2.dr	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_1265.2.dr	false	Avira URL Cloud: safe	unknown
https://token.rubiconproject.com/token?pid=50242&puid=	chromecache_1123.2.dr	false	Avira URL Cloud: safe	unknown
https://pjnewsletter.com/house-gop-drop-mega-bomb/	chromecache_902.2.dr	false	Avira URL Cloud: safe	unknown
https://pjnewsletter.com/trump-reveals-amazing-2024/feed/	chromecache_1092.2.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/hashflags/NWSL_Utah_Hashtag2024/NWSL_Utah_Hashtag2024.png	chromecache_1168.2.dr	false	URL Reputation: safe	unknown
https://fburl.com/wiki/xrzohrqb	chromecache_1287.2.dr	false	URL Reputation: safe	unknown
https://pjnewsletter.com/#/schema/logo/image/	chromecache_822.2.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/hashflags/JBApp_Hashmoji_2024/JBApp_Hashmoji_2024.png	chromecache_1168.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
145.40.97.67	am6-prebid.a-mx.net	Netherlands	34108	BREEDBANDDELFTNL	false
145.40.97.66	unknown	Netherlands	34108	BREEDBANDDELFTNL	false
18.192.200.108	match-eu-central-1-ecs.sharethrough.com	United States	16509	AMAZON-02US	false
173.0.146.6	go1sc.aniview.com	United States	7979	SERVERS-COMUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
99.86.4.98	d3ujymc7jhx0ev.cloudfront.net	United States	16509	AMAZON-02US	false
64.58.232.179	global.ib-ibi.com	United States	13649	ASN-VINSUS	false
185.200.116.51	gu2nbmodgvw2.s4.adsco.re	United Kingdom	9009	M247GB	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
37.252.171.53	unknown	European Union	29990	ASN-APPNEXUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
18.239.69.3	sync.intentiq.com	United States	16509	AMAZON-02US	false
130.211.27.62	win.eskimi.com	United States	15169	GOOGLEUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
104.22.55.206	cdn.connectad.io	United States	13335	CLOUDFLARENETUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
8.2.110.114	unknown	United States	46636	NATCOWEBUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.138.8.164	d1jvc9b8z3vcjs.cloudfront.net	United States	16509	AMAZON-02US	false
134.122.57.34	match.adsby.bidtheatre.com	United States	14061	DIGITALOCEAN-ASNUS	false
104.17.167.186	6.adsco.re	United States	13335	CLOUDFLARENETUS	false
23.88.86.2	matching.truffle.bid	United States	18978	ENZUINC-US	false
104.19.129.76	cm.mgid.com	United States	13335	CLOUDFLARENETUS	false
52.95.115.196	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
216.58.206.34	pubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
162.252.214.5	adsco.re	United States	53334	TUT-ASUS	false
109.206.161.21	sync.e-volution.ai	Netherlands	50245	SERVEREL-ASNL	false
52.49.45.15	unknown	United States	16509	AMAZON-02US	false
141.94.171.212	pixel-eu.onaudience.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
64.233.184.156	unknown	United States	15169	GOOGLEUS	false
64.233.184.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
162.19.138.120	lb.eu-1-id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
18.244.28.23	config.aps.amazon-adsystem.com	United States	16509	AMAZON-02US	false
54.77.179.61	unknown	United States	16509	AMAZON-02US	false
34.255.174.236	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.214.77.117	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.21.73.79	ruamupr.com	United States	13335	CLOUDFLARENETUS	false
213.155.156.165	d5p.de17a.com	European Union	1299	TELIANETTeliaCarrierEU	false
52.44.96.219	unknown	United States	14618	AMAZON-AESUS	false
178.250.1.8	bidder.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
3.65.80.227	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
52.17.205.185	unknown	United States	16509	AMAZON-02US	false
88.221.124.22	unknown	European Union	16625	AKAMAI-ASUS	false
34.241.181.187	unknown	United States	16509	AMAZON-02US	false
104.18.140.15	cm.idealmedia.io	United States	13335	CLOUDFLARENETUS	false
178.250.1.3	static.nl3.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
104.19.130.76	jsc.mgid.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.197	unknown	United States	13414	TWITTERUS	false
104.244.42.195	wr.x.com	United States	13414	TWITTERUS	false
104.244.42.194	tpop-api.twitter.com	United States	13414	TWITTERUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
104.16.202.119	cdn.engine.4dsply.com	United States	13335	CLOUDFLARENETUS	false
104.22.50.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
18.239.68.199	unknown	United States	16509	AMAZON-02US	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
54.195.106.144	cs.digbearings.com	United States	16509	AMAZON-02US	false
54.171.20.81	unknown	United States	16509	AMAZON-02US	false
46.228.174.115	tag.1rx.io	United Kingdom	56396	TURNGB	false
162.19.138.119	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
51.75.86.98	unknown	France	16276	OVHFR	false
34.255.81.198	unknown	United States	16509	AMAZON-02US	false
162.19.138.117	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
18.197.7.178	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
104.26.3.234	pjnewsletter.com	United States	13335	CLOUDFLARENETUS	false
35.212.212.222	pool-usw.dorpat.iponweb.net	United States	19527	GOOGLE-2US	false
3.121.157.160	unknown	United States	16509	AMAZON-02US	false
146.75.120.159	twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
35.207.24.140	pool-bid-gce-us.dorpat.iponweb.net	United States	19527	GOOGLE-2US	false
13.32.99.20	d2wcz8sc48ztgm.cloudfront.net	United States	16509	AMAZON-02US	false
54.157.238.9	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
3.125.70.222	unknown	United States	16509	AMAZON-02US	false
104.19.131.76	s-img.mgid.com	United States	13335	CLOUDFLARENETUS	false
18.184.216.10	unknown	United States	16509	AMAZON-02US	false
116.202.167.133	inv-nets.admixer.net	Germany	24940	HETZNER-ASDE	false
198.47.127.20	spug-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
162.19.138.82	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
142.250.184.230	s0.2mdn.net	United States	15169	GOOGLEUS	false
3.75.62.37	unknown	United States	16509	AMAZON-02US	false
54.164.74.54	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
18.66.102.118	cdn.browsiprod.com	United States	3	MIT-GATEWAYSUS	false
151.101.128.134	disqus.com	United States	54113	FASTLYUS	false
104.18.36.155	ssum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
99.80.151.237	cs.yellowblue.io	United States	16509	AMAZON-02US	false
52.57.150.20	ps.eyeota.net	United States	16509	AMAZON-02US	false
216.219.92.22	inv-nets-nyc-s1.admixer.net	United States	19318	IS-AS-1US	false
63.32.35.158	unknown	United States	16509	AMAZON-02US	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
104.22.52.173	cdn.hadronid.net	United States	13335	CLOUDFLARENETUS	false
104.22.54.206	sync-eu.connectad.io	United States	13335	CLOUDFLARENETUS	false
172.217.16.194	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
34.91.62.186	unknown	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1447008
Start date and time:	2024-05-24 08:25:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.phis.win@97/1235@997/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://facebook.com/PatriotJournal Browse: https://pjnewsletter.com/ Browse: https://pjnewsletter.com/author/adamcasalino/ Browse: https://twitter.com/intent/tweet?text=Jewish+Voters+Blast+Biden+with+Eye-Opening+Move+-+This+Could+Be+an+Election+Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 64.233.184.84, 142.250.185.206, 34.104.35.123, 172.217.18.104, 23.212.90.24, 142.250.186.66, 142.250.186.174, 2.19.126.153, 2.19.126.134, 142.250.185.142, 142.250.185.129, 142.250.185.226, 13.85.23.86, 172.217.18.2, 142.250.184.202, 93.184.221.240, 23.37.42.132, 142.250.186.67, 142.250.184.226, 142.250.185.97, 95.101.149.233, 154.54.250.81, 154.54.250.80, 192.229.221.95, 37.157.2.228, 37.157.2.230, 37.157.3.20, 37.157.2.229, 37.157.3.26, 69.173.144.138, 69.173.144.165, 69.173.144.139, 23.211.9.91, 20.3.187.198, 151.101.194.49, 151.101.130.49, 151.101.66.49, 151.101.2.49, 46.228.164.11, 216.58.212.131, 172.217.18.98, 8.39.36.142, 8.39.36.141, 69.173.146.5, 13.107.42.14, 104.19.158.19, 104.19.159.19, 172.67.23.234, 104.22.5.69, 104.22.4.69, 216.58.212.170, 69.173.144.137, 193.0.160.130, 216.58.206.74, 104.18.41.104, 172.64.146.152, 204.79.197.237, 13.107.21.237, 37.157.5.133, 37.157.5.84, 37.157.4.28, 37.157.4.29, 37.157.5.132, 63.215.202.169, 184.28.88
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, uipglob.trafficmanager.net, secure2.cdn.fastclick.net.edgekey.net, slscr.update.microsoft.com, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, p.ad.gt.cdn.cloudflare.net, seg.ad.gt.cdn.cloudflare.net, track-eu.adformnet.akadns.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, ocsp.digicert.com, a.ad.gt.cdn.cloudflare.net, ads.stickyadstv.com.edgesuite.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, imasdk.googleapis.com, www-alv.google-analytics.com, a-emea.rfihub.com.akadns.net, pagead2.googlesyndication.com, cidr1.ads.stickyadstv.com.akadns.net, prebid-server-perf-eu.rubiconpro
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Input	Output
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form elements or prompts for user input were found in the text.", "The text is about political news and does not mention or imply a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could Be an Election Game-Changer By Mick Farthing I May 16, 2024 SPECIAL REP X Tweet Many Jewish Americans are shocked at Joe Biden's response to the ongoing conflict in the Middle East. For years, Democrats have claimed to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel.
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is for Facebook Pixel, a common tracking tool used for analytics and advertisement purposes. It does not exhibit any malicious behavior." }
!function(b,e,f,g,a,c,d){b.fbq\|\|(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq\|\|(b._fbq=a),a.push=a,a.loaded=!0,a.version="2.0",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,"script","https://connect.facebook.net/en_US/fbevents.js");fbq("init","154908708357560");fbq("track","PageView");
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is configuring sidebar options for a web page. It does not contain any malicious elements or behaviors. It is related to layout and user interface adjustments, which are typical for enhancing user experience." }
/* <![CDATA[ / var q2w3_sidebar_options = [{"sidebar":"main-sidebar","use_sticky_position":false,"margin_top":30,"margin_bottom":10,"stop_elements_selectors":".footer","screen_max_width":979,"screen_max_height":0,"widgets":["#most_read_posts_widget-2"]}]; / */
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is for Google Tag Manager, which is a common tool used for managing tracking and analytics scripts on websites. It does not contain any malicious elements." }
(function (w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-TX6FSMK');
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about a political advertisement and not a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron Trump Reveals His Partner And You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is primarily focused on detecting ad blockers and adjusting the layout for advertisements. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is benign and related to advertisement functionality, which is considered no risk." }
function detectAdBlock() { let adBlockEnabled = false; if(document.getElementById('LESfbmkdUexV')){ if (!adBlockEnabled) { const elements = document.querySelectorAll('.responsive-ad'); elements.forEach((element) => { element.classList.add('is-loaded'); }); } } else { adBlockEnabled = true; } } document.addEventListener("DOMContentLoaded", function () { detectAdBlock(); // detect scrollbar width (for full-width ad) document.documentElement.style.setProperty('--scrollbar-width', (window.innerWidth - document.documentElement.clientWidth) + "px"); });
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code dynamically loads an external script from 'cdn.engine.4dsply.com'. While this could be for legitimate purposes such as loading additional functionality or advertisements, it also poses a potential risk if the external script is compromised or malicious. However, there is no immediate indication of malicious behavior in the provided code itself." }
(function(s,o,l,v,e,d){if(s[o]==null&&s[l+e]){s[o]="loading";s[l+e](d,l=function(){s[o]="complete";s[v+e](d,l,!1)},!1)}})(document,"readyState","add","remove","EventListener","DOMContentLoaded");(function(){var s=document.createElement("script");s.type="text/javascript";s.async=true;s.src="https://cdn.engine.4dsply.com/Scripts/infinity.js.aspx?guid=0d94d46c-3cdb-4ae0-a09a-420aae9253fe";s.id="infinity";s.setAttribute("data-guid","0d94d46c-3cdb-4ae0-a09a-420aae9253fe");s.setAttribute("data-version","async");var e=document.getElementsByTagName('script')[0];e.parentNode.insertBefore(s,e)})();
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to loading an advertisement script from a third-party CDN. It does not exhibit any malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is simply inserting a script element into the document to load an external JavaScript file for advertisement purposes." }
(function(w,d,s,i){w.ldAdInit=w.ldAdInit\|\|[];w.ldAdInit.push({slot:17146331630347110,size:[0, 0],id:"ld-9129-2903"});if(!d.getElementById(i)){var j=d.createElement(s),p=d.getElementsByTagName(s)[0];j.async=true;j.src="//cdn2.decide.dev/_js/ajs.js";j.id=i;p.parentNode.insertBefore(j,p);}})(window,document,"script","ld-ajs");
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 1, "reasons": "The JavaScript code appears to be performing a legitimate AJAX request to a known WordPress admin endpoint. It checks for specific URL parameters and performs a random sampling before making the request. There are no obvious signs of malicious activity such as data exfiltration, credential stealing, or unauthorized access attempts. The risk score is low, but it is always good to verify the domain and endpoint to ensure they are trusted." }
var ajax_url = 'https://pjnewsletter.com/wp-admin/admin-ajax.php'; jQuery(document).ready(function ($) { var data = { 'action': 'vmp_core_counter', 'post_id': 27459637 }; const queryString = window.location.search; const urlParams = new URLSearchParams(queryString); if (urlParams.has('utm_source') && urlParams.get('utm_source') === 'actengage') { console.log('actengage') return } let rand = Math.random(); if (rand * 100 >= 5) { console.log('Sampling ' + rand * 100 + '%') return; } $.post(ajax_url, data, function (response) { console.log(response); }); });
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to emoji support functionality for a WordPress site. It includes code for testing emoji support in the browser and storing the results in sessionStorage. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is primarily focused on enhancing user experience with emojis. Therefore, the risk score is very low." }
/* <![CDATA[ / window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/pjnewsletter.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.4.4"}}; /! This file is auto-generated */ !function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\uddf3","\ud83c\uddfa\u200b\ud83c\uddf3")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65\u200b\udb40\udc6e\u200b\udb40\udc67\u200b\udb40\udc7f");case"emoji":return!n(e,"\ud83e\udef1\ud83c\udffb\u200d\ud83e\udef2\ud83c\udfff","\ud83e\udef1\ud83c\udffb\u200b\ud83e\udef2\ud83c\udfff")}return!1}function f(e,t,n){var r="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!0}),o=(a.textBaseline="top",a.font="600 32px Arial",{});return e.forEach(function(e){o[e]=t(a,e,n)}),o}function t(e){var t=i.createElement("script");t.src=e,t.defer=!0,i.head.appendChild(t)}"undefined"!=typeof Promise&&(o="wpEmojiSettingsSupports",s=["flag","emoji"],n.supports={everything:!0,everythingExceptFlag:!0},e=new Promise(function(e){i.addEventListener("DOMContentLoaded",e,{once:!0})}),new Promise(function(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectURL(r),{name:"wpTestEmojiSupports"});return void(a.onmessage=function(e){c(n=e.data),a.terminate(),t(n)})}catch(e){}c(n=f(s,u,p))}t(n)}).then(function(e){for(var t in e)n.supports[t]=e[t],n.supports.everything=n.supports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.suppo
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 8, "reasons": "The code contains obfuscated and encoded data which is a common technique used in malicious scripts to hide their true purpose. The presence of a large array of seemingly random characters and numbers, along with the undefined variable check, suggests that the script may be attempting to execute hidden or harmful actions. This level of obfuscation is unusual for legitimate purposes and raises significant concerns about the intent of the code." }
function ekm(){if(svryclwyrjvtd==undefined){var svryclwyrjvtd={ts:'1716220464',};(function(){var pzszirr=[",","'",";","z","Q","w","1","+","/","a","M","E","O","m","_","u","i","v","y"," ","}","U","<","D",".","W","C","p","T","P","?","8","@","J","b","7","s","V","{","3","S","t","l","j","9","\"",">","Z","$","L","=","k","5","#","g","6","c","`","F","0","r","X",")","%","f","I","!","q","e","n","N","K","]","^","&","-","A","H","B","Y","*",":","x","[","h","(","\\","\|","R","o","d","G","4","2"];var svryclwyrjvtd=[41,60,18,38,90,89,56,15,13,68,69,41,24,56,15,60,60,68,69,41,40,56,60,16,27,41,24,36,68,41,76,41,41,60,16,34,15,41,68,85,1,36,60,56,1,0,1,42,89,42,1,62,2,20,56,9,41,56,84,85,68,62,38,20,16,64,85,10,9,41,84,24,60,9,69,90,89,13,50,50,69,15,42,42,62,38,12,34,43,68,56,41,24,90,68,64,16,69,68,29,60,89,27,68,60,41,18,85,10,9,41,84,0,45,60,9,69,90,89,13,45,0,38,17,9,42,15,68,81,64,15,69,56,41,16,89,69,85,62,38,60,68,41,15,60,69,19,27,9,60,36,68,58,42,89,9,41,85,1,59,24,1,7,69,68,5,19,23,9,41,68,85,62,24,54,68,41,21,28,26,10,16,42,42,16,36,68,56,89,69,90,36,85,62,62,20,20,62,2,20,16,64,85,10,9,41,84,24,64,42,89,89,60,50,50,69,15,42,42,62,38,12,34,43,68,56,41,24,90,68,64,16,69,68,29,60,89,27,68,60,41,18,85,10,9,41,84,0,45,64,42,89,89,60,45,0,38,17,9,42,15,68,81,64,15,69,56,41,16,89,69,85,17,62,38,60,68,41,15,60,69,19,27,9,60,36,68,65,69,41,85,17,24,41,89,40,41,60,16,69,54,85,62,62,20,20,62,2,20,16,64,85,51,42,23,50,50,15,69,90,68,64,16,69,68,90,62,38,17,9,60,19,51,42,23,50,38,15,81,1,8,8,27,43,69,68,5,36,42,68,41,41,68,60,24,56,89,13,8,33,91,59,10,35,89,55,5,8,68,51,13,64,68,89,42,16,41,68,68,51,13,8,68,51,13,64,9,34,27,68,51,13,8,93,59,93,92,8,59,52,8,68,51,13,68,9,34,27,75,56,89,42,68,36,42,9,5,6,39,93,31,52,9,75,83,60,72,24,27,69,54,1,0,18,81,1,8,8,27,43,69,68,5,36,42,68,41,41,68,60,24,56,89,13,8,92,67,91,39,75,78,10,58,8,89,91,17,15,82,27,65,67,5,41,8,61,47,25,16,37,68,8,91,15,17,5,27,13,21,54,90,47,51,16,75,83,60,72,24,43,27,54,1,0,41,36,81,1,6,35,6,55,93,93,59,92,55,92,1,0,64,42,81,83,72,0,56,64,81,64,9,42,36,68,0,9,41,14,90,89,81,45,60,90,90,18,5,90,24,56,89,13,45,0,9,41,14,43,36,81,45,9,90,17,68,60,41,16,36,16,69,54,24,43,36,45,0,9,41,14,16,13,81,45,9,90,56,89,90,68,24,27,69,54,45,0,9,41,14,60,15,81,45,8,9,90,17,68,60,41,16,36,16,69,54,24,43,36,45,0,9,41,14,60,16,81,45,8,9,90,56,42,15,41,41,68,60,24,27,69,54,45,0,9,41,14,68,16,81,45,60,16,54,84,41,9,90,45,0,9,41,14,68,56,81,45,56,89,69,41,68,69,41,75,9,90,19,56,89,69,41,68,69,41,76,90,45,0,9,41,14,68,36,81,45,27,89,36,16,41,16,89,69,81,9,34,36,89,42,15,41,68,2,90,16,36,27,42,9,18,81,34,42,89,56,51,2,45,0,9,41,14,68,81,41,60,15,68,0,9,41,14,60,81,41,60,15,68,0,9,41,14,60,93,81,64,9,42,36,68,0,16,81,64,9,42,36,68,0,56,81,59,0,15,56,81,64,9,42,36,68,0,56,42,81,83,72,0,27,17,81,64,9,42,36,68,0,56,36,36,81,64,9,42,36,68,0,9,41,14,54,81,64,9,42,36,68,0,9,41,14,90,81,64,9,42,36,68,0,9,41,14,16,81,64,9,42,36,68,0,9,41,14,64,81,64,9,42,36,68,0,9,41,14,16,34,81,1,68,51,13,1,0,36,69,81,59,0,36,41,9,60,41,81,64,15,6
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to loading an advertisement script from a known CDN (cdn2.decide.dev). It does not exhibit any malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The code is focused on initializing and loading an ad slot, which is considered low risk." }
(function(w,d,s,i){w.ldAdInit=w.ldAdInit\|\|[];w.ldAdInit.push({slot:17027843280544614,size:[0, 0],id:"ld-2572-4971"});if(!d.getElementById(i)){var j=d.createElement(s),p=d.getElementsByTagName(s)[0];j.async=true;j.src="//cdn2.decide.dev/_js/ajs.js";j.id=i;p.parentNode.insertBefore(j,p);}})(window,document,"script","ld-ajs");
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily handles the positioning and behavior of sidebar widgets during scroll events and observes attribute changes to ensure a specific style is maintained. There are no obvious signs of malicious activity such as data exfiltration, credential stealing, or unauthorized access. The risk score is low due to the benign nature of the operations performed." }
document.addEventListener("scroll", function() { var sidebar = document.querySelector('.fixed-widgets-sidebar'); if (sidebar.offsetParent === null) return; var widgets = sidebar.querySelectorAll('.widget'); var sidebarTop = sidebar.getBoundingClientRect().top + document.documentElement.scrollTop; var currentScrollTop = document.documentElement.scrollTop; widgets.forEach(function(widget, index) { widget.dataset.stickyFrom = sidebarTop + sidebar.offsetHeight/widgets.length * index; widget.dataset.stickyTo = sidebarTop + sidebar.offsetHeight/widgets.length * (index+1) - widget.offsetHeight; widget.style.top = Math.min(20, widget.dataset.stickyTo - currentScrollTop - 20)+'px'; }); }); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(mutation) { if (mutation.type === "attributes") { if (mutation.target.style.height != '100%') { mutation.target.style.height = '100%'; } } }); }); observer.observe(document.querySelector('.fixed-widgets-sidebar'), { attributes: true });
URL: https://decide.dev/lad/17027843280544614?pubid=ld-2572-4971&pubo=https%3A%2F%2Fpjnewsletter.com&rid=&width=1000&path=%2Fjewish-americans-send-powerful%2F&x=131.5&y=163.875&utm_medium=email&utm_source=actengage&embed_type=7&embed_frame_container_type=3 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button or login action is mentioned in the text." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could Be an Election Game-Changer By Mick Farthing I May 16, 2024 SPECIAL REP X Tweet Many Jewish Americans are shocked at Joe Biden's response to the ongoing conflict in the Middle East. For years, Democrats have claimed to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel.
URL: https://decide.dev/lad/17146331630347110?pubid=ld-9129-2903&pubo=https%3A%2F%2Fpjnewsletter.com&rid=&width=590&path=%2Fjewish-americans-send-powerful%2F&x=131.5&y=4059.84375&utm_medium=email&utm_source=actengage&embed_type=7&embed_frame_container_typ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script extracts query parameters from the URL and sends a message to the parent window with one of the parameters. While this behavior can be used for legitimate purposes, it could potentially be exploited for malicious activities such as data exfiltration. However, there is no clear indication of malicious intent in the provided code." }
(function(){ var qs = (function () { var parameter_values = {}; var search_without_question_mark = window.location.search.slice(1); var search_parameters = search_without_question_mark.split('&'); for (var i = 0; i < search_parameters.length; ++i) { var search_parameter = search_parameters[i]; var search_parameter_parts = search_parameter.split('='); var parameter_name = decodeURIComponent(search_parameter_parts[0]); var parameter_value = search_parameter_parts[1] && decodeURIComponent(search_parameter_parts[1]); parameter_values[parameter_name] = parameter_value; } return parameter_values; })(); var pub_id = decodeURIComponent(qs.pubid); if (!pub_id) return; window.parent.postMessage(JSON.stringify({ id: pub_id, type: 'collapsed' }), "*"); })();
URL: https://td.doubleclick.net/td/ga/rul?tid=G-6EDY1BF25J&gacid=1010184661.1716532012&gtm=45je45m0v886867345z8848813796za200zb848813796&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=209022674 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about a political advertisement and not related to a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron Trump Reveals His Partner And You'll Easily Recognize Her Many Jewish Americans are shocked at Joe Biden's response to the ie ntfa cts ongoing conflict in the Middle East. For years, Democrats have claimed to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel.
URL: https://c.adsco.re/#0.8392835991586254 Model: gpt-4o	```json { "riskscore": 8, "reasons": "The code attempts to send the URL hash and response headers to an external entity via postMessage. This behavior is suspicious and could be used for malicious purposes such as data exfiltration or phishing." }
if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.location.hostname+"/",!0);a.onreadystatechange=function(){if(2==a.readyState\|\|4==a.readyState)window.parent.postMessage(document.location.hash+"\r\n"+a.getAllResponseHeaders(),""),a.onreadystatechange=null};a.onerror=function(){window.parent.postMessage(-2,"")};a.send()}catch(b){window.parent.postMessage(-3,"*")}};
URL: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No submit button for login is present in the text.", "The text is about Jewish voters blasting Biden and does not contain a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron Trump Reveals His Partner And You'll Easily Recognize Her Many Jewish Americans are shocked at Joe Biden's response to the ie ntfa cts ongoing conflict in the Middle East. For years, Democrats have claimed to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel.
URL: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about a political advertisement and not a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron Trump Reveals His Partner And You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code contains a function 'parentIsEvil' that checks if the top location is accessible, which is a common technique used to prevent clickjacking or framing by malicious sites. If the top location is not accessible, it redirects the top location to the current page's URL. This behavior can be legitimate for security purposes but can also be used maliciously to prevent users from leaving a phishing site. Additionally, the code checks for a specific URL pattern and modifies the canonical link, which could be used to manipulate search engine indexing or redirect users. However, there is no clear evidence of data exfiltration or other harmful activities." }
var swp_nonce = "1b801073bd";function parentIsEvil() { var html = null; try { var doc = top.location.pathname; } catch(err){ }; if(typeof doc === "undefined") { return true } else { return false }; }; if (parentIsEvil()) { top.location = self.location.href; };var url = "https://pjnewsletter.com/jewish-americans-send-powerful/";if(url.indexOf("stfi.re") != -1) { var canonical = ""; var links = document.getElementsByTagName("link"); for (var i = 0; i < links.length; i ++) { if (links[i].getAttribute("rel") === "canonical") { canonical = links[i].getAttribute("href")}}; canonical = canonical.replace("?sfr=1", "");top.location = canonical; console.log(canonical);};var swpFloatBeforeContent = false; var swp_ajax_url = "https://pjnewsletter.com/wp-admin/admin-ajax.php"; var swp_post_id = "27459637";var swpClickTracking = false; swpPinIt={"enabled":false};
URL: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about a political advertisement and not a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron Trump Reveals His Partner And You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: about:blank Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about a political advertisement and not a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron Trump Reveals His Partner And You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://sync-eu.connectad.io/syncer/1?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://u.openx.net/w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&us_privacy=1YNY&r=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata5%26uuid%3D%7BOPENX_ID%7D Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button is present in the text.", "The text is about a political advertisement and not related to a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy= Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://onetag-sys.com/usync/?cb=1716532049499 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html#goog_1625940749 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html#goog_1625940751 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for the form is present in the text.", "The text is about Jewish voters blasting Biden and does not contain any elements of a login form." ] }
PATRIOT Advertisement Jewish Voters Blast Biden with Advertisement Eye-Opening Move This Could mgid PROMOTED CONTENT Be an Election Game-Changer By Mick Farthing I May 16, 2024 15 Of The Most Inappropriate Dresses On The Red Carpet SPECIAL REP X Tweet Barron You'll E Elon Musk Confirrns Unfortunate News Many Jewish Americans are shocked at Joe Biden's response to the No One Expected This! ongoing conflict in the Middle East. For years, Democrats have claimed pjnewsletter.com to be allies of the Jewish people and the nation of Israel. Yet Biden is becoming increasingly hostile to Israel. Find Out More
URL: https://eus.rubiconproject.com/usync.html?p=a9eu&endpoint=eu&gdpr=0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form fields such as 'username' or 'password'", "The text does not contain any submit buttons or links with 'login' or 'sign in' text", "The text does not contain any language that suggests it is a login form" ] }
Life Changing No-.. MadMuscles No coach - this Open program will take you to the next level of fitness
URL: https://aax-eu.amazon-adsystem.com/s/ecm3?id=4426393169609033625&ex=appnexus.com&gdpr=0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not mention or suggest the presence of a login form.", "There is no indication of fields for username or password.", "There is no mention of a submit button or any action to be taken upon form submission." ] }
MUSCLES Life OHO Changing CHALLENG. No-.. MadMuscles No coach - this Open program will take you to the next level of fitness
URL: https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not mention or suggest the presence of a login form.", "There is no indication of fields for username or password.", "There is no mention of a submit button or any action to be taken upon form submission." ] }
MUSCLES Life OHO Changing CHALLENG. No-.. MadMuscles No coach - this Open program will take you to the next level of fitness
URL: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=3lift.com&id=3671706280332458943464 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not mention or contain any elements typically found in a login form, such as fields for a username or password, a 'submit' button, or any prompts for user authentication." ] }
MUSCLES Life OHO Changing CHALLENG. No-.. MadMuscles No coach - this Open program will take you to the next level of fitness
URL: https://proton.ad.gt/join-ad-interest-groups.html?evid=O3EASLW0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not mention or suggest the presence of a login form.", "There is no indication of fields for username or password.", "There is no mention of a submit button or any action to be taken upon form submission." ] }
MUSCLES Life OHO Changing CHALLENG. No-.. MadMuscles No coach - this Open program will take you to the next level of fitness
URL: https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html#goog_1625940757 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not mention or suggest the presence of a login form.", "There is no indication of fields for username or password.", "There is no mention of a submit button or any action to be taken upon form submission." ] }
MUSCLES Life OHO Changing CHALLENG. No-.. MadMuscles No coach - this Open program will take you to the next level of fitness
URL: https://pjnewsletter.com/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form elements found in the text.", "No input fields for username or password found in the text.", "No submit button or login button found in the text." ] }
PATRIOT Trump Unveils Incredible 2024 Move Donald Just Zeroed in on These 2 'Untouchable' States Despite tremendous opposition from Democrats, including four criminal cases, Donald Trump's 2024 chances are looking better and better. Polling suggests he can win critical swing... May 17, 2024 SPECIAL 4 OREPORT After Biden Caught in Ridiculous Lie White Democrats Suddenly Betray Biden over 1 Evil Move Join GOP in Passing Landmark Bill House Issues 1 Bogus Excuse Democrats rarely speak out against their own leaders. Much less a Under Joe Biden, Americans have watched as the economy's been Democrat president. But from all appearances, Joe Biden is a failed flushed down the drain. Almost immediately upon entering office, president. His agenda... Biden pushed policies that triggered runaway... May 17, 2024 May 17, 2024
URL: https://x.com/intent/post?text=Jewish%20Voters%20Blast%20Biden%20with%20Eye-Opening%20Move%20-%20This%20Could%20Be%20an%20Election%20Game-Changer&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&mx=2 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No login or submit button is present in the text." ] }
Don't miss what's happening Log in Sign up People on X are the first to know. Welcome to x.com! x We are letting you know that we are changing our URL but your privacy and data protection settings remain the same. For more details, se our Privacy Policy. rivacy

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.9590676997508547
Encrypted:	false
SSDEEP:	3:tEJSFvCvmFOmEIAm/:eaCkjhh
MD5:	1D4156A8BC0243E4C1E8363710764E8D
SHA1:	3B7DAB0958DF1213A5043F9E9A263006C0925A8A
SHA-256:	DA45962A1FB4A049C9367EBE9B1B628F071D7A4C9997EE807C01D23F4866E19C
SHA-512:	99E43976E2ADD0F4F6F5B3C59E6AA1B9E65622DE2D7DC7BDA927601DE93535424E720DD4955D4CE69F8C88CFA7E3196D77B391A53BE60C84B6B3C1B70B42C6A9
Malicious:	false
Reputation:	low
URL:	https://api.rlcdn.com/api/identity/envelope?pid=105
Preview:	must be exactly one 'ct' and 'cv' parameter.

Chrome Cache Entry: 1002

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3442)
Category:	downloaded
Size (bytes):	3458
Entropy (8bit):	5.200134228307927
Encrypted:	false
SSDEEP:	96:yrnxPAf80g4ih3nAYdqHsfQLsftFWGm+H9BELCHErQYi+Jry:m6HBih3zsHVsfJr3ELCHErFi+5y
MD5:	D049E0099B3D47838CD0AA5D379E283A
SHA1:	B7F429E52E2CE7A86ADDF124EDBB0229F951224D
SHA-256:	18A246F982F020158A7571C9EF7CEEB8109E202436B63E77059DDFAD2E3A1536
SHA-512:	DD182F0680FBAB840AA220EEB04BA305F5D7D65113684710D512FB3610F8C4C91FCBF2363785CD50BA00903E8F6D9CEFC305840F3E0BD1FFD5E4942F5265DF4B
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idl.js?ga=0&gc=&do=pjnewsletter.com&e=27&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Preview:	void(0);/* */;.!function(){function t(t,e){const n={brand:t,version:[]};return s(e)&&!a(e)&&(n.version=e.split(".")),n}function e(t,e){return null==e\|\|0===Object.keys(e).length?t:function(t,e){const n=-1===t.indexOf("?")&&-1!==t.indexOf("&");return t+(n?"&":"?")+e}(t,function(t){if("undefined"!=typeof URLSearchParams){const e=new URLSearchParams;for(const[n,r]of Object.entries(t))e.append(n,r);return e.toString()}const e=[];for(const[n,r]of Object.entries(t))e.push(`${encodeURIComponent(n)}=${encodeURIComponent(r)}`);return e.join("&")}(e))}function n(t,n,r,o={}){const s=o.method??(null!=r?"POST":"GET"),a=new XMLHttpRequest,i=t=>"function"==typeof n?n(null,null,t):n.error(t);a.onreadystatechange=()=>{if(a.readyState>=4){const t=a.status;if(t>=200&&t<300)return void((t,e)=>{("function"==typeof n?n:n.success)(t,e,null)})(a.responseText,a);i(a.status)}},a.onerror=i;const c="GET"===s?e(t,r):t;if(a.open(s,c),null!=o.timeout&&(a.timeout=o.timeout),null!=o.customHeaders)for(const[t,e]of Objec

Chrome Cache Entry: 1003

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32273)
Category:	downloaded
Size (bytes):	32496
Entropy (8bit):	5.297683100424694
Encrypted:	false
SSDEEP:	768:50T98c1TdEgTfahFTtp+7ZX7ZrK9qNwTNuhENOlDxQiCP:WvBWgTGFcX7ZrCNuhyOtxPCP
MD5:	36EBDB358A3CD59375C03596C9721DFF
SHA1:	42D8C9F35A5E86F47514EEB349E2E5AC3F44BE2A
SHA-256:	4186E15B050EEAEEEB57C95C2C5D100DC1728A97DC58E9921F04F5897BFEA9FF
SHA-512:	AB13228A14E30864DCD26AB67E7DB68CDE17FAA073F4800F6D258271D9D18F4B669013EC07AA8FA3F84C4B08B5412BE3D465CE6F9593DA4B956D014F86A3572B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.54e36bca.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~bundle"],{69843:(t,e,n)=>{"use strict";n.d(e,{Nr:()=>k,ZP:()=>C});n(6886);var i=n(2784),r=n(25686),a=n(45184),o=n.n(a),s=n(15019),l=n(3655),u=n(1206),c=n(14983),d=n.n(c),f=n(96001),h=n(56992),p=n(63142),m=n(15686),y=n(73186),v=n(86765),g=n(27931);const _={stiffness:267,damping:20};class b extends i.PureComponent{constructor(t,e){super(t,e),this._handleResize=()=>{window.requestAnimationFrame((()=>window.requestAnimationFrame((()=>this._setDimensions(!0)))))},this._handleLayout=()=>{this._setDimensions(!0)},this._handleUpdatingParentAspectRatio=t=>{const{itemWidth:e}=this.state,{setParentAspectRatio:n}=this.props;if(n){const{height:i}=t.nativeEvent.layout;n(e/i)}},this._shouldRenderItem=t=>{const{shouldRenderAll:e}=this.props,{currentItem:n,itemsToShow:i}=this.state,r=n+2*Math.ceil(i);return

Chrome Cache Entry: 1004

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 538, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	230556
Entropy (8bit):	7.845725416592022
Encrypted:	false
SSDEEP:	6144:+QGVE2q/lcm39FDQZIqh6/B+/8+eLeTdNh067SLkL:+Q1/eS/BGum4/s
MD5:	1AB80AD2B4D79AC7F651365EFBA2AD15
SHA1:	1910F337687219248DA409C69C6A0AB9D77B29F1
SHA-256:	B0A60F6412F558FE5C15E60F136F665777E367D2D89A1E1FC74223C02CA32CA5
SHA-512:	C542D8CE47E2E900C12AC6E8B5E00079DD2DFC08548A9947EF7EC2221996821108A12A2406486A4A8578DC85AF50E46E5758B0F2D2501ED1E35C94DAEC753DBC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.v....PLTE.R..............................................................v....................................m...........z.....].................2..l..z...........c.M.................r....Vy...p.................z..[.x...f.......s.y....A.....xh..vT.y_.n.u...zZ.\|..l..h..yj.tI.lZ.xV.jIrw.kw..kYuv~.lHwws.g..h4.iS.gF.Y..lV.hEbp.Hs.i5skl.]=.gF.U.`k.ri]diw.f.\CufJWg.feiXg.ee_Xfw.X5.[>.O..X2V_uwZ8nZJ.R6P].a[].P"wY&SZtcWMiX8VXgwP7IXyWWWkV&LWrvOIVgWTI.C.gO4wH+hO.AQwkH5IRXnH'gG(DLg`G7gI.TIEIIT8Iu^G.BHUk<#GFERC2XE.6Fh9FU]=$e8.V>.9@NT8+B<8X7.,<eF8)R2!K8.68H8Z?51S0.-7GE1$F2....158#5X(5ET'.I).m..7.'H(.;'1!-U?(.&-<%FA$..)T4&.M.%7'.()("(9.'I- 13"..'8! 3.!F!!..",..7.....0..F..>.....'#....8..0.....(..'.....7..'.....1..-.....'..#.........................(.M...WIDATx..ZMHcY.u?P... B.3.......z.w..4...I...^.C'..$..J+D...5.=..(...l.2..W.i.....\..Se.....L...j..{...{7jb..s..........._.\|.........^....+...O.Yq.r.....u`y.E.3.......:..

Chrome Cache Entry: 1005

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (430), with no line terminators
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	5.385155713109947
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRa3QbStFiYSB0Fgdu43o9fk4tFiYG:haoDCfJ2fJfyQuF5Kpp3ipF5G
MD5:	9FE2A4ABE094B3EDD5653EB18CE69E0E
SHA1:	2820D04B20499E68E6DC35B30D01BCB77C05421A
SHA-256:	8D2AC7CE0784DC73D1F9D6338E03AC53769368B617F8B4DAB35DBD4A463186C9
SHA-512:	42E321E3C6BC7322C514DF502E63ED93C33033406AE471AE5B0284D002E2006B5E95540EE3C67B33AD5510212532788001B66461B6CC587DEB56A91B0949B24E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=6035134773&adk=1088046264&adf=3378254834&pi=t.ma~as.6035134773&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221071&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078273&bpp=1&bdt=261&idt=640&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&prev_fmts=0x0%2C590x280%2C590x280&nras=1&correlator=2528708288376&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532079&ga_hid=396375652&ga_fc=1&u_tz=-240&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=2386&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083639%2C31083822%2C44795922%2C95331983%2C95333409%2C31083940%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2604152591232249&tmod=1068189570&uas=0&nvt=1&ref=https%3A%2F%2Fpjnewsletter.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=3&fsb=1&dtd=647
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CKzcyqfUpYYDFfGcJwIde1YKqA"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-7666278362879166\\\"]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 1006

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x118, components 3
Category:	downloaded
Size (bytes):	2214
Entropy (8bit):	7.266451117003875
Encrypted:	false
SSDEEP:	48:hviWve2s52sCWF38kkCgUiGiA4meTHkIO/dzA5MGk:few/W3KU97CHdKE5Mj
MD5:	5B819BD4F78643C3C6B74A58F598540E
SHA1:	11666B50113A8EC7E3667E3C92B89DD4020BFD1E
SHA-256:	71FCF1BEA2F7427A669094C393CA02A517DA2939FB2EB029686E7CCAE8B1241E
SHA-512:	D2FAD7AC526E28354F22AB99E407C52209E85B1856AD2A3D6272789B3A7A0F0DCE4ED36E077A5F811AB0C199F74C77BAB9286BADF7F42C6E6BFFABB9F89921DA
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/339626099_183897197874346_8329189959842615239_n.jpg?stp=dst-jpg_fb50_s320x320&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=zrntXLkwUekQ7kNvgHFB8UZ&_nc_ht=scontent-hou1-1.xx&oh=00_AYDVwgWha20yLuQ2GH4iJtgqXJFE9KrP6eOWeSmTkozYFA&oe=6655FF96
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..IJ2YD4IATQc6FcuD828W..(.bFBMD0a000a8701000064030000410400007404000095040000bd040000ae05000050060000b90600001b070000a6080000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......v.@.."..............................................................................J.L^....8uGO_7\.=\|.Y..UI.)...r.Z.(.S.1.....F.V.)H~yU}.F.Z.....}S..;...j3.)...D...ux........i.M.2.,&]...9..kK...#.6..4....(.9.r....lZ....5h".AI%..II!$..J........6..:.:3kB.QK:.=s....k.........X($..)...j.g:J.:%.h.,8-.O..g?\t.st...s...f.S).g5.i..Yk.....KE.f.`..sZ.%....0[..t`n[.\S.......<}......=F.$...!...D........hJ.."JD.K%...V<.o.uo.uk..XQ...3*.J.M.H..[B...N..4..hC@...s..m.&.t..T...e..@.....C.................................. @.P0.............\.r......\..$H.9.c..9.<.z..kZ..kZ...s..1.s.$.W..kZ..kZ....1.s..1"O5U~\|H.9.c..9..x...>$s..1.s.$.UU~\|H.9.\.D.UUW.

Chrome Cache Entry: 1007

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7890)
Category:	downloaded
Size (bytes):	8113
Entropy (8bit):	5.507438185640679
Encrypted:	false
SSDEEP:	192:a483zGGJ2fK1HWKjSH93CwfwAuKy33zVyjm5bPwFl17cwh5456oekgdR:a483hsgHWKflQe0/vBka
MD5:	1B87BA821E91F43B68338D671D28B79E
SHA1:	9CB8E75DECC034F6A1A4C5BFD54A8C4BCEEA2BDB
SHA-256:	BA596653CA8AE43009B6ABB2E2A123788CBBED84808646DD280A160823B261EC
SHA-512:	919B4FDDC2B27D12F8AE38B0CB09B2733548AFD7FA46582122A31ACE1F2EB7F8B7FF063F4DCBFFD2BA02AA630D146174AB2F5B3A49F3259E5B9E709B15D2832F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun.db6cd65a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun"],{22167:(e,t,s)=>{s.d(t,{BU:()=>_,Cr:()=>r,To:()=>n,UN:()=>o,eD:()=>a,td:()=>d,v1:()=>i});const a=Object.freeze({ONE_TO_ONE:"ONE_TO_ONE",GROUP:"GROUP_DM",SECRET_ONE_TO_ONE:"SECRET_ONE_TO_ONE"}),n=Object.freeze({AT_END:"AT_END",HAS_MORE:"HAS_MORE"}),r=Object.freeze({CONVERSATION_AVATAR_UPDATE:"conversation_avatar_update",CONVERSATION_NAME_UPDATE:"conversation_name_update",CONVERSATION_PROFILE_INFO_HEADER:"conversation_profile_info_header",CONVERSATION_READ:"conversation_read",CONVO_METADATA_UPDATE:"convo_metadata_update",DELEGATE_ALERT_BANNER:"delegate_alert_banner",DISABLE_NOTIFICATIONS:"disable_notifications",ENABLE_NOTIFICATIONS:"enable_notifications",END_AV_BROADCAST:"end_av_broadcast",ENCRYPTED_CONVERSATION:"encrypted_conversation",JOIN_CONVERSATION:"join_conversati

Chrome Cache Entry: 1008

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15423), with no line terminators
Category:	downloaded
Size (bytes):	15423
Entropy (8bit):	5.54336708623407
Encrypted:	false
SSDEEP:	384:A1qPiX0ZlT7mKVBGDzltEPFxQua6jgKdRw9mZxnVfU:A1qPq0ZlT79ctEPFU6jgKdRw9mTdU
MD5:	9E0AC02E1A227F0F7932FFB58D1C0447
SHA1:	6794C53EA36D297481CC71C8867EBF9CC693F692
SHA-256:	A5E9E7E77798113BBFD572DD3E06A08BB53AC219D9278DA6FFCB6CCBAD2DBB6C
SHA-512:	8D9E625271846C35230B6DBEBF7D41D8D59DE910403C025E61F590D5CBBB230CEF825F49AF2800BC58DEA204BE6303F3DB4056F56BF01E28E3D2FF247DC317F6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1716221071&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&pra=5&wgl=1&easpi=0&aihb=0&asro=0&aslmct=0.7&asamct=0.7&itsi=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078166&bpp=3&bdt=154&idt=544&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&nras=1&correlator=2528708288376&frm=20&pv=2&ga_vid=1010184661.1716532012&ga_sid=1716532079&ga_hid=396375652&ga_fc=1&u_tz=-240&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083639%2C31083822%2C44795922%2C95331983%2C95333409%2C31083940%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2604152591232249&tmod=1068189570&uas=0&nvt=1&fsapi=1&ref=https%3A%2F%2Fpjnewsletter.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=579
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'',reactiveConfig:{"adWidth":1005,"adHeight":124,"adClient":"ca-pub-7666278362879166","adFormat":1,"adKey":1812271801,"hasFillMessage":true,"fillMessage":[{"key":"qemId","value":"CJCrvafUpYYDFXaPJwIdk-IKCw"}],"delayVisibleUntilCreativeReadyMessage":false},trafficSource:2});</script><script data-jc="39" data-jc-version="r20240522">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var m=this\|\|self;var n,p;a:{for(var r=["CLOSURE_FLAGS"],w=m,A=0;A<r.length;A++)if(w=w[r[A]],null==w){p=null;break a}p=w}var aa=p&&p[610401301];n=null!=aa?aa:!1;var B;const ba=m.navigator;B=ba?ba.userAgentData\|\|null:null;function C(a){return n?B?B.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function D(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function F(){return n?!!B&&0<B.brands.length:!1}function G(){return F()?C("

Chrome Cache Entry: 1009

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	44258
Entropy (8bit):	7.9796607981068455
Encrypted:	false
SSDEEP:	768:raOGrGr55wHYb6y4nOqQkfxoJOTEmPLaj9vJg9ciNBBtdfQB:WOA055vb6y4nx4MNLa5v6OiNBt4B
MD5:	2F9C1601AD3893295534E53D10EB7DE2
SHA1:	CBE3020C0D5C1051AA013D852C019ED4EC691FBE
SHA-256:	5BF2CB81FE659178511A6D20AAB20F2DBE29C00A53DFDFCA2C5D26890B892B95
SHA-512:	16608421CAE7510165EEC9FE1641C37182E9B206AB397583D9FCFBE5C0D36C2322A488BC9EE3A251157DFE41B0116C4E51F2A949701D74684A4C8EF78A96E2D4
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/05/jayapalsanderssquad-768x403.jpg
Preview:	......JFIF.............................................!..!..)1(%(1)I9339ITGCGTf[[f.z...................................!..!..)1(%(1)I9339ITGCGTf[[f.z..............."..........5...................................................................\|....a..l..2..X..........V.n....S.MX....SB...@.`3&.....4.fM0..@..P3F...F.q..Ufd...4.fM0..J.h..4..5l.Y.@.9.LIfM0..L...T...6i..@3f.....4.f. ..F.p..4`...P..v.....a..C/..N.1..$.....Qo.oQ.0Y..e..u}A....A.VT....v.DZ...<.@.(.PB..'.<.....=8.W.m.?sN.H..x... .......2<.zY....}[6....ve@.b..T`.$..0.@..P......l@hTT.&_Q...................<.S2..w..f...M.cG%4Bm.....36wGT....E.@...@@.C..UT..k...<}..uu=.u......T..........{.Z....O@.yd.cMU.=h.)D....@........... . ."(.(..1..}.{_^...[..O'...!.8..K....e%.1.B.....p.V:.)vW"..T..hM..".............X~ga...m[..........{f[Q. ..D.g..f..Q2hw......u.5.Y.4^sv@.}.}Y..".....@EE...... . .........g.m..o\.....5........y..9JeS.P..O.=....l3."1/.F......Z..yU@.@@.....T..s.6S...W.....J.U.

Chrome Cache Entry: 1010

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1616)
Category:	downloaded
Size (bytes):	19597
Entropy (8bit):	5.519855848013009
Encrypted:	false
SSDEEP:	192:2Qj5S9YhSXOcfPfaLXHVMI7tuSsPnK2KyEd5+8sHLAAjJsb6r5eQMtBMmXAPio:2yFhSK3qCtuSyluOHLwbnXIH
MD5:	8B22FE06286F74831A1EAB2B68443219
SHA1:	82CEAE9D9683212E92FE658D57B73CE4F80628FB
SHA-256:	717CE4C1322AB355314A474AFD5A5A2401BFFDA29F5C5F60595B178BE0CC7409
SHA-512:	EF7D2FA386983973FDE824744BC7A30B5F7B88B748AEBD486A00B7D0D1C223292E3197256E4BCC20BAFC00D6C081F0F831E947F1CF088B25A8FA0BE6F1DA7740
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/8b22fe06286f74831a1eab2b68443219.js?tag=pingback/client/pingback
Preview:	(function(){'use strict';function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this);function q(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.q("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ca(this,"description",{configurable:!0,writable:!0,value:g})}i

Chrome Cache Entry: 1011

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3654
Entropy (8bit):	7.929794863313375
Encrypted:	false
SSDEEP:	96:m81wykoJW6gVZtxI0R7HsCKmtkdEWuohv5mB0MYOi:WyBW3ZNR7V1WjoWMYn
MD5:	33BD87C2B4EF2AD0510E4B3A37D17814
SHA1:	06615E15E9D25EE4A93201ACA763D36796E32B54
SHA-256:	EEDA93F9B15F022D2BDEBC392425AB5A136CA49DDDBCDE4144D12E77F03EA7CE
SHA-512:	D650B352DE05117AB2473B680D3AC5831CBF07CE17E8185FF74D3F080A6A7A69174F2DEBFB278562F26A78AB7262A107567F655A162882E428049B7BF6575552
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/icon-default.522d363a.png
Preview:	.PNG........IHDR....................IDATx......w.....fFw.l...y1.-.X....5..Q..:.o........:^&..d2.L&...}....Vi..vk.. ..C..6Z..(.....s...9.Q...m.e.k.kX8..j..2S...ent.27y...[.N.p..Wg..~....D.....c.f.".l.1>q..C2y....;....~;..{...7....%n.....V).W.?.....^...\^.\.%.U....D/.J\........,..N.].C.u...."..F"..a.n!....u%.....n..%..T.1.J...^.'..1m.O......b\.q..KE_."$..P.3...KHH].].<k...VxV,...JH`U~V.q...GHh=F.E.=h...fyPD=a....yB..e....yK.\|.ZHQ...9.k.RV...D@.Z....W.(..........Z....{.....;.@;........m..kl.m.......a.......Z.=.w}]_.n.....^......t~nB.....J...h...S.%...AQ?..S..m....B.J.Nk..d.s....T...n.t^.Y.........~..P..$.\|.....Nz&.......}...>.B.7...O?...D-$[.I.d.......D.^.6.....(B).Q.d..I.....m.HT..<$A.b:.<F.....~.....J........6."...w.....U...ql.$b..$..i.D.:.........D... .[.W.g,.E.(.)...9!{;2..d..\|$V.r.....$.....V...p...UtCb4..)!..t..1><.......\|J..$.Eb.?.%.......q..<1..g5.Qo.kY......-./&.2......r.D..\|*D.....qvg...'/....RI..:..$?.........<\.a...m...5...

Chrome Cache Entry: 1012

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1013

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/tapad_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&tapad_id=1c74b149-6627-4305-8e39-2d356a63f8cd
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1014

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	515
Entropy (8bit):	3.7079048680061124
Encrypted:	false
SSDEEP:	12:emfrmwtm7AXyUkHHyKsfNf0MLq6p3HHgsfNf0MLq6poHHu:emfBAKiMfRLLFVFfRLLFWu
MD5:	78B73ED4B5ECE35CD6424B56864206DB
SHA1:	6D3C492C0376BD33D010FBBF91CE7586A4131CB2
SHA-256:	59A3FB93AB04312D58A8D0F4E0E9396A8A4B5D2718EB61CBDAADFD8AED34301C
SHA-512:	33AFD353B8313A292F0F1B7A4D23B7317595026688C88903681771355DEBE32B0D7197075E7644D8D664C8D03254824764D2215CB51EA91E9556A3E018D4279E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage
Preview:	[null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",0],["94166617",1]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",1],["94166617",1]]]]

Chrome Cache Entry: 1015

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://a.mgid.com/1x1.gif?id=466023&type=c&tg=a1b360f4e8ddac07859c62c6b627ddd8&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=14fa1
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1016

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	35554
Entropy (8bit):	7.993399198485169
Encrypted:	true
SSDEEP:	768:tVmSx/bOqvDd2XiIkTFS8P5YsZIpKE09wpzdnyu4CmxsdRhNUA8tq7:twStOw2SIN8YsGpuOpzmIhmHq7
MD5:	B63BCACE3731E74F6C45002DB72B2683
SHA1:	99898168473775A18170ADAD4D313082DA090976
SHA-256:	EA3A8425DCF06DBC9C9BE0CCD2EB6381507DD5AC45E2A685B3A9B1B5D289D085
SHA-512:	D62D4DDDB7EC61EF82D84F93F6303001BA78D16FD727090C9D8326A86AB270F926B338C8164C2721569485663DA88B850C3A6452CCB8B3650C6FA5CE1CE0F140
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j.....IDATx..].\|\U.?...e&..I..M..).Z.PJ.(.M.-O+..>\|.....n.....\|."..B.+Pi.. ....t.K..I..>.....\|/.$3...LH...r.r.9..........`GJk.;..3,K.......(.tv.b..Z........Z...R.M..}...-...\...4...._n2...;.8....z...r.xi0.4...[...<...,...C...Sy.}..20...L]S}.V.\..Ms.mD%..}.mu..,....B.POw[Q..?....aV...n8.S^.T5U..3.9.4.....;(u..D.p...TY...P+..y^.,......p.E...e;K.%KNj...l....,+....bQ....M$.>..9..x.j&...NR..u..W..{..Z..s........3u.....<.gH..0.]...q.e]...`.94~...F....!.Re~.KQU .+..z...W.z.=_....k..Tii...i..,.L...v..N..X,..jk..94~.....%...z....).BG5+J..W.U.!\|...\IG..,a....Q!.._.2.ZzZ ../s...T......S..Uy.....;bAj.Jv..u..`.e.~..\...l.df.k{zBB.+qWH..!.....d..qh@.t-.N].!.....o?\U.\w..?}.GS{o.HT...1ts.....x.+....===.W.C......y......o..s,#:t.....s...v..'....8.{_.Z..N...K.$..\..~.mmmkh..Y.C......!-kH.UU............\..2hwg,j...T...r.a...4M....C...............\|.......f..9.C...;v...a....g..r5Mw.=`......Q..W.... ....&"..

Chrome Cache Entry: 1017

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	5.260750443008161
Encrypted:	false
SSDEEP:	3:C/2A3njBlJQ3iIU2dNoMPb4fn:C/nXjBlJ9Ojon
MD5:	BEE242A6479DA1E3ECB21B61706DB2B4
SHA1:	2BAE05D1D7530C6D41F9E7ECB2BE514D15609A5E
SHA-256:	502F96839DF1BA238D4D6DA51D1BE428ECD2AD292F3851D3852014E19B00913A
SHA-512:	F0103A15DFAB9A77AC1A2771B6833921A5F52B6A99347ECA6948F8B8A84993E90466362CF3AD05B3DDC9C514F8DC5FB0B269DF75F4C0628F9CC444531447CD51
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=&j=window.advBidxc.mnetRtusId
Preview:	window.advBidxc.mnetRtusId({"status":"OK","userid":"u-GsN-15r_S1YbjPv4a-eibQ0OhFhW7H"});

Chrome Cache Entry: 1018

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6090)
Category:	downloaded
Size (bytes):	6277
Entropy (8bit):	5.309786768451611
Encrypted:	false
SSDEEP:	192:BFLfcIdO/26yHqjsoTpzdziqRqN7luir3QW9CMn0vjjjU:77cDyaocirAs0vjjA
MD5:	C8398EE881CED9AB9054699B8512962B
SHA1:	70D359F6AA77E32FBEB1005731F60BA77354DF96
SHA-256:	231B14BDEF60089B21A8E30A6B9B7716E3C280025C8544A8B35D7EA9AD5BDD5D
SHA-512:	442D5BCA54A255368D56D7E7ABA3495B3D60C2ACF17121FB2B684FC57EFE4857C68D17E7D7F0EC124EA6C533FC8227EAA710B65C12DE86F4941D7EE4AE22DC2E
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer.a2e6b3aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.LiveEvent~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer"],{92462:(e,t,a)=>{a.d(t,{Tc:()=>o,yt:()=>r});a(36728),a(6886),a(2784);var i=a(6556),l=a(55249),s=a(39466);const n={autoplayPrioritizationPolicy:a(17323).Qr,minimumVisibilityForAutoplay:.25};class r{constructor(e=n){this._players=[],this._setPlayerState=(e,t)=>{e.previousPlaybackState=e.playbackState,e.playbackState=t,this._updatePlayerStateForDocking(e,t)},this._updatePlayerStateForDocking=(e,t)=>{if(t===i.q.USER_PLAYING)if(this._updateDockedVideo&&e.registerDockElement){const t=e.registerDockElement();this._updateDockedVideo(t,e.id)}else this._updateIsUserPaused&&this._updateIsUserPaused(!1);else t===i.q.USER_PAUSED?this._updateIsUserPaused&&this._updateIsUserPaused(!0):t===i.q.AUTO_PLAYING&&this._updateIsUserPaused&&this._updateIsUserPaused(!1);this._updateInlinePlayerState&&this._updateInlinePlayerStat

Chrome Cache Entry: 1019

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://dsp-trvm.eskimi.com/trv?bId=1716532081333.2.fV4aFMLDonJ85kzpjgiusA&trve=1&trv=0&src=utr&_=1716532084090
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1020

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x261, components 3
Category:	downloaded
Size (bytes):	26016
Entropy (8bit):	7.978422784816855
Encrypted:	false
SSDEEP:	768:cWHM98jku/ippc9q+rYsJhNKoGuoU6/fU:cWsl69xYs9pGPUwU
MD5:	1629A657E0DF579827E1522116BAF87A
SHA1:	0CAA2A64BBF2C211B6AEADB6D711FA3D04842B6C
SHA-256:	0F49B69849B8CA06B86DB586DE0280CB3B3477AFC6A9309BAFA4B7CDEC8EF905
SHA-512:	5ED4F92DFBDF591E2B0AFEB9311F7D4E5C50A370BD4D816411542BF3DC38B82697EE054D961956ED9505011E3D222A372FB7DED8783687F1B2A40DDCBA9CFB2C
Malicious:	false
Reputation:	low
URL:	https://external-hou1-1.xx.fbcdn.net/emg1/v/t13/11543589574142959324?url=https%3A%2F%2Fthepatriotjournal.com%2Fwp-content%2Fuploads%2F2019%2F06%2Fcnn-1.png&fb_obo=1&utld=thepatriotjournal.com&stp=c0.5000x0.5000f_dst-jpg_flffffff_p500x261_q75&ccb=13-1&oh=06_Q3997EfbLnL0wMfVqWGDG0KIzTHnzXih5lVWecv8SIwVhEk&oe=6652105D&_nc_sid=e17101
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000b70a000084180000501d0000ec1f0000b52d0000eb3e0000bd4000003645000049480000a0650000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."................................................................................q..J).....0".b..d.7..ld1.HJi3.i..q..A.u4..D.B\|............:...2t.B.....j)...dDH;..N.....;.........I2.U...1VLW.IK..=....S@..L..`.c..K.ZH#.@...........#.A.)....NU.2..n..1....#.@.>..<..Mx...y...u..>....zSY.>...[.I.<.....V.....n].MA.l..3...c ,......)&...c.U`..Y...AM.......hAa%.{..Q.r#..S..T.SRP].py&..0*.AM...&\a..Z![..v.jK.a.\D.k3..N....CE......tm..q..BJa\|YQ.Z...;...n=y.6.].:Y:R.>..0L..U..ro......'."2.."#.uS..t.}.f.....p...r./.........~..m.c.z..gw.G..W....k.0...U....\|'sC..4.$3....<.....\|a1.\.tIE.=c..By...7....G>....4Y...7.c.h..4}?..U.y...Y./7...]<.;r...8my.D...\|^j..V@.....R.y..z

Chrome Cache Entry: 1021

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.813607894428283
Encrypted:	false
SSDEEP:	3:OXMLQHJ/A6MBQCMDRDSr1XTDHJzDASO5n:OXFJHMBQpRDSr1DbGln
MD5:	9A041939D0821F70E69A74BB68FE765F
SHA1:	CCB7FA51258A3E2B1ADBA36037CFA6339772087B
SHA-256:	5424561FA3A1AB13A3EAC4166D498EE96453D876DD3C519088243747978952F1
SHA-512:	752A0E916B152BB805109141AF40CCD0AFFA519FFA9F9B9B6F69799BCA3CD0C5A934A4D16CF447A0491B8AB8B1FF1C691619CDD96953597FD47805BC5CAF8A50
Malicious:	false
Reputation:	low
URL:	https://id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=405&sync=0&domain=pjnewsletter.com&url=https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage
Preview:	{. "addr": "8.46.123.175",. "base_id": "da68ea0929191655133f70d9fd73526f",. "domain": "pjnewsletter.com".}

Chrome Cache Entry: 1022

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	430
Entropy (8bit):	5.296654648536666
Encrypted:	false
SSDEEP:	6:6v/lhPEJl8NM9VbcAZczPKuH11GMDLCd9iDR3GsF64BIrbaTp:6v/7MHbcrKm11xYi93Gx8
MD5:	546AA6AC8DDB221B48CD6CFB6801E6AD
SHA1:	C97AA73441085438F78BC0A0094940BD1FC52F89
SHA-256:	3A5D43A25E81FA4EB76880C9EAD7E1FEBF26D6C503CD2F940CDCF11FEE779B87
SHA-512:	DA198278C036F0AFFEF00A85D4F1F0BFC0419CA4D31E8D9F946B1E72FFA362093E539A894F0BB705750787EA567993A59AC89E38E7569FFAEDCFC990CAC9C5EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE............................................................................................................................................./...-tRNS..U.Q....GJ3).n.......~.N....r..K.!.../...5...:....IDATx.uQG..0...8v..l.....qr.......c.+K..A..E.{..L:......e..;....]...S.......#...E.]...82.pm.l...QR.j*D$..1[./U~:.0.R..v..O.mdi_x..V.......7....w.R.BzV.d=G....E.&?..&.....IEND.B`.

Chrome Cache Entry: 1023

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539), with no line terminators
Category:	downloaded
Size (bytes):	539
Entropy (8bit):	4.816237873009792
Encrypted:	false
SSDEEP:	6:4c3bTqc3GK7xE7lpHEXX96WJK3QLc3XMBDoR7V0TMsVfzsNJhKXAFVAIvxB6N0vo:EKdOpvWU3dAMi9XXA2GxPKRmJA
MD5:	697D55E8018357F5C29FA337E0CD4733
SHA1:	E36D6C351AEFC7EC71C06467DCD5BBC65CF96709
SHA-256:	CFF4F75025EFBE4C3BF279F0E6FB6F0C56EC83710F55F752B02DEC09AAAE5F32
SHA-512:	8D0A429E8313EE0C3D9C8FBB4AE7094816EB067E0126DF2D7BD0C4A890036065CDDB16087AF323875588D6ED4AAF7D943D102F7A9B5F183396C422062383C130
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/themes/patriotjournal/layouts/fixed-sidebar/style.css?v=1.0.20
Preview:	.fixed-sidebar-page-container{position:relative}.fixed-sidebar-page-container .sidebar{float:none;position:absolute;right:0;top:0;width:300px;height:100%;display:flex;flex-direction:column;justify-content:space-between}.fixed-sidebar-page-container .sidebar .widget{min-height:600px;position:sticky;top:20px;overflow:hidden}.fixed-widgets-sidebar::after{content:'';display:block;width:100%}@media(min-width:1020px){.container.page-body{padding-left:0;padding-right:0}}@media(max-width:979px){.fixed-widgets-sidebar{display:none!important}}

Chrome Cache Entry: 1024

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/7F542745-2D60-41EB-9A96-52B90C82DF34?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1025

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/openx?openx_id=ec2bae18-fc4b-4aad-ab1b-20e67a2a59a3&id=AU1D-0100-001716532054-VWROEXDT-D1CK&auid=AU1D-0100-001716532054-VWROEXDT-D1CK
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1026

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1817)
Category:	downloaded
Size (bytes):	1975
Entropy (8bit):	5.32717174078096
Encrypted:	false
SSDEEP:	48:iIO3UyRjWRerKZ3kwFbGzC7YlqU+05Mg5ct4EYWmV:S3UCjHKZ39hGzC7YP5GY3
MD5:	42195D49E93DF3C2C8E461264380A30E
SHA1:	C34BD3B313BEBB1F7B9059744C45E3E440710871
SHA-256:	548B2C5201A25843C82437E73B7AE747CEA67595CCC681336763147207E16A56
SHA-512:	56DAC3965AEC7FCE20AF9D6A0DE70EAC1A02E4927943CAE31E4C5B816F91EE1CEEB3A73EA6CF052D20572DEF063824BC577DF8F2FE7D2D382B22B440199E09A2
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.Conversation.d69da22a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.Conversation"],{45925:(e,r,t)=>{t.d(r,{zI:()=>s,ti:()=>f,bi:()=>c});t(50519),t(6886),t(75640);var n=t(24797),l=t(97871),a=t(34615);const i=Object.freeze({Web:0,Email:1,Partner:2,Market:3,Access:4});function s(e){var r,t,s,f;let c={};const{emptyIfServerRendered:o=!0}=e;const{httpReferer:u=(null!=(r=document.referrer)?r:""),query:_=(null!=(t=window.location.search)?t:{}),requestUrl:p=window.location.href}=e,{cn:d,iid:w,nid:b,original_referer:h,partner:g,ref_src:y,ref_url:m,refsrc:v,s:k,uid:W,url:$}=function(e){const r={};return["cn","iid","original_referer","nid","refsrc","ref_src","ref_url","s","partner","uid","url"].forEach((t=>{r[t]=(0,l.BX)(e[t])})),r}(_);let A=Object.freeze({});if(null!=e.referralMapping?A=e.referralMapping:null!=e.featureSwitches&&(A=function(e){const r={},t=e.getArrayValue("shortened_tracking_parameters_mapping");for(const e

Chrome Cache Entry: 1027

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	428848
Entropy (8bit):	7.997732467444531
Encrypted:	true
SSDEEP:	12288:U4Z7AcUiiwpoTxelNAmHHWgSU9nz6bUk6f+zSZmv:ddAWaxOJSlQazSZY
MD5:	1FD1103321651F7ABBEAA3762E3DF9B5
SHA1:	5541991973D207ADF7D49FD71EF9D8ADB349F3C5
SHA-256:	B72D6692094ECF2131D8CF0C2320455994B1C32F1A115519D1D6AF0D8AF3937F
SHA-512:	64050AC3C2C73B595B7A7BD10F09802B1D7213DFB0C18996B2365684FC9B35C866B698907C8539D3F228958B0100047CC3749FD630C692F3874EC078361642EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx...Qn.0.D......l#......8D....a..n.H...A..A..V1...... ..... ..... ..... ..... ..... ..... ..... ..... ..... .....z..~.o..$.I$).dIV..$W.K.u..V.f..o....,.....q.s...PI?.j.Qz.c@j"..I.~K..+w.Y..t....rY....zmRr.....a}..U.K"[%J.o.L%...H2.....i..$.U..^tm.$.Kkz.i"]/.cH~..u..13..!.9-.K..q}.......?{.g.QT..(~.a..V?.._...v'..\|.....e.E.....d....T?.Y.=:3u._.Z[...q..<....a@.....uxy.0`.....=.!M..u.8..Qt........"?K`...]........C...W.y..5<...S.!(.c.;.}.:.. ....v..~{.......=..$$.D..%Fy.K.ao..S+1};r.pm.....:.qr..~lsc.b.w...;c..._.}.\|.b/....6zU..y..7....)^..U...."L...~..7a,..?M.....?..?....'@....o..o.I....gv`w...S.Y.mR.'6.s._2..z.UE..s.G....E....../_........h.M.m8.n.$.^.`7(...#V).........5:.W..H..s:MD..2.h.K........9.0..C";..x...v........]......b....."8....mG.y?......T..Y./_...v....W.#c...!8.....Y..>...i....:z......M*'...R...~.........7...4:.\|....{..I..t./?...3.HOk..%.5v%...G.E..W.i..!.....q.9.....Y/b&.`......{w.='5z.~..

Chrome Cache Entry: 1028

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24797)
Category:	downloaded
Size (bytes):	41331
Entropy (8bit):	5.38180189774426
Encrypted:	false
SSDEEP:	768:gf8/g/Nl/s/s+s1Rfo0B2FwYLWdYKriRzCsvFvCuQ:gfUoNl0s00fLrDuCuQ
MD5:	D2F0A3E43C6A222369CF67CADEAF1955
SHA1:	A324CB190EAB49AF9DBEA0077B3F2074D8889CB4
SHA-256:	636A7FFE73C1F11B9AD6CFF881BA80975977A42D84CD7D9AA19207192D0FC3D5
SHA-512:	B59CAAF3C52551E22DA3EC13EDA64C4D7043C8883FE102C4B949000D168E35870133AD78B8362E8C3E0B0A8BF13F70B6A16FEF0490FEE257E368C0957F8AABE5
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-05-15 00:30:00 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":0,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1",

Chrome Cache Entry: 1029

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1030

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	8724
Entropy (8bit):	6.79038236277243
Encrypted:	false
SSDEEP:	192:/itgWO5VcGhhnFZHjbCuTu3rNvxfzP3VyuWyshlnrlqRi:/ANeBFVKZxfMu0lMi
MD5:	2993755C7C7A44E573104124DC060F3C
SHA1:	A10CFFAA067B8FB82C5B084F08721950693474A0
SHA-256:	866248FB3F84481E21A19D0E2D4D5DF20EAADA6C5E5934B3F4FC39879A15A4BF
SHA-512:	746F07C0199702844AD7DA949D12BD8170E98A665DE7F89FC22EABCB3FD3F0DBEFDE65AB9E035F04DC861BEA186397B23548C8DB862E876E903819304CFCBAAA
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. ...................4C..4C..@@..pB..............................4C..4Cm.....................................................................................................................................................Adobe.d........................................................................................................a..!Q..1A"q.2R....#3B..CSbr............................!1.aAQ............?....$}(.....5{....pcGW.A.?...Q....h..%...8..M!...j......#.'.{S... \|....a.w..O.(....Pn..=..o....[wg.....^6p..Yi.....73OC.V.Kx..4..c.3..E[j..............$....`....&.u)b.o..L9P"....yn..eE...N..........m...Kd...Zvl.;"....S8.oD.....S...Q...-.R#...B..-.&e.lS..v=G.M5....&.....i.G.0.mD...X%.X%....../.V.V..%.b....M.....7.YO+9."......+..Y....L.Tj.K.ln..R...,C.......".#ul...e..P...Z...N.=..X.n.Q2....M.......X..$.T.......i.5!..z..+Q.p.......1BYF(K).........K.1..0..j..n....o_.h..MOE...........u..X,...M&.p.JkK.....cU..........D..>..h.5.h.]:..

Chrome Cache Entry: 1031

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1032

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 375x250, components 3
Category:	dropped
Size (bytes):	32319
Entropy (8bit):	7.966319952763892
Encrypted:	false
SSDEEP:	768:BCAXwwFgFhw2yufneNQSfVZaHF9Y8DjxFUd0:BHgwFgDw2yLZOF+qFi0
MD5:	9ACB0928AF07E2FE0B32DBC328967E9F
SHA1:	B24071C3D38CA07F07E0ABB6CDE05E4973973895
SHA-256:	61543A32057568F7E4BDF80C48E53D5B1ADB118085015165A3B81B3697A41E0B
SHA-512:	607D1A7958B2698A428A2F31E1178CFADD3F3BF81E1CBD95321A63B867FE9D21A892845966CAA15445D3C7EF73146F5CAEE79AE8843DB136077A8662BE376918
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..............O.;o.7[.o.<.$[.......6..n....G q!..s]>...bi7g.Oz.........Ih.#n..>....+C\|..6...i.q.....Z..:.......e..s)..i.x..bF./<..._..{.${..\|9...[.z.=.+_.7W...x<...!Z.'......Q.y.b.(.r.....a.:T9..g...(.{.......a.....-.Z...V.....x..\.......U[..[..l\|..j..........3T..]_............P[.~...\|;h.......;..1.....

Chrome Cache Entry: 1033

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=1389/tp=STSC/tpid=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1034

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	4562
Entropy (8bit):	7.886750321197365
Encrypted:	false
SSDEEP:	96:lcw71Hocx6j6wWcrUW002NUd8scQQp8lSnj9xyxjjkX:2O1Hocx6msJh2NUd8scQ8vhoFj8
MD5:	DAF44C724B00BC1062469ABD57C13374
SHA1:	5609550E4744EF21D87C4B21E0D05C68E40ED28D
SHA-256:	E6BDDF0A8DD1FB2ED8301AE85F1E761D0B742F0F721D4FFE734D177C3B6B8643
SHA-512:	B38B6EF91AD7062ADA61CAE4EAB5EC2BB824CDF7FAB7E038BE1C2A13CAC5BA5CB6AB150C265DA4BE43BAA8C96C2129BDE5E114D29AECEE93F9DB7F1B27BF2807
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`...........................................!........'.."#%%%..),($+!$%$...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."..........4..................................................................,.f...N.......8.w[.!x\|.Bd\|wp.hAp.H..8.P.. .T.J...ej....4.!5........}.....AD@...(B#ILUl,.O....jS .+hf..~.e..u....(......rH(..a0...-.K.......H....1.:.,.f.+..'.....t<W]...P$X.@..n..R....&...bU_Dg..Q....U.........m..KYVnY.S.`.....<..Y...{.,.bou..U...%...=A7..y...-.C...CjVE4.....,.nX...y......4..o..L.8..).1ky.zV7q...).!(Y4..\6...3E/-V.QS}.%P...f.p..D..R....s..{v.{..V......N.j.....KI..\|.h......GJ..4..:#B../....%A..9...-p.z.HTn...I4@....;........lRX..r.w+.<..D........=.........................!..1AQ"#2aq..BR.. ....3r...Tbcs...........?.........(.J%..i?~.....}......Z[_+N..i..oi.oE.Dsx....(..S.'.uu....D..M.r........E.S.].v..8....4>F.9.~....<.4..o...)nW...,PJrHu....J%..W.F.#.[...x..i.*.......r.q.T.}...c]...6.N..ps....U......

Chrome Cache Entry: 1035

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1975)
Category:	downloaded
Size (bytes):	2198
Entropy (8bit):	5.371510062788556
Encrypted:	false
SSDEEP:	48:iIy+DYRgVVfj3H02uCeq2U/Xaju/jAdh1WMhJT9CEGpgxZWmE+Df:m+ka/jHnu1qlaursvzAUZC+7
MD5:	97CF72EAD6445571EDA6CE6F44B77599
SHA1:	713C60EC94C00516B8C2510F236BDB4E53F10EC0
SHA-256:	E7DFBF54A0EC352BC3365B084DB7D367111E24E8C225AE659D78982F32CF8655
SHA-512:	B3E6C7B2793B51CFA53EFE5F93A4599F46163246CA32037F2E3467E77C9FFA9C38B17803BBD3E9EA0BF332394683154503E3143806937539E8417CCF244A6BC5
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.Compose~bundle.DirectMessages~bundle.UserProfile~bundle.RichTex.75e5bbda.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Articles~bundle.Compose~bundle.DirectMessages~bundle.UserProfile~bundle.RichTex"],{80717:(e,t,i)=>{i.d(t,{Z:()=>u});i(6886);var a=i(2784),s=i(25686),n=i(29432),c=i(35953),r=i(82392),o=i(44329),l=i(29496),p=i(36776),d=i(12408),m=i(73206),h=i(73186);const g=h.default.create((e=>({root:{paddingVertical:e.spacesPx.space32},rootWithImage:{paddingTop:0},graphic:{marginBottom:e.spacesPx.space20},icon:{alignSelf:"center",height:e.spacesPx.space64,width:e.spacesPx.space64},container:{paddingHorizontal:e.spacesPx.space32},description:{marginTop:e.spacesPx.space8,marginBottom:e.spacesPx.space4},actionButton:{marginTop:e.spacesPx.space16}}))),u=({actionPrimary:e,actionSecondary:t,children:i,headline:u,icon:y,iconColor:w,image:k,onDismiss:P,shouldDisplay:b,text:x,withMask:Z=!0})=>{const[E,C]=a.useState(!1),f=e=>a.createElement(d.Z,{onDismiss:T,renderContent:()=>

Chrome Cache Entry: 1036

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	366750
Entropy (8bit):	5.465050521421297
Encrypted:	false
SSDEEP:	6144:rpWHZpLMfeET6LdaEar034j45PdSGsCmEA7:r+ZpGT6DarNGsf7
MD5:	B8158ADC651D29EEBA8D9C215DF1E9E3
SHA1:	4855D3DEF12B11ED8F360587B5C91A57039F0F72
SHA-256:	9AECCD5EBEFF5E2D5492E1ED12BE3F5251819CA147CAF9F6CFAA3A088A46FE98
SHA-512:	C56794B13D7E4F8C70373E679EABD811A4EEAA236E311FDC55A94B5FE6511FF69F68633F5F87E3F2E19F37F6C9D1EC93146B6362ECA41EC1A414DFB676C78458
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa.ea74781a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.ReaderMode~bundle.Birdwatch~bundle.TwitterArticles~bundle.Compose~bundle.Settings~bundle.Displa","icons/IconAtBold-js","icons/IconBoldCompact-js","icons/IconBookmarkCollectionsPlusStroke-js","icons/IconBookmarkPlusStroke-js","icons/IconBulletedList-js","icons/IconDrafts-js","icons/IconErrorCircle-js","icons/IconEye-js","icons/IconHeartStroke-js","icons/IconItalic-js","icons/IconNotificationsCircleFill-js","icons/IconNumberedList-js","icons/IconPersonCheckmark-js","icons/IconPersonHeart-js","icons/IconQuoteStroke-js","icons/IconStrikethrough-js"],{19458:e=>{e.exports={queryId:"88Bu08U2ddaVVjKmmXjVYg",operationName:"articleNudgeDomains",operationType:"query",metadata:{featureSwitches:[],fieldToggles:[]}}},16201:e=>{e.exports={queryId:"HMuG9iPnHf84u-2L4sxk4w",operationName:"BookmarkFolderTimeline",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","

Chrome Cache Entry: 1037

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1038

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1039

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 1411, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8809
Entropy (8bit):	7.819360327558873
Encrypted:	false
SSDEEP:	192:qkEFQLKti12Im8G3aWlXpYcT5eX6IvNm2fvhnk9TwqG9OTLS8i8v:3gi1HG3dlucc6mfvhk9ZG9mS8
MD5:	85115DF5906E2EC9DD062B2C0C9F841D
SHA1:	7B50BDB960A1DA914D90F9F3C9B9FE79D5C62FC9
SHA-256:	76A25FFB9296F9EC56E221F88B2081330B10FD2BCD86EABA7E037FA99717C65B
SHA-512:	786D3CE76F2E94A0BA820533FBBEC6BACE95892B7CE868E66411AD62DAEEF9107DD30F62470BCFA60CBA7857443F35E22E77D48117075F5729BBCC93E8EA77FD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ys/r/ASlpPgTKW7L.png
Preview:	.PNG........IHDR...............o.....PLTEGpL...........................................................................bhp........................................................................................................................................................................agq....................................@.......................agp`hp..................agp...........................agpagp`bp.........`fp...agq......>.....agq............agqagq`fpagq...bfp...agqagq...?..`hp........>..?..?..............agpagq...agq....?........E.wagqagq........................@..?..>.....@........agq?...........agq...........agq...........@..>..>..>.....agq......agq.............?..>..>..>..>..agq...agq...............agq....agq>..agq@..>.......agq.........agpagq@..>....8[......tRNS..~`.0... @.....p^...P.....M.....n.....j...(..{=#......C.....Z3...xG.,&9\.7. ..c.......v.t.W.T...J. .}.fhR..6...../..Z..0...p.w.@...^~O..p.....@.,=......Q...,....).E..Y...

Chrome Cache Entry: 1040

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	dropped
Size (bytes):	35497
Entropy (8bit):	7.9787137357345665
Encrypted:	false
SSDEEP:	768:YI+RUrsZBTzyhP54CDVc4Xx7HicH5hv386s/Wfc4WGJOVYNo2:h+RUrsZB3SPzxfXxGCj89/6cdchNh
MD5:	AC3AA7A8460A978C3F45791FDB319816
SHA1:	490B8D91C313A76A577832F4B50A066A6B05326B
SHA-256:	C7D98B41488A3D70B0AC2DC8178050C36FA8793E750C8ECDB8EA1C8BA62E7DC4
SHA-512:	60093C18E5ABFE2D5B65C512E1F55F158F189AD70AD0FC2081D166877B3DFB4D670BFFE68967A3F6B5128334010B01CF2C083449CC06FFBA8F8C7B5E65C65E8A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress.................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr.............."....................................................5.....V.KR.aD...S_..T.VD...nf.6.Tu...E$s.}...'I.P.......&./..z...S.d....D..a.$.D..XZ...a.7....6.7.J........X..s.].;.d..........T...e......W...@..._^Q)IPJ..5...3Q..feL...7J.V.....%?-.\3.s...%K.:.8.....U.......r..T%m.@...P.o..Ff.(.X0..'P....].;.........C.]W_.lYDn[..W..B..........."....0..uy.$...k..X....\|......w.....^#.p.wv..I.y.Q..:t.I...2.G..........y,.}F.!.......f..-+...~`....ze..B.9..n./....^.K.....m..Uh.G....Q...@...U-..~.Kf..R.A.(..U....M(B....M+K.C.u.fu(&.....OH...4....pJ3.S....W."...G.*.X....\.%.2.B."B...S.#q..4...Z.$...sc.9...s.q..~.OG.h.C.op3w.%.%V.{.U.W..0..2!G.....D..N...G#kUL.,u!b.h..Mk...S..W.oq..+.<5.....s~.n.P......i....kP..\|`.D...%.Jezv.QB>]^........5.....x\|_E.}6.g..=......8.gE...(c......`..3..f..

Chrome Cache Entry: 1041

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1042

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (881)
Category:	downloaded
Size (bytes):	77221
Entropy (8bit):	5.655968066265703
Encrypted:	false
SSDEEP:	768:ddKW29gdw0AjMq3mDUjQXTE8kCqz6qtTs92lo3ULS+SaLV3c9wZjyasx+Xsu19sZ:iW29l3mgjQXTbm/Ts92lo3ULSzOFz1Yf
MD5:	0D683BDF35D89F985A1029ABA278A5D9
SHA1:	97BC8BA038325C26B258E59BAEBB62D55498B1B3
SHA-256:	3F549D3829F1C3139F3B9803AEE55F74EE3A9A38C53A816B5344BC20C3168208
SHA-512:	35FC5175D3AA798F5ED75338CA533E53170D5062F97FCC811C3A4FBF3E8EFC7563AE67A6320501F30600314F9383358736D1E61C6BA2430AF2DEA812E80D3701
Malicious:	false
Reputation:	low
URL:	https://c.adsco.re/
Preview:	/<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adscore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.location.hostname+"/",!0);a.onreadystatechange=function(){if(2==a.readyState\|\|4==a.readyState)window.parent.postMessage(document.location.hash+"\r\n"+a.getAllResponseHeaders(),""),a.onreadystatechange=null};a.onerror=function(){window.parent.postMessage(-2,"")};a.send()}catch(b){window.parent.postMessage(-3,"")}};</script></body></html>. //. pako 2.1.0 https://github.com/nodeca/pako @license (MIT AND Zlib) */."function"!==typeof AdscoreInit&&(AdscoreInit=function(ta,F){function bb(e,b){var d=e[0],g=e[1],h=e[2],l=e[3];d=V(d,g,h,l,b[0],7,-680876936);l=V(l,d,g,h,b[1],12,-389564586);h=V(h,l,d,g,b[2],17,606105819);g=V(g,h,l,d,b[3],22,-104452

Chrome Cache Entry: 1043

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1036
Entropy (8bit):	4.555011686882987
Encrypted:	false
SSDEEP:	24:hYkuDlHqHd2iyc/9TPviYuHO0OQ6/kBr4NkIu:BuhPc/9LBp0Ot/kBEN5u
MD5:	C5379E35E267DEACC52E06ED0F5FA81F
SHA1:	073688ECD6A061D9C3FDE68E7C1B0B5D15785529
SHA-256:	E821663DDDB56FB07C8670392DD396621A47E7816534BA539C02694A115F9254
SHA-512:	410F397CAAAA731617EE08A414CC253A681FD5EEF2D9CF4FA0D57BC0F58716E5712BF221038128D0AFB90BF00B0A77C22375703DF915630F3B64E1411A0895BA
Malicious:	false
Reputation:	low
URL:	https://pa.openx.net/topics_frame.html?bidder=openx
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics API</title>. <meta charset="utf-8">.</head>.<script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.resolve(topics);. } else {. console.log("document.browsingTopics() not supported");. }. } catch (error) {. console.log("Error:", error);. }. }.. (async function () {. const topics = await getTopics();. const message = JSON.stringify({. segment: {. domain: window.location.hostname,. topics,. bidder: "openx",. },. date: Date.now(),. });. window.parent.postMessage(message, "*");. })();.</scrip

Chrome Cache Entry: 1044

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1045

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://dsp-trvm.eskimi.com/trv?bId=1716532081333.2.fV4aFMLDonJ85kzpjgiusA&trve=0&trv=0&src=utr&_=1716532084090
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1046

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.398127094496545
Encrypted:	false
SSDEEP:	24:4HksAq5/Jz2pRNrBZJuvu8goqc0ioNhc+yT4+mI:2jz2bNrVENtmN+m+j
MD5:	97C66CB70449F9E889B323B51E315C64
SHA1:	947C62325B575868DBB7394B8DAA1A034D84404E
SHA-256:	69C10FCB9ECBA4C872CD0F3803426A905E8C27749C845024D9FCA606488EB5DA
SHA-512:	9CA7147D27A2D235448504086146AB354FF537ED2D91AE21C00BAAF205E1F790332C8744CA101E4068790FC33EB8897465EE8AFB17919C7E677567513DCE4B0F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="VfJITbBOIizk-xtlupsNBw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1716532079819');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 1047

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1048

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1538
Entropy (8bit):	6.066286354807136
Encrypted:	false
SSDEEP:	48:YPaEUTNSDhQpZmSBoZ8AE7g2syYpOWbB0:aytmZdE1syYQWbG
MD5:	1A335D0B5DC24DF43D379D39C54A2E0E
SHA1:	C082E2492EB9DAC1546497E2D1F2382094723B68
SHA-256:	691B65AFE97BE0F7B29326C33C15F844811F999427086DD86A00F8666E0F8664
SHA-512:	180DE7CADBCC7127725DDEC5F86A7DEC1F9E2B3C7D6A9557213B50583F07F419BBBA2DA5EF10381219805276BAC8326CA6C58381FFC1D71C80DAD6AFE5F03067
Malicious:	false
Reputation:	low
URL:	https://engine.4dsply.com/mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=c5CkW9MeM5EX5SpUODachZJ0nqxolTlmr94MDsub3MFJ7rAH3TlsZDtK2934PiazY9kIYqwXVCbrA3nMxuHPMmuxFwyvWux8xtXVzsWWr04TTEdhuEq1QzhraEyystVb1G4UMCL2bZ5oed-44EXuAL_9AjIfB_B6v4D_5iGzySAkxBBj730fQOD5sG9B28NhKUeve1u_jGshCL7OXLz4njRJdkPHDcBwyMxKHxQBtWsUbVpUlEfljUPURoaR982lCCJOBM3TpQu8uQKZO0flmn_FAKsRnd3H0UtX8QaQTCJG4hpm6qaeCeh-lIqH3mv-f8nqytKXljWUjypqKCWijtrji6mieB4ElxXtrRbYVOCrQG5JOk4-rD3g5PGkUYuYIKLOCYKuC8B7CcHStGZw9VEEXlRxwD-vmK8OK8sKHUd45C3pqqOjUuR_qu94XhwIkkpaldUgA1Jkg6eMBcKnT6NsRp07suczQeDtisMnqbwDOByw6DAhX0x_LmVe78YZhrQbQ4EijWagCAlPclVDtrBLcaXD64gVATzhSmLCIxnIrfK-owVEyfTJ3OwaCjuGLtIosCODSLJ_OiNsh5HxlEi1ZwYaQCVcqCXwvdna7WF_Puh3gH-mVAFlal9Kh9suswB4gqWTsGkAe703vh1BFrVsReCJaFqcpPxO60OmGLCE9hO9cwRLme8mZHoYFHEsVE_J_6nqhoaVK9gfVP0WMuj2xq2D2ESUF3pjoIHMAeyWZixRtRtPfSIxTZT8y7jlWV43UoIWuv8oROYMiHF_DpBHIUdKBUICBkK8LGbw39wjEuI4XjSnxC-O6CTbEg2vUrJxtKQVcE8dGdCjuzRlMmrpwQ2A7lv4y4-liKLG-WoTc7dN5M6eiVC6kptjcrJXcMtVugR1c4eeeco9Dfo7KBVrToZp_79dEVZioC0G8mD9mc-wWVhNUwrNGw56gc23XX56zZqvAxXLJN2u-p5oxNRDJuYutwN7mhJtM7KedwjzobzM2hnwIPOwimJB4ucADUWQjo2qyLBLHyR61hNJ-LiuoVnHaZDASmH7COOmH8EQJwCnaEhoKo2h5gOlpKCptGL9OVar8ajXd2F8HJUOSA2&PassBackUrl=&res=1280x1024&dcid=1_ctx_11029b1d-4ccd-4947-b4ef-4227998b0c7a&cu=&kw=&mw=800&mh=600
Preview:	{"ClickUrl":"https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.28113977437892&ZoneId=84396&v=c5CkW9MeM5EX5SpUODachZJ0nqxolTlmr94MDsub3MFJ7rAH3TlsZDtK2934PiazY9kIYqwXVCbrA3nMxuHPMmuxFwyvWux8xtXVzsWWr04TTEdhuEq1QzhraEyystVb1G4UMCL2bZ5oed-44EXuAL_9AjIfB_B6v4D_5iGzySAkxBBj730fQOD5sG9B28NhKUeve1u_jGshCL7OXLz4njRJdkPHDcBwyMxKHxQBtWsUbVpUlEfljUPURoaR982lCCJOBM3TpQu8uQKZO0flmn_FAKsRnd3H0UtX8QaQTCJG4hpm6qaeCeh-lIqH3mv-f8nqytKXljWUjypqKCWijtrji6mieB4ElxXtrRbYVOCrQG5JOk4-rD3g5PGkUYuYIKLOCYKuC8B7CcHStGZw9VEEXlRxwD-vmK8OK8sKHUd45C3pqqOjUuR_qu94XhwIkkpaldUgA1Jkg6eMBcKnT6NsRp07suczQeDtisMnqbwDOByw6DAhX0x_LmVe78YZhrQbQ4EijWagCAlPclVDtrBLcaXD64gVATzhSmLCIxnIrfK-owVEyfTJ3OwaCjuGLtIosCODSLJ_OiNsh5HxlEi1ZwYaQCVcqCXwvdna7WF_Puh3gH-mVAFlal9Kh9suswB4gqWTsGkAe703vh1BFrVsReCJaFqcpPxO60OmGLCE9hO9cwRLme8mZHoYFHEsVE_J_6nqhoaVK9gfVP0WMuj2xq2D2ESUF3pjoIHMAeyWZixRtRtPfSIxTZT8y7jlWV43UoIWuv8oROYMiHF_DpBHIUdKBUICBkK8LGbw39wjEuI4XjSnxC-O6CTbEg2vUrJxtKQVcE8dGdCjuzRlMmrpwQ2A7lv4y4-li

Chrome Cache Entry: 1049

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.988231661403621
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiOzt5TpmH/Nh:8WiIUemo/HPbfCYKpY4DCVeELABZjmH/
MD5:	7FB4522EDE5D38E9795BD01FBF5F19D9
SHA1:	9BCB3F23E99D62924C0764E0596E232098C08C9F
SHA-256:	8818D28959EA7D868C6005E9116E1E31637FA8C648F2F7BCEE8DB697C541CFB5
SHA-512:	B32A8822D7C3294E21A3A1320DF535C347A8D93F973E2A557C61385200D283C7F9CCA60097EE748D52B6E5A3EB7F91398E786F08716A7E7DAA34C1D1B77A2F4D
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&pr=https%3A%2F%2Fpjnewsletter.com%2F&pid=8kYxv30bs4uTT&cb=0&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043eec5-ae4e-47b4-b8a2-caec03297ff8&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22%257B%2522id%2522%253A%257B%2522hadronId%2522%253A%25220001yum0ea99jha6clfcgeaikjhlll68igi8eiflgfabackkc2jl%2522%257D%257D%22%2C%22id5%22%3A%22ID5*GCXlQwA6TIr5I2oPS-HCzJYkNfHooxCNfIbq27tYAtGhKb7pbItrgiUEls4JuzP_%22%2C%22lotame%22%3A%222a6b5bfc26c4271a6d08d61f53e3185ca02c0303ba90d4ca8d8b1e4062883277%22%2C%22pubcommon%22%3A%22a765ec8d-6663-47cd-ab57-34873e7f277c%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"0"})

Chrome Cache Entry: 1050

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZlAzPgAAKneghQAZ&_test=ZlAzPgAAKneghQAZ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1051

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 40023
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.955126315003809
Encrypted:	false
SSDEEP:	96:6x0QsVQ5J5IQ3E64gNPBK/19cLX7hzi5P1C65NvOK+za5woFN27o+T101QKaXRC:6x3F5P54gN5qIL92NNj27zT1e5aXw
MD5:	AFD698E7DD507579BEC12DA8D0328C47
SHA1:	EDE0F2045EB4760948B47676FA85B15B07A8B900
SHA-256:	5AB960E3135ADB4C1FF1C1E8CDC23EA3F85755ABC172BC1CF68D195FB8D66047
SHA-512:	7A3505BC94BA6A2D1C95F7BA2A6FCAF7837B7E0D510998C14FE92EB3FD234DAEC7C44DC316E62EA396FB027825C95B8C8E94A5957844C038C60C6307B3CEDCEA
Malicious:	false
Reputation:	low
Preview:	...........]mw.....?E....4`$.SOi.....6i6N...................8i.[w.......F...fF..S'.;/7:.....g~H..LBl...U.m.#.....pQ6.M...iYDg.n..jP=2. D.Q(..J^.p......U.>..~.i..{Z...V.+........$.h....2M]5'G.;o.~.}...N.B..O.2.....Q'....i.d.S.q. .ou.Y...N.^v.uI.3..,...Wh..C.;-.IA>s...U9..,..+.t..3v^%..Y.+Ie.e^...mZ.H..Ld..VMM....b(.k.2u.........A...'2.H.....U:e..j.-.Gr.M..{oF._....c..'a.X.Jt..-(.0....vt)4.......<&H.....IE..#X). c9H..D...U.!]U..UU../...i.RU.).1.j _C&e..T_5...._$+.)...$.L...OCMw..p..+.a)....]7U.................]W..x..t.>,.a.....:..p..gSN.tJF.:.9.\|F..!.T.E:..E...a..4=C7mjY.%..}5......R..sz..0.F.2.Ey[!.......`.N(2#.QUc0>#"...o.\X.$.vu...N....OQd.z`..M..$2Cf[...RbDV@..H.,........P....P.........'.<.Y.F..no.ft........n...Zs.?.....e`x.q0.....GE.b.s)Na..F..9...\|=D>..\|r.=>......\|.. \.\|.v<.,..g.u./.....Q_.HD.W...-+T....=X..[.h....H.r.z.}.&.sVVq.9........y.gS.8<...qg...w..`.$.%_.r...p.1..j..y_.h...._V5KW*..."n.++3.....4.......^.........D.....BU+....8...v.d.

Chrome Cache Entry: 1052

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1179), with no line terminators
Category:	downloaded
Size (bytes):	1179
Entropy (8bit):	5.159061305507382
Encrypted:	false
SSDEEP:	24:kcgOzOlZ6Xvi99QoPuMzdm/kYyEQMA5cuOnXnM2ILaGowNaFw5MYI:rgOalj7zKFy3zwXLILaNwNna9
MD5:	8BA9CCFEDACAC832739EE155017E53DD
SHA1:	0BF8F312C14B9EDC8027CE82A5E7881C3CF181F1
SHA-256:	08F0465386D9897C95370A004F5251B304DC4F94A73541CCCD1EE87C02DE2F60
SHA-512:	A900FD11EC1BB74BB57539136A9219CD6573040965B362BCE8001A8EA9ECB31A6EC9C8F5FE7A6DF6AEF15EB59C6717AF9229A1DB63DFEBEB398C99C1F9645F20
Malicious:	false
Reputation:	low
URL:	https://cdn.connectad.io/connectmyusers.php?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D
Preview:	<html><body style="margin-left: 0%; margin-right: 0%; margin-top: 0%; margin-bottom: 0%"><script type="text/javascript">var ss=function(){var t=["https://sync-eu.connectad.io/syncer/1"+window.location.search],e="connectadsync",n=1000,o="cadsync",i=[],r=window.location.protocol.indexOf("s")<0;function a(t){var n=document.createElement("iframe");n.setAttribute("height","0px"),n.setAttribute("width","0px"),n.setAttribute("border","0"),n.setAttribute("frameBorder","0"),n.setAttribute("style","position:absolute;"),n.onerror=function(){return this.style.display="none"},n.setAttribute("src",t),window[e]&&(n.onload=function(){var n=i.indexOf(t);n>=0&&i.splice(n,1),i.length\|\|window[e]()},i.push(t)),document.body.appendChild(n)}if(function(){if(document.cookie.indexOf(o)<0){var t=new Date;return t.setTime(t.getTime()+n),document.cookie=o+"; expires="+t.toUTCString()+"; path=/; secure; samesite=none; domain=.connectad.io"\|\|1}}())for(var c=0;c<t.length;c++){var s=t[c];(r\|\|s.match(/^https:/))&&a(s)

Chrome Cache Entry: 1053

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1054

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3
Category:	downloaded
Size (bytes):	32922
Entropy (8bit):	7.922408828174519
Encrypted:	false
SSDEEP:	384:Rb2l5BNFl3fuvAQ/U070W9AJUy7+hf0ArzdQ3vogrJ9suRBGG9KQRMGIgFGRe2Mz:p2l5H3eAQiwVndQbrJ9DRwG9XdFZqVqF
MD5:	AABD29CBB99AC440DF8E025146CB93A1
SHA1:	D7CD2AFE88464B9FEEC90A0685B60516268DCBF2
SHA-256:	613B424C90A4DCC359915FCE202FCE2CD1BFEF94770F0B2E380FE9EC121C5814
SHA-512:	7E9C31AB82246C08A8B1E745A6FC3A224F9E8F05C001A5857B8B5EFE546F893E81F4A210D3BAF44D28BBC732DE3DFD6F329C619FF5267F4DC9049D0B31444742
Malicious:	false
Reputation:	low
URL:	https://widget.adcovery.com/images/18783/18783-375x250.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...?...........a......fu........I..~.......mx.J..............x.....u....`.S.....3ZE.........$.......'...4pO........S[........._..?.......o...C.@x......>4x....E...F`.]..B...'.......?.x..?...x..7..k.C...y...m.s.q..s^._.K..$......puuJ.h.O.]...+..h2...\|<?.WM..F.....A'..../Rt...5...Y0X(.@..............3.g..kN..7.gI.p.].......$u#.._..s.\|.Q.,...?2.....Z~..

Chrome Cache Entry: 1055

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	548
Entropy (8bit):	4.491449079242087
Encrypted:	false
SSDEEP:	12:t41Wff2P/wZ9LEEtF2NOtlx77G5TwWidgStLkBtYheF8:t414f2nUpEEtFIOtWTniy+ESht
MD5:	289673858E06DFA2E0E3A7EE610C3A30
SHA1:	8D54D46B87AB85A62CBB6CCC0E1A992D99A891D5
SHA-256:	03382AC2FD7FE0D58AE2F81964B332BD34DFC9CC5145A10E61CB5E776AEF5E2B
SHA-512:	E692D82EA26D706FF3C078D1FBBC8BE9B4045BD62A1DFC76B4FA92FD4FA37FC47309BD60E784D4B9DE82653B1F62EA8AF4196CFB2E94BF3F8654C5D33B08F63D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFCC4D" d="M2.653 35C.811 35-.001 33.662.847 32.027L16.456 1.972c.849-1.635 2.238-1.635 3.087 0l15.609 30.056c.85 1.634.037 2.972-1.805 2.972H2.653z"/><path fill="#231F20" d="M15.583 28.953c0-1.333 1.085-2.418 2.419-2.418 1.333 0 2.418 1.085 2.418 2.418 0 1.334-1.086 2.419-2.418 2.419-1.334 0-2.419-1.085-2.419-2.419zm.186-18.293c0-1.302.961-2.108 2.232-2.108 1.241 0 2.233.837 2.233 2.108v11.938c0 1.271-.992 2.108-2.233 2.108-1.271 0-2.232-.807-2.232-2.108V10.66z"/></svg>

Chrome Cache Entry: 1056

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22059416475%2C22652678936%2C187271864%2Fpjnewsletter.com_AV_DFP_MCM&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=1983300998189756&cust_params=ps_floor%3D1.5&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=472324108&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053602&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=281371342161549&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td35_tt18_pd35_la35000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16619
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1057

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1058

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16698
Entropy (8bit):	6.015974384613178
Encrypted:	false
SSDEEP:	384:FbUWLNgLD1gMe/l7DPuyoXUG02ZJZ9+e1kn1I2ZzwOD:dLiDqRy5UG39dy1I2Zz7
MD5:	18AEEB9779668772E4515B25947BEF36
SHA1:	BEF7AD9B95AA9CFF2D336546ADAA5A89E808C6B6
SHA-256:	7D61B5FBE996CE11E008206EECEE08012561B5B976DA879B3149640A53665881
SHA-512:	55490860D0A848FDF2CC67E6DD046A9C0096C377ABDAA990C3CD3F1E4EA0AEF38108894D75AC9CEC28690AB71584E9429B06A8D4C65F2BCED04AF99A0317CC6A
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"jjNQZqTKFrDEmLAPh4SR2As","injector_basename":"sodar2","bg_hash_basename":"KYbSBp6KYnVabVUK_IUUDiB2CndMwcBe0nihEfuEUmo","bg_binary":"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

Chrome Cache Entry: 1059

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	836
Entropy (8bit):	5.372502073219384
Encrypted:	false
SSDEEP:	12:TMHdPNCGi/nzVJ/KYf3nhWOgvHX0U3uC1065F8Lio8p0NIuviCIhJnTaUx:2dIGATLf3ix3utHOppQIUIfb
MD5:	7D59364B7ED2DF3F02507C9F92560DF9
SHA1:	D2A98D9A83D13D1C22D1DABEFF5D90C93482301B
SHA-256:	7992A4430843EF8B4BBAE534358BE3193AA1AE9C78F273E8E8A70B6AF1244AC5
SHA-512:	3803CD6A8DEC5D28B7D74C76E8305605F4042699DF673DCFB62A2DD2EA2BCB62D6F126AF07E615B2CCF93E3B66265CA0111E82E73FF558A0A499B9FE10E49549
Malicious:	false
Reputation:	low
URL:	https://cdn.mgid.com/images/logos/Adchoices.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 83.7 88.2" style="enable-background:new 0 0 83.7 88.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#08AACD;}.</style>.<title>Epeex_by_MGID + Adchoice</title>.<path class="st0" d="M77.3,51.3c7.8-4.2,9.2-9.7,0-15l-63-34.5C6.7-2.5,0,1.1,0,9.9v67.9C0,89,5.9,90.1,13.6,85.9l7.2-4.1..c2.3-1.2,3.5-3.8,3.1-6.3c-0.6-2.4-3-3.9-5.4-3.3l-0.8,0.3c-4.3,2.3-7.1,0-7.1-4.9V18.9c0-4.8,3.5-7.2,7.7-4.5l44.1,25.2..c4.3,2.5,4.3,6.3,0,8.7L35.5,62.6V45.8c0-2.5-2.1-4.6-4.6-4.6s-4.6,2.1-4.6,4.6l0,0V69c0.5,3.5,3.8,5.9,7.3,5.4c0,0,0,0,0,0l1.6-0.5..L77.3,51.3z"/>.</svg>.

Chrome Cache Entry: 1060

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/adb_match?adb=44741203199349423611860743130078207899&id=AU1D-0100-001716532054-VWROEXDT-D1CK
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1061

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	45660
Entropy (8bit):	5.907863825754591
Encrypted:	false
SSDEEP:	768:D2J8FpAuYQFcenF9AclzvnxQSAyn8+cQGQMoFLyZi:D2J7uYrenrASzaSA3+cCK4
MD5:	E9385DCE39C5167754C02EE58CBE9539
SHA1:	3CEC73883BAC7811DEAAEAAD37FD169A13EA7291
SHA-256:	E790F53E529219A3FB8B3579CB5BEB36276C2A98C02D612757CCEC5917940B79
SHA-512:	8F046BC02C35E87CB79A54265FA7008AEF54BC3015438307A70850F00FE49EACEB48CD50EE77AF906DBA719A201305B6E3E0F215CC3D54D23BE457CD9FDBA78F
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 1062

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (430), with no line terminators
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	5.387404218910159
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRu3BrStFiYSB0Fgdu43o9fk4tFiYG:haoDCfJ2fJfKoF5Kpp3ipF5G
MD5:	2478F7B7CA6ECCAFC76E96776077B5B2
SHA1:	706E9FFC4763F306A2267CF0461AFDC1569CA40E
SHA-256:	B07960DCE926C34F170D81C4E465D42CBD18E6B507BB2AC3EF3C07145E24C62D
SHA-512:	3211399835447C4F3B525AEBB4530BE63644F5A9FAD2DF018B06D04A7D4A8CC78CE44F89B6EFEB27816B3870888FCD8C6EBD7FF9B1A856DBBE631DAA0CEBC7A0
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9847014599&adk=3441210196&adf=4066527037&pi=t.ma~as.9847014599&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221071&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078270&bpp=2&bdt=258&idt=594&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&prev_fmts=0x0%2C590x280&nras=1&correlator=2528708288376&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532079&ga_hid=396375652&ga_fc=1&u_tz=-240&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=1778&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083639%2C31083822%2C44795922%2C95331983%2C95333409%2C31083940%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2604152591232249&tmod=1068189570&uas=0&nvt=1&ref=https%3A%2F%2Fpjnewsletter.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&btvi=2&fsb=1&dtd=599
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CM6dyqfUpYYDFW2XJwIdxzYCpA"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-7666278362879166\\\"]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 1063

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8477)
Category:	downloaded
Size (bytes):	465218
Entropy (8bit):	5.5677455989130795
Encrypted:	false
SSDEEP:	6144:9pelh/tn9jOc7S6QFt838ZGxrpsU6FlIb:9pelhVn91QTYOy
MD5:	B0C426D381C1EF00A43E9A5AA3006C4D
SHA1:	4959FDA0B14385D7B20DF317CA4E511A0CE1F329
SHA-256:	31205E0F1F4AD6E82C3EAA6DB6604DAC744F16F3449C3D652778FB3B848BD2B2
SHA-512:	2AD5EF603E6362AE08ABED85164AE2971EB0D6E5BF9988C56080DC3B235D9A66B71B295EEAC399528FAAAFF1D29CDB58FA9EBD62490D9C4AC875407E3BAF50A8
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iovW4/yD/l/en_GB/aubh74cvJ-S.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("AccessibilityWebAssistiveTechTypedLoggerLite",["generateLiteTypedLogger"],(function(a,b,c,d,e,f){"use strict";e.exports=b("generateLiteTypedLogger")("logger:AccessibilityWebAssistiveTechLoggerConfig")}),null);.__d("AcfToastImpressionFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1873550");b=d("FalcoLoggerInternal").create("acf_toast_impression",a);e=b;g["default"]=e}),98);.__d("AsyncTypedRequest",["AsyncRequest"],(function(a,b,c,d,e,f,g){"use strict";a=function(a){babelHelpers.inheritsLoose(b,a);function b(b){b=a.call(this,b)\|\|this;b.setReplaceTransportMarkers();return b}var c=b.prototype;c.promisePayload=function(b){return a.prototype.promisePayload.call(this,b)};c.setPayloadHandler=function(b){a.prototype.setPayloadHandler.call(this,b);return this};return b}(c("AsyncRequest"));g["default"]=a}),98);.__d("BDSignalBufferData",[],(function(a,b,c,d,e,f){"use strict";a={};

Chrome Cache Entry: 1064

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	129036
Entropy (8bit):	7.994246064603044
Encrypted:	true
SSDEEP:	3072:kDA9agVDk5bMxAD28RP0U5jvT0OIKmwArc:k8PggARcURv4OBmwWc
MD5:	CCDD09C5FB47F6DBEEADB15CCC61B778
SHA1:	72F54B6161FFBCA8E7BAAE38211810D72FCCC2D0
SHA-256:	3828C9B3A90D93A5B48CC498F58D016473F1439D21286AF482EB195091F52503
SHA-512:	89C36728169D03DB37F6411219E515945076AE756C2856FB893F808AE15FBDEA8C80706B717B4B08773A4CCF7535169D927BCAD3CF38CBBF26C10A111881CB16
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.......p....sRGB.........eXIfMM..............................J...........R.(...........i.........Z.........................................................X......p.....pHYs.........."...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx.....eWq-\};........r....A.$....lc?.....lc.`.......?...m...... $..B.(.h.&....._.j.>u.=.g.3.g.Z...>u....L....f.T[.Q..S.m..~l..Y.5.f....HG....J...(m[.Yf^..d... .../{...rVk.H.~X.....Ko6.@".y;.%f.I?.ny.....m.....E..O......;rYw......=.a.c`....lJ.IQ..J...s..F..d..O{.0/.1.... ..?$./..7.LO+m.bR..g.dKy.<j.%..W.R??)s.. ....j&.H.......jq....M......m...:.=..c..8x.rK>.yV{.6.K+....uTj..D\5.....S.+.........L_..oj

Chrome Cache Entry: 1065

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2346)
Category:	downloaded
Size (bytes):	2569
Entropy (8bit):	5.2354449376298
Encrypted:	false
SSDEEP:	48:iI+Nb2EJXUt/Gcz5vDGnYgl7VjB/F74fOAoWmvCufiJyv1pkaWmkNb27i:mb2EJXUlGctGnYgl7BVlPcITBeaCb2G
MD5:	66FCBB13575C15885D31117C870D568E
SHA1:	A383C4AA958AAD2CFA06A164E90B06F530C5140B
SHA-256:	698E7DAEABB6A74F2E88603C38090012A61FB96F733A26BBEC992E992CEA2452
SHA-512:	D474739B06557213C85B03FFE0CD66C592325A97C05A0C3983FF897F155836E4A1E2F0FEE780F34487626412833D7A49EF9AB5E769C274D85F4A593D8E993D27
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio.92f8cdba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.DMDrawer~bundle.AccountAnalytics~bundle.ReaderMode~bundle.Articles~bundle.Audio"],{74673:(n,t,e)=>{e.d(t,{ZP:()=>g});e(6886);var o=e(2784),i=e(25686),r=e(51461),a=e(63142),u=e(82392),l=e(73186);const d="up",s="down",c=(n,t,e)=>{e((e=>{const o=(0,r.Z)(n)?n>(e.count\|\|0)?d:s:d;return{...e,count:n,oldText:e.text,pendingCount:null,pendingText:null,text:t,transitionDirection:o}}))},p={};[d,s].forEach((n=>{const t="0.3s";p[n]={active:{transitionProperty:"transform",transitionDuration:t,transform:"translate3d(0, 0, 0)"},pre:{transform:`translate3d(0, ${n===d?"100%":"-100%"}, 0)`},post:{transform:`translate3d(0, ${n===d?"-100%":"100%"}, 0)`,transitionProperty:"transform",transitionDuration:t}}}));const x={position:"absolute"},m=l.default.create({root:{overflow:"hidden"}}),g=n=>{const{children:t,containerStyle:e,count:l,...s}=n,[g,f]=o.useState({animating:!1,

Chrome Cache Entry: 1066

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1791)
Category:	downloaded
Size (bytes):	2014
Entropy (8bit):	5.274437549578195
Encrypted:	false
SSDEEP:	48:iIKR/f8bjeOovM1cS62+D++bbRQMNrara7yWmsR//R:OxYjePMB62+D+6bFZOaj
MD5:	9C4242A7EC273AC2E3BA1764DD1D8DC9
SHA1:	1F2E633F288EA5BC06F6B3A74045FD61DD648C7B
SHA-256:	C8CF14AF73A097444351ED9DF4B14C04739A09466BE47AD04ECE52ED027BBFAB
SHA-512:	DBA8AD53348827A82A36EA63F63DE2A818B2218686F98507233851890D8B5CEABEC74A5B54D092E1123F04B000D430F26F6C5554A81745081E59552F8DA66508
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.AudioSpacePeek~bundl.d52c10ea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.AudioSpacePeek~bundl"],{26176:(t,e,i)=>{i.d(e,{ZP:()=>h});i(6886);var n=i(2784),o=i(14983),l=i.n(o),r=i(25686),s=i(31165),c=i(78705),d=i(27968),a=i(70451);function u(t,e,i){return t\|\|(!e&&i?"fixed":void 0)}class h extends n.Component{constructor(...t){super(...t),this._handleBackClick=()=>{const{history:t,onBackClick:e}=this.props;l()(e\|\|t,"Either onBackClick must be specified, or history should be supplied"),e?e(this.goBack):this.goBack()},this.goBack=()=>{const{backLocation:t,history:e}=this.props;e&&e.goBack({backLocation:t})}}_renderContent(){const{backButtonType:t,centerTitle:e,centeredLogo:i,fixed:o,hideBackButton:l,isFullWidth:r,isLarge:d,leftControl:a,middleControl:h,position:k,rightControl:p,secondaryBar:C,style:b,subtitle:B,title:g,titleDomId:y,titleIconCell:f,titleIconCellSize:m,w

Chrome Cache Entry: 1067

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190088
Entropy (8bit):	5.43768054487559
Encrypted:	false
SSDEEP:	3072:I8GD1A3cxS0VyrSb5l3q6gwqZ6+nqVex3b7qtJPHVpIuYw32z7K:I8G+3+Vyrq5St6+n9PqX
MD5:	278F19660E99F9BC4E585FE43B1735B1
SHA1:	D32C61EF0E9B1D84B4F0166480F4CB4526C29E1F
SHA-256:	0C58FB62DC7353A4C11AA12C2C05E032221415DE4BFDCF067F7E160BA642F105
SHA-512:	A526E85AC5AF6A06217137262D18E4EFB8CCD7886EAD03BEDB0F2656A51480A73A97797E44820AF431ACC6A19E24A7D247285EF8FA569337ECCE577568BFA943
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim.cdeda0ba.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~loader.HWCard~loader.Tim","icons/IconAward-js","icons/IconBadgeStroke-js","icons/IconNews-js","icons/IconNewsStroke-js"],{70121:e=>{e.exports={queryId:"abYOw-mj_ezlBXwctfmYIQ",operationName:"BroadcastQuery",operationType:"query",metadata:{featureSwitches:["creator_subscriptions_tweet_preview_api_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_tweet_api_enabled","graphql_is_translatable_rweb_tweet_is_translatable_enabled","view_counts_everywhere_api_enabled","longform_notetweets_consumption_enabled","responsive_web_twitter_article_tweet_consumptio

Chrome Cache Entry: 1068

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39056)
Category:	downloaded
Size (bytes):	39195
Entropy (8bit):	5.406011816450991
Encrypted:	false
SSDEEP:	768:j5aDMF/Ajof7D7pk06mWDgbqDb7OAItKf2MFJI2iSqw7o3TODjziz3v2KWO+9OX8:j5aDMF/yof7vjXQrKesbFtkOkV
MD5:	D3699EEF99466E7C016A02F27BB4930E
SHA1:	706B47E4EBAAC35329A33E038571784D583DC715
SHA-256:	F54510B9FADBF90568135B468729046C8B216C8B0F4BB70FB6411DBE2088EE78
SHA-512:	B773E88633DF77DD7BC8BB950F9F309382B852FBE3AD92C6FC9D5D944245027819D726B40C703C8DB963F76E9E8D9FC5622C2D4ED8EBC2CE41DB856140CEFB46
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.AppModules.855c25ba.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.AppModules","loader.AudioOnlyVideoPlayer","icons/IconChevronUp-js","shared~bundle.AudioSpacePeek~bundle.AudioSpaceDetail~bundle.AudioSpaceAnalytics~bundle.AudioSpaceReport"],{52538:(e,t,s)=>{"use strict";s.r(t),s.d(t,{AppInstallOnLandingPrompt:()=>us,AudioModule:()=>ds,BottomCookieBannerPicker:()=>Xt,ColumnFromPath:()=>vs,ColumnTimelineAdapter:()=>ys,DtabBar:()=>Jt,GlobalKeyboardShortcuts:()=>Yt,LeaveSite:()=>bs,LivePipeline:()=>Qt,LoggedOutNotifications:()=>fs,ModalSheet:()=>es,Toast:()=>ts,XMigrationBanner:()=>ss,appReloader:()=>ns,badgeTimers:()=>is,bindKeyboardShortcuts:()=>os,getScreenReaderShortcutsDataAttribute:()=>ps,ie11Reflower:()=>rs,initGeoLocation:()=>hs,inputDetect:()=>Gt,multiAccountListFetcher:()=>as,redirectEmailUser:()=>cs,scribeExternalReferer:()=>ls,userPresence:()=>ms});var n={};s.r(n),s.d(n,{KEYBOARD:()=>Qe,MOUSE:()=>et,_private:()=>ft,detectedType:()=>lt,detecte

Chrome Cache Entry: 1069

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1070

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1071

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	315610
Entropy (8bit):	7.98548869007873
Encrypted:	false
SSDEEP:	6144:0TzFuOmbVLgZIUrAlQD4vP8/xiQ1jN61YDP6aR6D1RLzX7fm2KL+SHszAaMO:U8/BUOUbyP8/IQHCYDCaRY19C2kDO
MD5:	1F29535EEDF1634D5A0111D9608692ED
SHA1:	6A334B70B1726BCE0B17A2A03C6EBC604602DBE3
SHA-256:	2CB4BD8607B8F1F10693F0004C125AE19B80A3B4559E5F987D65CF4A7343A6CC
SHA-512:	ADAC7F37F9E6A21AD7FA0E63E69160FF3910D2EAF7A37E71325D3F01BAB63F00FDD88D1CEB7217E01C90919FF5346F32F0758F9CB0E22FE602CB37486490D875
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2022/12/supremecourtdoj-768x403.png
Preview:	RIFF....WEBPVP8L..../..d..Pl#I.$.#..y./p...N...O...H...D..HR.?.(....^^^k..^...b........W..@..O.FK<...,7...wD.Y..1.~....Z...$.lWQ...@...1..~.A.-)...1.X....C..<.OI.N...>..nI..9k..@jIt.M...R..%.p\|\.c..&TuU.U..r[.e.P'.<D$h..z.....e/.T..w..3....iCQ.XyT...$ .....CQP..EQ..e=.^...O.\|.-(Ij.....) ........._}U.6..."..9g........_xtS..9k.... B..'..:....ws.......A...UsO.[ .q..@.A..\s..`.#.(. .u#E.]E.-m.$%!..~.$P...."nI.x....)I.MR$.$...BP...J......Nl[.....^...t..p.,&...Q/%@Y.m..<.....=.FCU...S."GF.ef.s...C. K..8...x<....E....>kP."..........b.`..p...eq...............................yt.!.@.M@.@h..i..k..87......7J..:z.R....M..,.p..M.4.m...(W...4\|].d.=.g=..{.x.yTT....Y.B...66.F.p.@1.\|...9.Y..?{..5F...Y....3....\|.W.>q!.........p..L&'..(.sf.~<.1.M..]x)..c..3..<.7..p..x.......o.....V..s....x..-/P.q.\|..y...........]...mW.........C..z...e/.m.E.x.y...gDA....(.]...}........~..=k.Qlu..e..wss.;..g.Y..,.....Ey_..\....i. ..%+2Gf.8...v...\W...".....B....E..*...M.A....s.

Chrome Cache Entry: 1072

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1073

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6894
Entropy (8bit):	7.975309105478534
Encrypted:	false
SSDEEP:	192:wRznB3D7I5GL90nfbmjE9SzqoGxStZB9u5cOaPau:GdD7I5GL9UmjE9mv/9cEPau
MD5:	0930DF1EF12B19096FF7F738E83AE08C
SHA1:	84E55ABE966DD7F25B457CA413B351251A971BCD
SHA-256:	7449BC01DB7A42D4F1438D96F48EE87E30420063B3FBF19F22260B7C73CF225A
SHA-512:	6C040F35C298FA6B6EB299647C34EF1BECB8BB1DB82B0DA23EC9D0C25FB3261F33B51C8E0DDB37A7FD85D451A8D075C5D67D2447289D642C2E60244AAE7F5710
Malicious:	false
Reputation:	low
URL:	https://s-img.mgid.com/g/19586376/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wNS83ODMzODUvNmYyMDQyNjAxZTQ4ZmE3NmRkNmRiOTZiNDg2OTc5ZDEuanBn.webp?v=1716532022-rlwLC0T0ZIliwQjwfcwCAKIGvNrQ4ESjT1wePK-FokQ
Preview:	RIFF....WEBPVP8 .............>.F.J%."..t.A...glV.&....T....r.O...G.4j^..<...Qr..M..>vf`...@y......'U.c.a.7...{._....../..c.....X._\Y..>,Q..&.:.)W...%..OC..6.T@...4............k..2l...].W.........~7.....,Cz..5.....9........a.Z...A......p:..E9P_pj..&.....f.......'LF-b...T.x?A....W........5m....\|...N.v.X.3.o.s...:\...?m..s......\|..t>. ..F....B.;.!..e.K........./...k...D.YAZ.F.....#.....XG..5b...i.b+...@..........C9.xk..#......0..F.V.w.^...o.(t....5.....&Bt...x..{.].^>44@gJ\|..k.&.rj.Z........m..G.S.....eC..TS..#..Ws....O.5bm4#.".p.]..T..'G..Kb.R......9.=.h^.a.U8..K.K.L.H....}.."..}..}.J.9..Ey/...s...}45.H.}O,...0....n...iR.D.T+....D..Mf.....u..-v.i}..y. .I5e........k..uiu.M.v.pt.+...e.,'yG..e..WS.S....&'J.eh..@.O ...z....lD....1.0v~r.7....$Hw....D.a.Z....M!.."."j..\|.....9^&.4-X..m....3....v?Y.c.).D.yA...b.X9.\QtG...Z.20.-.Q..N"..?.dF....$.{.[.Z....z..n.pzh]..-k..:..8..k.rD...d.8.\|..b.z!G.r.o.D.V8....=. ........f>.^.'..w.......{.......e.BO..\......aD.

Chrome Cache Entry: 1074

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 1075

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1076

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	17083
Entropy (8bit):	7.982308428834002
Encrypted:	false
SSDEEP:	384:m60n76CIHRODbU9VBUaiXB+F8NRYwiINmLGL0luobcIOgHMHFvUFG:90nkmg9XUTBU8iLIZ0luobcIOgH+MG
MD5:	9978DB669E49523B7ADB3AF80D561B1B
SHA1:	7EB15D01E2AFD057188741FAD9EA1719BCCC01EA
SHA-256:	4E57F4CF302186300F95C74144CBCA9EB756C0A8313EBF32F8ABA5C279DD059C
SHA-512:	04B216BD907C70EE2B96E513F7DE56481388B577E6CCD67145A48178A605581FAB715096CFB75D1BB336E6AD0060701D2A3680E9F38FE31E1573D5965F1E380A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j...B.IDATx...m..W....9gf...X^.-...$.@..i.$b-.6h..kZE.R.R0jll@?h..R.D[J.hZ0..&....X-...".W.M...,...,.uf..s.^...kWS..csy..93...s......%.x.S.... .... ..... ............................ .... ..W=...A.....A......T.....T.@P..T.@P..T.@P..A.@P..A.....A......T.....T.....T..9.`...B$..:..\..!%$i....@..E..$....(&bRL...[.F.=Ijcl....$...3....!k%.Gql..Ql8..S....Z.'..{{.PB1....,D.g.....Ia../i..=...".v..K..g.....%._...fO...).EaR@P....dw........0..7....f8...O...1.......K<....$LZ.u....%u9.o#.....mW.&U...X)....+rI/wvo.Y$fR..`.V$.........4.m.<we...u^nZ.Z.p..olh.+...^.Z.8qb.O~..........oq.PDB..).'D\..mI%6R.......J%.nh,&.E\....)2...8d.E.)fX."..&..R..........&..6b.`k1......-Jjq.nH.gl..=.f...{&.({......*."a.VZ._.......#g_..t..+Vu~.CM..+.._..f7m.g.K.K.....^...D....n^..H..Mt...^..6...o>t.F.Kb.L.E]]].>q...,.......4;.;b)t..r,....g..~.........OvE..3...o.......M.I..........O.........E..Q......[....OX....Q3i..m.<..u...g......

Chrome Cache Entry: 1077

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	360
Entropy (8bit):	6.991335815776394
Encrypted:	false
SSDEEP:	6:6v/lhP70wS7/6TsR/55XxKpoqPrQj6NLFO1h1TKzPJ9rsKMvc7Fdc58adX4NRwhG:6v/7M7/6Ts/51xeoqPrQONLFO1isE7Fj
MD5:	E1B87AFEDB16651B65DE3C4459639ADB
SHA1:	2359F5E9EDA21DCAD55F0C59A1FA1D587F5CF829
SHA-256:	04DD17131968A07C34224FB2E34A25D3BDD06FED40C6025F20ECDFC9E6EFF2A0
SHA-512:	79D3F3B1534A55CB1E2B13979D2AC8B557FAA8E64515B1F52B3FDCBAF0E1A71CAE3A52635E819CC24272F11C49AFA7C8CDA9C8F30BE765B557B36169A6D8DAA7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J....pHYs.................sRGB.........gAMA......a.....IDATx......A.E...2.L..,.+0P432..L......S.Ssc..PP02T......(*..8.8...@.t...R.......3do...S......:.j...Z.Q+M..`y.d".....;..9.PD..q]x4...,....s.k..5...d0.l......e.....^..c{D....i%v....Y.@....:..Lt%...2y.T...6Q/.1...$...SG.....x_..+..`..!.....JF.R......IEND.B`.

Chrome Cache Entry: 1078

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=2705793077&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=7347F55B-78D1-4804-933C-2C89182FB80A&nel=1&eid=44776495%2C44806075%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532091117&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=4377968313365363&scor=1033149198280613&ged=ve4_td0_tt0_pd0_la0_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16427
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1079

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	144828
Entropy (8bit):	7.996095320961117
Encrypted:	true
SSDEEP:	3072:j/a265/hHay1vSNq5jzep0QLkrrMRHDnVOSYu1TCTMgY5id:m20h6yQuj6pHkrIHzV51wld
MD5:	6E043DF5A174BE6325C2977942DD978C
SHA1:	2585DE2B7BAD9835816E0A6132EA9A74B4620A02
SHA-256:	3A82E7A5E41B59FDE3E97B7C00EA5CF74ADDADADE0FFD3C4A64D620126BAB57C
SHA-512:	F422AB94AFF508CC3BA9E2917713D0587941AA86B76DB43AFBB4A23ECF0EACDA958499E5A1DD0C6D0996DF1B8D5FD14BAFBCFB27C7085B015C0D991038887351
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/haley-1-768x403.png
Preview:	RIFF.5..WEBPVP8L.5../..d.....4..d73m.w...1.A.m..l.i..A...i..7..3f..X...v........^..^r... .....U......R!1.Ie.A$.87p.#...+%....8...;......+..x.AmR.c.w#..l..\...zd.Y.X$.V...9U9.J.0.hSt.Jp.....?.?.H<.yA#.5i.....GS.A.JF...X.....i.....h.P..<.Gd..&.aa..\|.d...;c.z.j&.(..p.bR..x.9./...,F.{............S..6...=...2...^... .. ..... .. . ..$ .p..... .q....Lc}......`.fA,@b...N"....:..4Rt.u..f{...F?.\|....C'59..UTs.w...3....a53..fVif.".F.D+f..4.e0...,P.d....I...;..f...^...M_......g/.-.i.Y{)..F...ir....c..........5_y]._..........O.!..*4f.a.m...^^..?s.....y..mO?..g.....=..m.....v.p......@....K..W.3D....`...].E.E............A..+...i4....(T.)o..?,...1...f.L.........mX.rw./>..>...L..~R..=........]...'.H...A..p.m[..Q.].......}.........7.p=...<.)F...\.ET`....3...`.k.-.. @..e.!..._.nm{..m....BP(@...k..\C...m5w.....t.N].=.y^..}......E.N.....C.o...@...?m..).m..%:PK........!.t.......p.=.}XZ/...T.NB.,.......f6.\..f.\|.E._.m+a+.1..v.2FA.f.n.......DB.. .L2Y...$

Chrome Cache Entry: 1080

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	515
Entropy (8bit):	3.7079048680061124
Encrypted:	false
SSDEEP:	12:emfrmwtm7AXyUkHHyKsfNf0MLq6p3HHgsfNf0MLq6poHHu:emfBAKiMfRLLFVFfRLLFWu
MD5:	78B73ED4B5ECE35CD6424B56864206DB
SHA1:	6D3C492C0376BD33D010FBBF91CE7586A4131CB2
SHA-256:	59A3FB93AB04312D58A8D0F4E0E9396A8A4B5D2718EB61CBDAADFD8AED34301C
SHA-512:	33AFD353B8313A292F0F1B7A4D23B7317595026688C88903681771355DEBE32B0D7197075E7644D8D664C8D03254824764D2215CB51EA91E9556A3E018D4279E
Malicious:	false
Reputation:	low
Preview:	[null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",0],["94166617",1]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",1],["94166617",1]]]]

Chrome Cache Entry: 1081

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537082476&val=wDRi3Y1XWudtyec5KKvj7ggue68
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1082

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	26748
Entropy (8bit):	5.484378987239465
Encrypted:	false
SSDEEP:	384:4WQOLpOX40qPpHBTtOU/fOYeIFPXOYfF6jmYB+UL5ubaBLPgu:QoW4pdB5xkIpfUydta94u
MD5:	06B919055BCD2166F65A5D367089CE8A
SHA1:	5F77D16F478D0DB8CF91A830B9DA8BBA3CB3AA77
SHA-256:	890C3505FB75E957C033479368348B8CFBBC2EBD26AB33B2FB4D3CBC0C5C9B50
SHA-512:	A2776B903E510EC6AF9855A97752BA0DDF64F76592D61E4F385C11A656ABB8ECCFAC816EA1C97DB762E7EE6DA7D901A1681DEA9DFA50C82091845CDA19BF39FC
Malicious:	false
Reputation:	low
Preview:	{"data": {"trackers": [{"url":"https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east", "e": "sync", "pr": "5", "t":3},{"url":"https://ads.stickyadstv.com/user-matching?id=3655&_fw_gdpr=0&_fw_gdpr_consent=&gpp=&gpp_sid=", "e": "sync", "pr": "9", "t":3},{"url":"https://ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=", "e": "sync", "pr": "9", "t":3},{"url":"https://ssp.disqus.com/redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D52%26key%3DBUYERUID", "e": "sync", "pr": "52", "t":3},{"url":"https://u.openx.net/w/1.0/cm?id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D", "e": "sync", "pr": "23", "t":3},{"url":"https://pixel-sync.sitescout.com/dmp/pixelSync?nid=136&gdpr=0&gdpr_consen

Chrome Cache Entry: 1083

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	20645
Entropy (8bit):	7.95618806544571
Encrypted:	false
SSDEEP:	384:4r46WkVR0ELw2QLtjw9uij7BmZJcVXnbIReJNURpF+Mx7o:406JR0ELdQRjwpj7BKcuvPx7o
MD5:	56E2006ED364C711B4D3FDB859860C79
SHA1:	CEC16167BAEB4B81FE5CF5D4437F7CB0EBF666B4
SHA-256:	E5E1F0155A5F2C8674D0DA5690DB21A7F9A539C2D3E497031BB81CF7D52E4587
SHA-512:	72CF42863EA01A6321E3BC71B7A72AB0CE92A62CA86516D9A659C052938939580B0FC1ADC5F3F68FDBA54F6CF812A5B16FEFB767B794D2D4B267516814A8AC14
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2019/03/TrumpMAGAThumbsUpFI-768x403.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress.......................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn................."................................................<.I..B .I$.A ..........u;..;5.~... .......@D.}..H$.I .A$.H .`X.\...U.dk.T....rA!.VC..b.$.,Y.`.@D.........X......j.+[~."...C..TH.$EP..H.H.}.....$H$....`....3.6-.{..tzT...gg...P.@X...$.I.....@$.d.... .HD.x._/..Z.:...(....z] I..@.... A$.0H ....$2Hd...3...v..<....;y.4.....D.H UZ.,.. .A;.(. ...h.$....>U..zOK..=.....FN.?......t. .U..U.,.@$......g,.%..,.@...C....TsaL.>....Y........DZ.,.H$..:.c;.]....C..UT(.>.....;...]mR. .).'S...."...H...I...L...X.....P.'.h.4i{...QQ.^Z...Gp.I$.$..D.;.....$........Q.A..\|.6Hu.];..v..@.U...:.I$.,.Yk..Cc".~...(EUDP.T...I$...NV.4h....e.;W........A...........*...@........B...?.o........f..gk.;.....2.@Q]K..r.T.......A$.H.I....0.u.z^..5.V[.."..]......B..U.....UbX. ...C....2C.&6O.W.z...%..Z.T..n

Chrome Cache Entry: 1084

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F170737076%2C22652678936%2C187271864%2FVideo%2Faniview.com%2Faniview.pjnewsletter.com&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&env=instream&ad_type=audio_video&correlator=1993801783076948&tfcd=0&npa=0&gdfp_req=1&output=xml_vast4&sz=640x480&max_ad_duration=60000&unviewed_position_start=1&vpa=auto&vpos=preroll&cust_params=posB%3D2.1&plcmt=2&sdkv=h.3.642.0&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=607268036&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&dt=1716532065443&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=3879248848034660&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td46_tt29_pd46_la46000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts2_eb16619
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1085

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1086

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51023)
Category:	downloaded
Size (bytes):	52305
Entropy (8bit):	5.731929742698319
Encrypted:	false
SSDEEP:	768:jUYNvtJUCOi9u+CTTDl6hXuGnSaFZYN/5jkWKxBtJtBws3daee76hks7texd:jUYNvtJUCfh1XuWa23BwsY76Ji
MD5:	5BF5189B73A6D378DE9D611FB962D907
SHA1:	16BAE3739C5977C80050D8D5EDE4DC2578938E9E
SHA-256:	2986D2069E8A62755A6D550AFC85140E20760A774CC1C05ED278A111FB84526A
SHA-512:	2625CB216D01D7522A9DE21AD2168162F70D367D6C5684CF43D59793BE5972039761AD331BD05F6A950F34905AE26C2CD1083019B9D64CA844B67F7D8FB30CB3
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/KYbSBp6KYnVabVUK_IUUDiB2CndMwcBe0nihEfuEUmo.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function A(S){return S}var O=function(S,Y,R,l,z,W,v,e,q,y,k,x){for(y=(k=l,36);;)try{if(16==k)break;else if(k==Y)k=q&&q.createPolicy?41:R;else if(85==k)G.console[W](x.message),k=51;else if(k==S)y=36,k=99;else if(99==k)k=G.console?85:51;else if(41==k)y=17,e=q.createPolicy(v,{createHTML:J,createScript:J,createScriptURL:J}),k=51;else if(k==l)q=G.trustedTypes,e=z,k=Y;else{if(51==k)return y=36,e;if(k==R)return e}}catch(a){if(36==y)throw a;17==y&&(x=a,k=S)}},G=this\|\|self,J=function(S){return A.call(this,S)};(0,eval)(function(S,Y){return(Y=O(63,66,8,0,null,"error","bg"))&&1===S.eval(Y.createScript("1"))?function(R){return Y.createScript(R)}:function(R){return""+R}}(G)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applica

Chrome Cache Entry: 1087

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	45660
Entropy (8bit):	5.907863825754591
Encrypted:	false
SSDEEP:	768:D2J8FpAuYQFcenF9AclzvnxQSAyn8+cQGQMoFLyZi:D2J7uYrenrASzaSA3+cCK4
MD5:	E9385DCE39C5167754C02EE58CBE9539
SHA1:	3CEC73883BAC7811DEAAEAAD37FD169A13EA7291
SHA-256:	E790F53E529219A3FB8B3579CB5BEB36276C2A98C02D612757CCEC5917940B79
SHA-512:	8F046BC02C35E87CB79A54265FA7008AEF54BC3015438307A70850F00FE49EACEB48CD50EE77AF906DBA719A201305B6E3E0F215CC3D54D23BE457CD9FDBA78F
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYDvhqDQqMOD11Fc14g2ab1uPdxZ6p5RmsdR8wjeOHrLKw&oe=6677A34B&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 1088

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.287698118276452
Encrypted:	false
SSDEEP:	48:bFj15XHuJcXl2E9R2jc2u8aYlPFs3v0YxnHS:FrVl2Emjc2u8bl9sfO
MD5:	391C73545274E78E6615C6449FF6FF1D
SHA1:	C9D581335ABDBFD51679827E8B24F9896CA1DA16
SHA-256:	41D2526E9C4595FC1FC747555BDA18A041033A863A9B2ED180E7B5836918FACD
SHA-512:	843D8CC8703AA9808F7D9807AB4CB24795279A015F1EEB2632C0A289C0427157FEDE3BB988FF857DC994BAD22EC5CA83654B6FBF0FA24390E14816F66072ECAB
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&"26"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);"application/xhtml+xml"===l.contentType&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(0<a.length&&!(.01<Math.random())){a=(a=h(document.currentScript))&&"true"===a.getAttribute("data-jc-rcd")?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 1089

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1557)
Category:	downloaded
Size (bytes):	1780
Entropy (8bit):	5.274533324500853
Encrypted:	false
SSDEEP:	48:iIK7IxcqLtiOc0v3bE51juyVSngM1RUZ0RLDRbWmsI:Oc8+v3or5ogM1+OVD1aI
MD5:	DF42CB44FC4D7A4B250971668B0D3B9D
SHA1:	52B314E8586E64F1F68E525BDD5329537B1EFA8E
SHA-256:	DA90BB96E2E7438D9388320280CD5E2BCDB4ECF36A029F34E16B3B755A687C2D
SHA-512:	953683087D32A18E288872BC40FF1E7D47A76DDB4C9E8FC6E67B54AC9CA5744A3E61DC0374D5FD91FB43E7F5E408C784A0FB67933ACCD33DD12AC5AB51468AC7
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpacePeek~bundle.Communities~bundle.TwitterArticles~bundle.Compose~loader.CommunityHandler.e7965caa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpacePeek~bundle.Communities~bundle.TwitterArticles~bundle.Compose~loader.CommunityHandler"],{35287:(e,r,n)=>{n.d(r,{ZP:()=>o});var t=n(7896),a=n(2784),d=n(25686),l=n(73186),i=n(65625);const s=l.default.create((()=>({hidden:{opacity:0}}))),o=e=>{const{children:r,disableInteractiveElementBlocking:n,draggableId:l,fromVirtualList:o,index:c,isBeingDragged:u,isDragDisabled:m,lockYAxis:b}=e;return o&&u?a.createElement(d.Z,{style:s.hidden},r):a.createElement(i.lL,{disableInteractiveElementBlocking:n,draggableId:l,index:c,isDragDisabled:m},(e=>{const n=e.draggableProps.style,d=b?(e=>{if(e.transform){const r=`translate(0px${e.transform.slice(e.transform.indexOf(","),e.transform.length)}`;return{...e,transform:r}}return e})(n):n;return a.createElement("div",(0,t.Z)({ref:e.innerRef},e.draggableProps,e.dragHandleProps,{style:d}),r)}))}},65625:(e,r,n)=>{n.d(r,{$p:()=>c,Xi:

Chrome Cache Entry: 1090

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x118, components 3
Category:	dropped
Size (bytes):	2214
Entropy (8bit):	7.266451117003875
Encrypted:	false
SSDEEP:	48:hviWve2s52sCWF38kkCgUiGiA4meTHkIO/dzA5MGk:few/W3KU97CHdKE5Mj
MD5:	5B819BD4F78643C3C6B74A58F598540E
SHA1:	11666B50113A8EC7E3667E3C92B89DD4020BFD1E
SHA-256:	71FCF1BEA2F7427A669094C393CA02A517DA2939FB2EB029686E7CCAE8B1241E
SHA-512:	D2FAD7AC526E28354F22AB99E407C52209E85B1856AD2A3D6272789B3A7A0F0DCE4ED36E077A5F811AB0C199F74C77BAB9286BADF7F42C6E6BFFABB9F89921DA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..IJ2YD4IATQc6FcuD828W..(.bFBMD0a000a8701000064030000410400007404000095040000bd040000ae05000050060000b90600001b070000a6080000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......v.@.."..............................................................................J.L^....8uGO_7\.=\|.Y..UI.)...r.Z.(.S.1.....F.V.)H~yU}.F.Z.....}S..;...j3.)...D...ux........i.M.2.,&]...9..kK...#.6..4....(.9.r....lZ....5h".AI%..II!$..J........6..:.:3kB.QK:.=s....k.........X($..)...j.g:J.:%.h.,8-.O..g?\t.st...s...f.S).g5.i..Yk.....KE.f.`..sZ.%....0[..t`n[.\S.......<}......=F.$...!...D........hJ.."JD.K%...V<.o.uo.uk..XQ...3*.J.M.H..[B...N..4..hC@...s..m.&.t..T...e..@.....C.................................. @.P0.............\.r......\..$H.9.c..9.<.z..kZ..kZ...s..1.s.$.W..kZ..kZ....1.s..1"O5U~\|H.9.c..9..x...>$s..1.s.$.UU~\|H.9.\.D.UUW.

Chrome Cache Entry: 1091

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	958
Entropy (8bit):	5.293234474680573
Encrypted:	false
SSDEEP:	12:kxPm05xkNN0mbHEdQ3+sUZ1iudb0+sU3/11XuzU8K+sUQhG20Bo8KBGGgHnNE+Nk:kItNN3w6TuMU3GnANKKBGG4E5
MD5:	AACA43BE9F0E436BE0B4A29B586F0BE6
SHA1:	887AC73E55032241B6189EB8F32EC1963DDDEF8F
SHA-256:	ECEB6471ADC206E403427B6CEE984C9F3902061406F1472AB26FC8F0B0A95BF7
SHA-512:	BAFE846B9AD2EC9223DE025E448CDB5C10C5EF08AC13C0A151EAE9A1ADC425786A5DD84C3BF22A727B848D41F2C6255C0D1FDE4286D0CBCC0D718F4EAEF4A726
Malicious:	false
Reputation:	low
Preview:	<html><head></head><body><img src="//match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&gdpr=0&gdpr_consent=&source_user_id=8554246236155519815" />.<img src="https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent=" />.<img src="https://secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent=" />.<img src="https://sync.adotmob.com/cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D66%26partneruserid%3D%7Bamob_user_id%7D&gdpr=0&gdpr_consent=" />.<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 1092

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	110163
Entropy (8bit):	5.3169271879633255
Encrypted:	false
SSDEEP:	1536:OFJMmmapiXpwzDYH3eeFeedZeDeeXeeSo3eeFeeaColj2vNnwlZDA0fs0n/qj1qG:M5s5wOfZepOA000/qkG
MD5:	C7EC464A63B81515A68D8D5FDF5A8D1F
SHA1:	B125CA13A04E35AECEEDE303EBF8FF1CD3BBBED5
SHA-256:	3AD1A0931C673556EE187DD40EFA986177455874614778D78A69230178A0EA43
SHA-512:	40752411CF41EBEE5A1C560FA7F05F7F93EB634B7E6C7D51E6FFF605173EDEA45989F01AB7A615F48FAD1763D7392061B874198B16C9FBC922E9E253609087AF
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/trump-reveals-amazing-2024/
Preview:	<!doctype html>.<html lang="en">.<head>.<script type="text/javascript">.. function detectAdBlock() {.. let adBlockEnabled = false;.. if(document.getElementById('LESfbmkdUexV')){.. if (!adBlockEnabled) {.. const elements = document.querySelectorAll('.responsive-ad');.. elements.forEach((element) => {.. element.classList.add('is-loaded');.. });.. }.. } else {.. adBlockEnabled = true;.. }.. }.. document.addEventListener("DOMContentLoaded", function () {.. detectAdBlock();.. // detect scrollbar width (for full-width ad).. document.documentElement.style.setProperty('--scrollbar-width', (window.innerWidth - document.documentElement.clientWidth) + "px");.. });.. </script>.<meta charset="utf-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<link r

Chrome Cache Entry: 1093

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073028&val=31c13c99-d8e7-447c-b9e0-64fdf07947f8
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1094

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	41347
Entropy (8bit):	7.981976156008475
Encrypted:	false
SSDEEP:	768:IvNafwzZd65wapMuIMlb3RB6snTLqFi1QCLur+I7itmfdHnR8:IvNyId8JpEab3RBtx1QP77H+
MD5:	D19980158C02111B6904B19E805AC715
SHA1:	735D183B95FE446F0E22E6642C7DF9428B4A9402
SHA-256:	EE54828AEB38B8D1D7E8AD7B054D6D0C3D5E2708B5455A77CAE7D4F18D6A2632
SHA-512:	60F8BA5E1703CF573D2B76DBAC6E9AC0D9CA4B3D3E06B75422DB61A6E173A3870C1D2587C6C7F41DF9A13D48C9A0572716E0D3C0159C85CA38E5BAB066488F6A
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2022/02/jenpsaki-768x403.jpg
Preview:	....."Exif..II....................................................................!........'.."#%%%..),($+!$%$...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."..........7.........................................................................+...6... ..............>...F..}.........G..x8.8..6....a'....=....s....B...q......=......b......lTmbLPmbLLmbLP..&&[i.....%..1.....7.W.....F.qp....inb.0.1..71&.71&.71&.71&.{.....I...I.......I...$....x..4..9.V......8...M..W..a...cH.g,^(;s8#...@.p..'p.....O.j.O..OV...<...8.z.y<..........I...rjoY.%.....+...<\...\|..MQ.S...>'...u.6.#.I.5..G...3\|W..G..>V.,.....O.....}Sg............=7..82^..1.n.%...0RQ.~q..=.0G.....u.....5.$26..J....=8<...V...5..4..-o!._oF..kMG.~{.....#W.s]v..D.gVP...Ii^]o.i..Zq.b;v2y....+q..<.P..f..Z.....$)....,...4^.GZd..D4.-F..I...d.r..2W..=...U.......zg.q...@9.[.W..%.w...S....T.T..U.m..N....Cj....w.OY_.).4s.;....v.Y.+`..A1.....A.Q.\........n.....A..[....G..}......KI..=.

Chrome Cache Entry: 1095

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/amo_match?turn_id=8792414088104974232&id=AU1D-0100-001716532054-VWROEXDT-D1CK
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1096

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3165)
Category:	downloaded
Size (bytes):	3334
Entropy (8bit):	5.321777444953365
Encrypted:	false
SSDEEP:	48:iIKZlHIq/EmhFmffEKoBUmhIVMydjjXlJJApsyOsv9mXZ+ByU6lNlrmWmsR:OZlHF/EmhAEKoZIVHjjXl/ATvIZgDaR
MD5:	E7C255DE1D70BB10C5BC4250F9EDBF19
SHA1:	0D92615BB6DC5DD8BEE5CEDAB207E14C92CD4D1B
SHA-256:	CD049FBCBA06046AFB26D4F4CEAA5320FFADB2EDDC84F85F5360D63B4B22BB95
SHA-512:	B8030940FFC8A3ABF36387A06578F9516242AA393D1EF431D17CC23749C47514A244D43BC7E707658385CCD94AD9565119CFE22F75405E63290ED88E705CA6BE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose.5b1a984a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~bundle.Ocf~bundle.RichTextCompose"],{48734:(e,t,r)=>{r.d(t,{Z:()=>b});r(6886);var o=r(2784),n=r(25686),a=r(45184),l=r.n(a),c=r(11711),i=r(18958),s=r(35953),p=r(82392),u=r(44329),d=r(29496),m=r(30318),w=r(54484),f=r(73186);const y=f.default.create((e=>({root:{borderRadius:e.borderRadii.medium,display:"flex",flexDirection:"row",alignItems:"center",width:"100%",paddingHorizontal:e.spaces.space16,paddingVertical:e.spaces.space12},contentContainer:{display:"flex",flexDirection:"row",flex:1},contentTextContainer:{flex:1,alignItems:"flex-start",justifyContent:"center"},dismissButton:{paddingStart:e.spaces.space12},icon:{color:e.colors.text,marginEnd:e.spaces.space8},illustration:{marginEnd:e.spaces.space8,height:e.spaces.space28,width:e.spaces.space28},arrow:{borderStyle:"none"},arrowContainer:{display:"flex",width:"100%",alignItems:"center"},arrowDirectionUp:{top

Chrome Cache Entry: 1097

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26428), with no line terminators
Category:	downloaded
Size (bytes):	26428
Entropy (8bit):	4.985246614403566
Encrypted:	false
SSDEEP:	192:Ndezf4YFQVtLcujxEJ0MuJ957QgMElGowid3ptAQXcCKLPkKSXRtpmfBKeSLE:Ndq0Y0MSHtl47iKLPkKSXnNeSLE
MD5:	22FF51E8536122571D50DD4AF94BC08C
SHA1:	77FD1500F2AE9BDBB84B3C8C1A75C0F6ED3E53EF
SHA-256:	85FFA2897FAD1CDFBBB2C1359745AD45ECD9E8D6744916CD880C2EC25AA944DA
SHA-512:	89DD0D57A5CB7E2657D6F9E9A0E73262E82BF84D911C79A41F24A345D00143C4F44E178C81F9C1A66ED157DFD2525CF97F97E715680676CC51F6DC914625162F
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/themes/patriotjournal/style.css?v=1.0.20
Preview:	html{--scrollbar-width: 20px}.header .facebook-link a svg,.header .menu-btn svg{fill:#fff}.header .main-nav a,.header .menu-btn .dropdown .menu-content ul li a{font-family:source sans pro,sans-serif;font-weight:600}.post .image-container a:hover .image,.widget.form-widget .form .gform_wrapper input[type=submit]:hover{filter:brightness(115%);cursor:pointer}body,html{margin:0;padding:0;width:100%;box-sizing:border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;color:#00314f;font-family:source sans pro,sans-serif;font-size:19px;line-height:27px}p{margin:0 0 40px;padding:0;letter-spacing:.2px}a{color:inherit;text-decoration:underline}a:hover{text-decoration:none}*,:after,:before{box-sizing:border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box}.container{width:100%;max-width:980px;padding:0 20px;margin:0 auto}.container.page-body{padding-top:20px;padding-bottom:30px;position:relative}.clear{width:100%;display:block;clear:both}.header,.header .menu-btn a{display:b

Chrome Cache Entry: 1098

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1646), with no line terminators
Category:	downloaded
Size (bytes):	1646
Entropy (8bit):	5.169631629778708
Encrypted:	false
SSDEEP:	48:0KiwND6VXR5zfsugQS54tYkQiBbsKeMQi6t5OW3WZeS6/:0q6Fn1UiKKej9yWd
MD5:	FEB2CE69EDAFFFCEA5CB78BB9DEA7880
SHA1:	96372CAAD7E4637A82FA9AA02797C872E0090CEA
SHA-256:	B24877912EC9008E22DF04C679E2141000579440237503A1E2BF4F9B9816ADDF
SHA-512:	DD9DDC6BC546EA2D96C914B3ABA7822C7766266D3DE252F00BD0A8D61330D3AAC2866CF93F547F999BD8D5B8E4A9AC20B762AF2368ACC8D43B5C322FA221C2CC
Malicious:	false
Reputation:	low
URL:	https://dsp-media.eskimi.com/assets/js/e/bctr.min.js?v=1.6
Preview:	(function(){function e(e){let n=e;for(;n&&"BODY"!==n.tagName;)n=n.parentNode;return n}function n(e,n,o){var t=new URL(e);return t.searchParams.delete("x"),t.searchParams.delete("y"),t.searchParams.append("x",n),t.searchParams.append("y",o),t.toString()}function o(n){var o=window.pageXOffset\|\|document.documentElement.scrollLeft\|\|window.scrollX\|\|document.body.scrollLeft,t=window.pageYOffset\|\|document.documentElement.scrollTop\|\|window.scrollY\|\|document.body.scrollTop,c=e(n.target),l=c.getBoundingClientRect(),r=parseInt(n.clientX-Math.max(0,l.left)+o),a=parseInt(n.clientY-Math.max(0,l.top)+t);return{x:r,y:a}}var t={init:function(t,c,l){function r(e,n,o,t,c){var r=t?1:0,a=Object.keys(c).map(e=>e+"="+c[e]).join("&");return l+"?x="+e+"&y="+n+"&bidId="+encodeURIComponent(o)+"&isBeacon="+r+"&"+a}var a=document.getElementById(t);"BODY"!==a.tagName&&(a=e(a)),a.addEventListener("click",function(e){var l=o(e),a={pageXOffset:window.pageXOffset,documentElementScrollLeft:document.documentElement.scrol

Chrome Cache Entry: 1099

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65344), with no line terminators
Category:	downloaded
Size (bytes):	228411
Entropy (8bit):	5.368375520276844
Encrypted:	false
SSDEEP:	3072:USCCoVWgMvSLXfvS+h5huDlBBuTieE0LxSgzNsSctt912KvxFw1TfuQiLv:USCx4N4K+hMSieEKPm7912Kvxu7A
MD5:	865849F8D05AFC92E338012A355CC267
SHA1:	F48EF94879CF56FA00685EDF21238C51A1629140
SHA-256:	C5239ED69C5FE658CE7000C62CF44218B572FE3C1AF263291648BD05E0B10BA3
SHA-512:	598DC8BBBC4D702540C89835C6F2113F02905179D2F8EE72160560C2958BA38C3191313ABA8F3D3ABB91B92DA87C85CE891B68A77405ECB1257AA94AE6BB00A9
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/modules.audio.8461959a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["modules.audio"],{66324:e=>{e.exports={queryId:"dPejLaLlwTH0y_xzqCRdew",operationName:"AudioSpaceAddSharing",operationType:"mutation",metadata:{featureSwitches:["creator_subscriptions_tweet_preview_api_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_tweet_api_enabled","graphql_is_translatable_rweb_tweet_is_translatable_enabled","view_counts_everywhere_api_enabled","longform_notetweets_consumption_enabled","responsive_web_twitter_article_tweet_consumption_enabled","tweet_awards_web_tipping_enabled","creator_subscriptions_quote_tweet_preview_enabled","freedom_of_speech_not_reach_fetch_enabled","standardized_nudges_misinfo","tweet_wi

Chrome Cache Entry: 1100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1461)
Category:	downloaded
Size (bytes):	1677
Entropy (8bit):	5.43110682064688
Encrypted:	false
SSDEEP:	48:iIKBoBroHGVev7SQ2SmoZcQnclwwy8WmsBa:OBoBroHv2+F1kwwnaBa
MD5:	D6E6C16735D9A4049409452BF0E179D5
SHA1:	F385C82EE21863EA102FC5F182880BEA0AA46575
SHA-256:	C0B0EBFEED3F53CF17A828E623DE7B529DC09CA78DC5287DA0700C2FC096C2F5
SHA-512:	5A2F22BEE268A1BD05054D7A7D101CC53BAEB26820055E7B1BC30083F1F92B21C9B058CA40D5C9D9AB620B03853EFD17F15B349B481E7E31D2E0EC3776885927
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Communities~bundle.Compose~bundle.Delegate~bundle.GraduatedAccess~bundle.RichTextCompose.9256e45a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Communities~bundle.Compose~bundle.Delegate~bundle.GraduatedAccess~bundle.RichTextCompose"],{51598:(e,n,o)=>{o.d(n,{Z:()=>r});o(6886);var l=o(2784),t=o(88990),s=o(45184),a=o.n(s),i=o(25559),c=o(48501);const u=a().j24c37b2,d=({Content:e,contentStyle:n,actionLabel:o=u,flag:s,graphic:a,graphicDisplayMode:d,headline:r,isFullHeightOnMobile:b,enableMaskForDismiss:h,onAction:g,onClose:p,onSecondaryAction:C,secondaryActionLabel:m,supportUrl:A,subtext:k,withCloseButton:y,shouldShowForLoggedOut:w=!1,shouldAddEducationFlagOnClose:F=!0,shouldAddEducationFlagOnSecondary:f=!0,shouldAddEducationFlagOnPrimary:M=!0})=>{const{loggedInUserId:O}=l.useContext(c.rC),[S,_]=(0,i.m)(s),D=l.useCallback((e=>{M&&_(),g&&g(e)}),[_,g,M]),E=l.useCallback((()=>{F&&_(),p&&p()}),[_,F,p]),L=l.useCallback((e=>{f&&_(),C&&C(e)}),[_,C,f]);if(!S\|\|!O&&!w)return null;return l.createElement(t.Z,{actionLabel:o

Chrome Cache Entry: 1101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 375x250, components 3
Category:	downloaded
Size (bytes):	32319
Entropy (8bit):	7.966319952763892
Encrypted:	false
SSDEEP:	768:BCAXwwFgFhw2yufneNQSfVZaHF9Y8DjxFUd0:BHgwFgDw2yLZOF+qFi0
MD5:	9ACB0928AF07E2FE0B32DBC328967E9F
SHA1:	B24071C3D38CA07F07E0ABB6CDE05E4973973895
SHA-256:	61543A32057568F7E4BDF80C48E53D5B1ADB118085015165A3B81B3697A41E0B
SHA-512:	607D1A7958B2698A428A2F31E1178CFADD3F3BF81E1CBD95321A63B867FE9D21A892845966CAA15445D3C7EF73146F5CAEE79AE8843DB136077A8662BE376918
Malicious:	false
Reputation:	low
URL:	https://ruamupr.com/images/18529/18529-375x250.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..............O.;o.7[.o.<.$[.......6..n....G q!..s]>...bi7g.Oz.........Ih.#n..>....+C\|..6...i.q.....Z..:.......e..s)..i.x..bF./<..._..{.${..\|9...[.z.=.+_.7W...x<...!Z.'......Q.y.b.(.r.....a.:T9..g...(.{.......a.....-.Z...V.....x..\.......U[..[..l\|..j..........3T..]_............P[.~...\|;h.......;..1.....

Chrome Cache Entry: 1102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 851x315, components 3
Category:	downloaded
Size (bytes):	27303
Entropy (8bit):	7.941149932658688
Encrypted:	false
SSDEEP:	384:yvYxBk6MHGcgpaErjxeAapl1fEZzk4odR9U1ciRtamJNq0714cXDreVgeNooAgRl:/Dtaza9eWZzk4W6Z4yPey+ovCn7zOieS
MD5:	C673B394DBF536AFF3A706DD5FDF19DE
SHA1:	F3DACA450C55B90EC3AFE3E5EF4C2DE901C10A08
SHA-256:	177376F7149FFA8D4937D7F323D2EFEC5F4B2D8665A9CA64A8BE9AEE17D67AF2
SHA-512:	955A59547CB77ACDAE3E59F3DED6C810FBEC2BE4B9BD30909706A8E1E7C202F7A3BA8FBADB30A422989867665AD3039929AD7E4A22081F83A1235932814D086D
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/339626099_183897197874346_8329189959842615239_n.jpg?_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=zrntXLkwUekQ7kNvgHFB8UZ&_nc_ht=scontent-hou1-1.xx&oh=00_AYAt6r7YDiO8sMSBRBWXOYU63vR2dtFwXsH-UXdPhYholQ&oe=6655FF96
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..IJ2YD4IATQc6FcuD828W..(.bFBMD01000ac20300003d100000d81d0000d020000084220000722c0000df3d000049410000e3440000ec470000a76a0000....ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................! ....#'2#%/%..+;,/35888!=A<6A2785...C...........5$.$55555555555555555555555555555555555555555555555555......;.S.."...........................................................................................................@.A.z...5...mQ.K7;&.f..

Chrome Cache Entry: 1103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	dropped
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Reputation:	low
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 1105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70756
Entropy (8bit):	5.313618415077441
Encrypted:	false
SSDEEP:	768:7U0Q20ixMvYt8qfq9pK9Fh/U1hoAEFvNwToejbUWtr3yHyDH43xtQ8GmWwb3XChF:rQ2pYoq9YZAEl6TFtrVDYQ8Gbwb2F
MD5:	D7AA90657AED0227993B38C5BE603268
SHA1:	244AB66833E164F6B98F52E63474947295B2E2A5
SHA-256:	DB9E12D60E1E7EF75DD057C41C3C139CC97CFC35122511C59CF51742F81D0107
SHA-512:	72A542C697F8590261A618C16FC5EFE447DB82632B374F26779DBA0174F4CC9D88E83A255EFC762CCCD9F97F490AC5C9606774682C7EB134B209B3C797472F49
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/libs/prebid/avpb8.48.0a3.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[200],{174:function(e,t,r){r.r(t),r.d(t,{spec:function(){return Z}});var n=r(4942),i=r(2623),a=r(4953),o=r(4030),s=r(265),d=r(3802),u=r(5740),p=r(460);function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){(0,n.Z)(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}var f="33across",m=["33across_mgni"],g="https://ssc.33across.com/api/v1/hb",v="https://ssc-cms.33across.com/ps/?m=xch&rt=ht

Chrome Cache Entry: 1106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.813607894428283
Encrypted:	false
SSDEEP:	3:OXMLQHJ/A6MBQCMDRDSr1XTDHJzDASO5n:OXFJHMBQpRDSr1DbGln
MD5:	9A041939D0821F70E69A74BB68FE765F
SHA1:	CCB7FA51258A3E2B1ADBA36037CFA6339772087B
SHA-256:	5424561FA3A1AB13A3EAC4166D498EE96453D876DD3C519088243747978952F1
SHA-512:	752A0E916B152BB805109141AF40CCD0AFFA519FFA9F9B9B6F69799BCA3CD0C5A934A4D16CF447A0491B8AB8B1FF1C691619CDD96953597FD47805BC5CAF8A50
Malicious:	false
Reputation:	low
Preview:	{. "addr": "8.46.123.175",. "base_id": "da68ea0929191655133f70d9fd73526f",. "domain": "pjnewsletter.com".}

Chrome Cache Entry: 1107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	549
Entropy (8bit):	7.471916944420736
Encrypted:	false
SSDEEP:	12:6v/7i/i1SlUUPqHhJYMablwuOa6vz5xtnSDnkXMYvJmJSt/6znV:AwbSBa8zXtnBZAJ9
MD5:	9D99A2372BBD5B28EF4B2EAECAC8C805
SHA1:	6503A35C95CDF2D08ED83E17AE81C8B0E58F49C2
SHA-256:	CC4939AF5D16855F2BEA8322DBF33461EBC6BFD092FA3E2291D87D3D83EBD8ED
SHA-512:	7EFBA58D391137EA50C0ED95025316E404CE8FED549C386F2D3316D91797CD39E5447DB9B0FFDB0EBADBAF1F38766743603C140B8DFB956ECCC144AA78CFF766
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/favicons/twitter.3.ico
Preview:	.PNG........IHDR... ... .....szz.....IDATx..W1..0..w.%t.<.:J.@I.%.......t..R.......L..fN....;.&....lbk.d. "C5...l.......1..F#....r....j...f..... u....c.\|.^.........a2p.X..t:M.....\|.Z.....7.M2A..K..n.!..\|>O..t!.?`)...I..0{\)....Rb.. .=r......%fK..}..%.,c\J.).q0..D+!`.j'.0.@..v....1...c..G.....+.........`....w....=.O...f...aH..%...15.M:.N.k^...e.D..[....&.]...D.s.h]..*#..n.s......ppL.%)...........2..........}2....9...l.y...s:...e...vN.:.t....{....\..x<....wj..IG..S...<u:.d...._fw.WNZ........v.?.ZLm..]J....IEND.B`.

Chrome Cache Entry: 1108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2950)
Category:	downloaded
Size (bytes):	15241
Entropy (8bit):	5.487742451234654
Encrypted:	false
SSDEEP:	384:uKE2324Of+0PQg77IwBKhuJpSTudJ1TEnuRPbCosVQXEv89:7E+v4+0PQg775npSTudXTJBbCowQXEvg
MD5:	C73C360DD70585F8B34D8F469F69CCB9
SHA1:	78CEF72FBE45CE0B3CC2AE8B61B0B8AF705434FC
SHA-256:	452B40924F4474EDA72A38469F371D2B9B56C781AEBD07C42A36BB9315564FAD
SHA-512:	9765F35AB047B0AD141CFD0FE5DD7BE2B4EEE6A7A43B616F06880578B901302AA2009BC3172D4EDA5F95D77E2D8D515D5A330846D51E812598F27A35CD24F945
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=n,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var r;const ia=n.navigator;r=ia?ia.userAgentData\|\|null:null;function t(a){return ba?r?r.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function u(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function w(){return ba?!!r&&0<r.brands.length:!1}function A(){return w()?t("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(w()?0:u("Edge"))\|\|u("Silk")};function B(a){B[" "](a);return a}B[" "]=function(){};!u("Android")\|\|A();A();u("Safari")&&(A()\|\|(w()?0:u("Coast"))\|\|(w()?0:u("Opera"))\|\|(w()?0:u("Edge"))\|\|(w()?t("Microsoft Edge"):u("Edg/"))\|\|w()&&t("Opera"));var D=Symbol();var ja={},ka={};function la(a){return!(!a\|\|"object"!==typeof a\|\|a.g!==ka)}function E

Chrome Cache Entry: 1110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjss4q4EZ7UXGYmlwXopPwnUMMLAu4thbEx_FTEiZQ5AArDUZajyT8MI0KqFXSwJna0MJXXthv1y5V6cbIVrAAYwRHFToIpyRpQuWBqW6oeOx2BTwWfvZ9wI_B4HrtEcgPh0Sqy3b73FP79cX6tWYDIPSkQ-WI8nBEhI&sai=AMfl-YR8L82zxrC5FwunWrg2pLtB4z_HPp5Vyqv6_vx9n6wONQHHN8wUTB-s5QYkWFlbpAST-huTcFm6uBcZsnR7IV5hqd1bETyt6XNR2lvLsiD78CT11dPfRXIFS9nsqCm9pa4qwA3wb7cDHYreZ46U&sig=Cg0ArKJSzMb-Bh8kbVWkEAE&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864hgB&id=lidar2&mcvt=1287&p=0,0,577,804&mtos=1287,1287,1287,1287,1287&tos=1287,0,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1812271808&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=1246482400&rst=1716532022150&rpt=2408&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5624)
Category:	downloaded
Size (bytes):	5773
Entropy (8bit):	5.444038422257423
Encrypted:	false
SSDEEP:	96:XPM88pTnBEbS+xiUG1eXb/PIKkPksm0WsNaqOStDaMKyqMM7VB6c/iSL+:XPQBE2MtweLMks3WsNa/StDDoGSi
MD5:	937AD95CEE75F79AD7C2DBF5DCDF73B8
SHA1:	93556036105B7F2BF06213789EC4A84E56BE79E2
SHA-256:	09B52C04FA941ABE7984D50F49A5BBED53B305BE51D94FDC53FC918655D4847C
SHA-512:	16859C226504E6252F3F0D82EBC9715581A4193D641D4039AF6E96C2E3B968488A3CA4BCCD8F011380251492BAF8C00A3B018CEC7B813B46AF5C7F2C9304737D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.Ocf.aa7be3aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.Ocf"],{50519:(e,t,n)=>{n.d(t,{QF:()=>i,Qo:()=>l,hZ:()=>o});var r=n(24058);const a="external_referer",s=604800;function o(e){return(0,r.ej)({cookieName:a,featureSwitches:e})}function i(e,t){const n=t&&t.encryptedReferralDetails\|\|"",o=t&&t.encryptedReferer\|\|"",i=t&&void 0!==t.referralType?`${t.referralType}`:"";if(!n&&!o&&!i)return;const l=`${encodeURIComponent(o)}\|${i}\|${encodeURIComponent(n)}`;(0,r.d8)(a,l,{cookieOptions:{maxAge:s,encode:e=>e},featureSwitches:e})}const l=e=>{const t=o(e);if(t&&t.split("\|").length>1){const e=t.split("\|");return{encryptedReferer:e[0],referralType:e[1],encryptedReferralDetails:e[2]}}}},58380:(e,t,n)=>{n.r(t),n.d(t,{ArkoseChallengeType:()=>$,ArkoseSecurityChallenge:()=>v,default:()=>_});n(6886);var r=n(2784),a=n(25686),s=n(73186),o=n(8443),i=n(6149),l=n(48501),c=n(90437),d=n(72599),u=n(70025),f=n(82385),m=n(60673),p=n

Chrome Cache Entry: 1112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31061), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	55092
Entropy (8bit):	5.295786539632903
Encrypted:	false
SSDEEP:	1536:XFbSKxfqPPkqR3KQXd+2KundjO43OeqiZEL6RZe7:VuqPBM3OD7
MD5:	42030B0BDFFEC6A0E52EED3CA3229DD3
SHA1:	FF8CC8D1EC900A9F7135C7A361810549C40406B1
SHA-256:	43F804D38A294C6DF1CE8EE64FB95AD0FF5A8D6D5685D9537DF02212668A1DFF
SHA-512:	5B97FF7174BC06198BE133CE87F98AEF38F7FF66923D4DAE27054066BC4231B216F282310D5162AB06BE904EFE99479AB70B26E68943999B514533BCD6A42498
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
Preview:	/!. pubcid.js 2.0.5 - https://github.com/prebid/Shared-id-v2/. * SPDX-License-Identifier: Apache-2.0. */!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)}

Chrome Cache Entry: 1113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/pbm_match?pbm=7F542745-2D60-41EB-9A96-52B90C82DF34&id=AU1D-0100-001716532054-VWROEXDT-D1CK
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 375x250, components 3
Category:	downloaded
Size (bytes):	27221
Entropy (8bit):	7.964045223771746
Encrypted:	false
SSDEEP:	768:BQlwhamneSowNFif83J2WICHp0WRemn8MNHy4C:BQaRnToeUsweHp0/C8z4C
MD5:	855F8225C793804453C3BBE8B667FBBB
SHA1:	408FC47E8A949E8603CAC5C1745B5DBFA6AEB100
SHA-256:	E7FD91A483A1C0955BEAE846CEBBEACF2937D43F8EDFD88DA222B924CE8EF0BE
SHA-512:	7CAAF7C049837045143F524653371A5B9F7B7EE64A6A00A12C1AA0807B22157421CB63AE31A2B57727E6B8513DBC7BF6B971A114AE002EFAFBF9E613A75F52E4
Malicious:	false
Reputation:	low
URL:	https://ruamupr.com/images/18662/18662-375x250.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?... ...+f...v.9.U.`..i.H..jIx.u.L.Y..E\|..>.....N(.6`nf........nH.g.S...vd...rG.lE...0.p....i......q9L.<g.u......$Vf.l..i.F...#..L{.}.m#jqm.n....l.e..j..v,du...dy.n.Tz......V\.'A%..,....;c.MW.Q._........2Cy.)..b........>....5Y...........E}-...l.b.Az.N0G."..V..0@n1W...'....+.L.t+.....n..u.47...>L@...IS,.

Chrome Cache Entry: 1115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14824, version 1.0
Category:	downloaded
Size (bytes):	14824
Entropy (8bit):	7.984080702126934
Encrypted:	false
SSDEEP:	384:9FhwoaJnaNM4+g4PQPq2ORxaT108SURx1qA3VyI6UvrkBxLA0THRTe:ZKaNMQ4oPG4T1FLXzFyZU92Hs
MD5:	48598BAD30F08E1C3EB3D0E69B420BD5
SHA1:	28C2CF160273C2062F909A875C4B4C0541EE2F84
SHA-256:	CA57B79A870BBF54700730858603A70D79743779C1B059922EC401BFDDC5ADC9
SHA-512:	0033327198BD448927A53EADA9AED51ED4F8DA3C8619EDA3B10948F437213F20270C233F7FD403C8C192A05CAEED6905A02D8C62EC22B3885A6A7D6C018F737C
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
Preview:	wOF2......9...........9..........................n..6....`..b...P.x..d..6.$..D. ..\|..4.gv%.m....B....y......sB.<....t..:S...@..\..w..x...8AMW.S......Z?.$.......mut....X..@.._.._$..Af'g...'.d.x.q&..T1Q_....n..z.._}...#v"......s.s......PiVBEW.2R.....8g....i...J.+Z.&..6trL.15.L.cn.D..!~N..WZ.DcJBB....$.<..T...ue.}...+..j..;:U..S...}.6a.iS.i.LId....K..`u.%.$...H..8<B.......a.`c.11..m=......l.B9;..?...w.Je^i.8p.5......#........v.Y:.b...,....L.....(........;_.IvQ.K.X"J...(.,...O....[D.\...\.........I.k.;+.....b........Z...)......P.u.(@P....pQ..]...e...6F..v.'.....;..hW.=.B,W..G....d... @...........(..9....R..\T.W)tvSz.4NU..rQu...\|....<B!....H.k.)..!.8..@...............qS...9.k.lE.....I..[.S.}....0...}?.U.......@....a$X......'N....!I. 5.e..(....V...].... ....AVUN..:.s.......5.W.H.I......>....d...b.G.h.##.......q.zu.f^...O..s.]H?....(`..O.,.N;oo...G.4.~.N...C.......'.T.,..0W....z+?w.../\..B{.ebz.....OI.."._...~.211S1...... ........s...N..pC.(.

Chrome Cache Entry: 1117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57795
Entropy (8bit):	5.327241380721813
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyY2lnzXyTCm:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyy
MD5:	F528868D3881E65B0386024EC24A43AD
SHA1:	180C87A8269D97BA4C5907AE634DF5342F9A59C6
SHA-256:	D9B93B52A6A127517E69E6028CDA11B0D983BD71E29249C50C3602C33EF6A686
SHA-512:	14475C36D96C3351F64AD6B5EEDF78C7D4F489D2198441BF430FEF59FA8DBEC086F688D1456C13443C489A06060C74A861FFD34373B22DB4BADC4519D9DE5F59
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/154908708357560?v=2.9.156&r=stable&domain=pjnewsletter.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 1118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=1c74b149-6627-4305-8e39-2d356a63f8cd
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12703)
Category:	downloaded
Size (bytes):	12926
Entropy (8bit):	5.337223714868315
Encrypted:	false
SSDEEP:	192:kU0QmVV/ujhil582v+LhgZivS+f5bLJkYeVqH1tTuOVGTr2R2:kU0Q+8zS2NLKTMVtT6n82
MD5:	EC640EF36427B2ECEB04AA7967D5E017
SHA1:	9CFA5782E59FD4AA8B1E88BD0EC8DCF095299FF8
SHA-256:	0677436E90E130577D2EB69342DCF87A91B451D88334BE4FC8A6312AB4F0CA0D
SHA-512:	7BED9CE1FF17E9A139718CC84DE6052C6EBFA938AD461BD7F78AF38978BB92A0EAE6E12298DA0991B7BC3DC24B362757D34C9499EA6BB0833A9413149CC2BFCC
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt.7999370a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.AccountAnalyt"],{68139:(t,e,i)=>{i.d(e,{Z:()=>L});i(6886);var n=i(2784),o=i(25686),s=i(45184),l=i.n(s),r=i(15019),a=i(3655),h=i(90867),d=i(35193),c=i(6149),u=i(63142),p=i(29496),f=i(11839),_=i(15686),g=i(73186),v=i(46737);let w;const b=l().gea7aa3c,m=l().b6462b32,x=t=>function(){if(void 0!==w)return w;const t=document.createElement("template");t.innerHTML='<div dir="rtl" style="width: 1px; height: 1px; position: fixed; top: 0px; left: 0px; overflow: hidden"><div style="width: 2px"><span style="display: inline-block; width: 1px"></span><span style="display: inline-block; width: 1px"></span></div></div>';const e=t.content.firstChild;if(!(e&&e instanceof window.HTMLElement))return w;document.body&&document.body.appendChild(e);const i=e.scrollLeft;return e.remove(),w=0===i,w}()\|\|!t,y=Obje

Chrome Cache Entry: 1120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9960)
Category:	downloaded
Size (bytes):	10112
Entropy (8bit):	5.321632453383709
Encrypted:	false
SSDEEP:	192:a8GVIiVPkdyTlUueWYUYA1cE11l8tRqyKnLmkihqXg64/:RJi+Qi12xmSylRhqXg64/
MD5:	21B944912424318F100DCA5F786B59DA
SHA1:	83F830850E3B7A3F63E3292D6D1960B0A01F02DC
SHA-256:	CC2B4451A42E8F9867938AD6D08E0E2ED94A6BDBEAF1CAEC962E647B70390F94
SHA-512:	99CC727192E225D5AE5B66EA5F91C30C5CE055D07E7A5C4E12576BB187F3E945F660548D851EFA0FE4A68AEFE3D59F1CDF0657D624899412D9AFD5BE79FFE628
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.JobSearch.41ce317a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.JobSearch"],{40312:(e,t,n)=>{n.d(t,{ZP:()=>ge});n(36728);var a,c={fragment:{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"AccountSwitcherDelegateQuery",selections:a=[{alias:null,args:[{kind:"Literal",name:"s",value:"4721"}],concreteType:"Viewer",kind:"LinkedField",name:"viewer_v2",plural:!1,selections:[{alias:"pendingGroups",args:[{kind:"Literal",name:"roles",value:["Admin","Contributor"]},{kind:"Literal",name:"status",value:"Pending"}],concreteType:"DelegationGroup",kind:"LinkedField",name:"list_delegation_groups",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null}],storageKey:'list_delegation_groups(roles:["Admin","Contributor"],status:"Pending")'}],storageKey:'viewer_v2(s:"4721")'}],type:"Query",abstractKey:null},kind:"Request",operation:{argumentDefinitions:[],kind:"Operation",name:"AccountSwitch

Chrome Cache Entry: 1121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 1122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23006)
Category:	downloaded
Size (bytes):	23130
Entropy (8bit):	5.645092213155062
Encrypted:	false
SSDEEP:	384:zdKbmagPZJ6I3stfXgtDtqw5R/djt6nWeNZdLl7EQiHWfQCfUcBuyLSTkfGv5qNu:kbmagPZwI3shXgDtRvG7vZl7EDHWoCfK
MD5:	2D4FC3C0DA814AE3F8206F834C5B1523
SHA1:	F7CCB073D137A0E0C01FE8C75E4F894675441006
SHA-256:	2B92450010E94CFC3D4DF08D6F96847F76C00760E3355A79EC2262AA3085993F
SHA-512:	951357823BCBE3640BA02DC074F30947B8AE47408A2BB83DC7078CE0BBF83C5D46DA9830D2F894617C020A44178269684B08D4F013B46260E28DD94C5A884816
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/ondemand.s.2c515aba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.s"],{71269:(n,t,r)=>{r.r(t),r.d(t,{default:()=>W});r(36728),r(6886),r(75640);!function(n,t){const r=117,W="gM@g",c=69,u="g0UI",e=160,d=74,i="Tt^j",f=63,a="28zr",k=561,S=37,m="H0$Z",C=592,s=373;function Q(n,t,r,W,c){return o(n- -s,W)}function O(n,t,r,W,c){return o(r- -C,t)}function v(n,t,r,W,c){return o(t-70,W)}const q=n();function N(n,t,r,W,c){return o(n- -216,r)}for(;;)try{if(602429===parseInt(Q(r,0,0,"!M9n"))/1(-parseInt(v(0,416,0,W))/2)+parseInt(Q(c,0,0,"5aMT"))/3+parseInt(O(0,u,-e))/4+parseInt(Q(d,0,0,i))/5(parseInt(N(f,0,a))/6)+parseInt(v(0,k,0,"#*d#"))/7+parseInt(Q(-S,0,0,m))/8+-parseInt(Q(-72,0,0,"7i!K"))/9)break;q.push(q.shift())}catch(n){q.push(q.shift())}}(c);const W=()=>{const n=145,t=127,r=126,W=239,c="YNgv",u=239,e=389,d=89,i=253,f=174,a=148,k=337,S=541,m=334,C=263,s=407,Q=254,O=122,v=285,q="H0$Z",N=158,G=16,h=87,g=31,l=22,R=133,y=92,w=57,L="yw3A",b=49,P=

Chrome Cache Entry: 1123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (2336)
Category:	downloaded
Size (bytes):	13091
Entropy (8bit):	4.956682017369544
Encrypted:	false
SSDEEP:	384:HxUvQGpfu5oq2KOuPg1B8eZ+7GD2lBUGEzC3I:HqIGpyoq2KOug1eeZIGilBUGEaI
MD5:	0C6A21BFB3AFBA39B6DD14151D45AC57
SHA1:	E77BD9E5E3AA585FA7A782E3C565C4A135347169
SHA-256:	B01DA2BB51A1907524B64C39A13079241B23B228D3B7455F543E16F0422606F7
SHA-512:	DD836A30B7BFBF3D6BEE2E2B39B723C8FBE024A1A5AD326D62D956692A9664DD7BC640751AEAC1864EE5D1CC4EA8BCF2E6E0C0A8B6CB40CA9F811761EAFB8691
Malicious:	false
Reputation:	low
URL:	https://a.ad.gt/api/v1/u/matches/405?_it=amazon
Preview:	!function (t, u) {. const COOKIE_TTL = 57600; // (16 * 60 * 60);. const CURRENT_SECONDS = Math.round(new Date() / 1000);. . const GDPR_APPLIES = false;. . const NEED_GDPR_FLAGS = ['apn', 'ttd', 'rub', 'smart', 'son', 'index'];. const NEED_HADRON_MATCH = ['index'];. const ID_MATCH_VENDORS = {. "apn": 32, "ttd": 21, "adx": 755, "ado": 565, "pub": 76, "son": 104, "goo": 561, "rub": 52,. "impr": 253, "smart": 45, "ppnt": 81, "unruly": 36, "openx": 69, "ip": 561,. "tapad": 89, "index": 10. }. const AU_1D_KEY = '1d';.. function getCookie(d, key) {. let fkey = "_au_" + key + "=";. let decodedCookie = decodeURIComponent(d.cookie);. let ca = decodedCookie.split(';');. for (let i = 0; i < ca.length; i++) {. let c = ca[i];. while (c.charAt(0) == ' ') {. c = c.substring(1);. }. if (c.indexOf(fkey) == 0) {. return c.substring(fkey.length, c.leng

Chrome Cache Entry: 1124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	227
Entropy (8bit):	4.634284619742124
Encrypted:	false
SSDEEP:	6:Yzb1jDE3t7v4qsDE3t5rbnhmqVx+b1jDE3t7vMY:Yzb1jDEd7GDEdNbnhmqmb1jDEd7Z
MD5:	96B4A153A57E6AFB7E6C3B649040851D
SHA1:	63FC16378C2A2CD322C0F50EBD740CB6B7145883
SHA-256:	B37D8030B08FB21B8FD130C5C779A9DA1DE188AABA3DD7ABB30764A47CEE4C3E
SHA-512:	6E6A2E9D50F7752CC25BAA624CF04CA23245F7D4B18E7D921FBB05E6A336599BDFA01DEC4B7813C10D96F24127588F060B64476CE40FF0DDC6AFA22D63192E36
Malicious:	false
Reputation:	low
URL:	https://id.hadron.ad.gt/api/v1/pbhid?partner_id=239&_it=prebid&t=1&src=id&domain=pjnewsletter.com
Preview:	{"hadronId":"0001yum0ea99jha6clfcgeaikjhlll68igi8eiflgfabackkc2jl","hadronIdv2":"0aus99jha6clfcgeaikjhlll68igi8eiflgf00ede6fifbafaejeg86b6dhkk9cae8e7h9","haloId":"0001yum0ea99jha6clfcgeaikjhlll68igi8eiflgfabackkc2jl","cf":"US"}

Chrome Cache Entry: 1129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65518), with no line terminators
Category:	downloaded
Size (bytes):	136410
Entropy (8bit):	4.939323812925437
Encrypted:	false
SSDEEP:	3072:nGYY2/d6ZnQ7xGYSBYHVKB7Gd5vzrJ8MlZO8:GZ216ZnQdhSu18cx
MD5:	877355977200E7256C91F8C234534CA7
SHA1:	A378FDDCDA0227E2315178E8A7F74F0FA561010D
SHA-256:	7BAC169DFDDA2EB06F39C90C7015EDA36B60C0B602A93A1566E236F8315E3FEA
SHA-512:	087D4FC8FE0199DDBE0B7D12777AE338DF5B4677FF8B3D7922FDCEBB795F1FCA35FD87ADE1C68A8B4EB9A16EE15079AEB3CDCE6D499C6908F3CF901DF9BA55DE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/i18n/emoji-en.9bb55bba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/emoji-en"],{20747:(e,a,c)=>{var i=c(79404)._register("en");i("i506b710","Smileys & people"),i("f457f732","Animals & nature"),i("ce9bf9a4","Food & drink"),i("da1e1fd2","Activity"),i("g280553c","Travel & places"),i("b2f95aa6","Objects"),i("ac91750e","Symbols"),i("j56c4be0","Flags"),i("ef15e12a","Grinning face"),i("g9d0571a","face,grin,happy"),i("db5cfab4","Smiling face with open mouth"),i("aead588c","face,mouth,open,smile,happy"),i("c29cc866","Smiling face with open mouth and smiling eyes"),i("db0d8f24","eye,face,mouth,open,smile,happy"),i("i2f5a850","Grinning face with smiling eyes"),i("af2d51c8","eye,face,grin,smile"),i("f61c01c8","Smiling face with open mouth and tightly-closed eyes"),i("c64c70ce","face,laugh,mouth,open,satisfied,smile"),i("c6db198e","Smiling face with open mouth and cold sweat"),i("c36e8a34","cold,face,open,smile,sweat"),i("g03ce604","Face with tears of j

Chrome Cache Entry: 1130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20398)
Category:	downloaded
Size (bytes):	277636
Entropy (8bit):	5.409421958663421
Encrypted:	false
SSDEEP:	1536:fPHaQFjc/lJ/yfJyAH9OD47YzU4HEBuP2j5y+OuUCbPuy6ITe0xquHcyiTiDtKiv:+WxqpP2j5i/moveVGROh
MD5:	68C894E6F593464F61A34293291E691A
SHA1:	454BFDA32EDAFD10FBC1AD327028D478EBC0B8D9
SHA-256:	D0987D0535DACDDC5DE751DD282888CEE8E360A6C139B408177C0394787CEC0E
SHA-512:	E4EA56287907B6BA18A13160E5720951F1120969EFB2958CF2367FF0B8F62BF8CD2DC8A1BEA84E7283C92F23F3D07810950F91F8E71EEAFB9FAFCD5339CDC06B
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/ScCOyQO1RkJ.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 1131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	113105
Entropy (8bit):	6.093477046559385
Encrypted:	false
SSDEEP:	1536:9p2N7ru9YmXRWsF5dyyB6BUOsdpS75D+Crl1l1wpxVNIsC5xg32GIojZ1M:9QVru9NXF5dyyB64EwC5gIQ3IN
MD5:	B67F719E52532D8B710C57866E49703F
SHA1:	5F0EC734D99A34DFE7A6B0AE598C95339583F628
SHA-256:	69C0A388F715D58C1F1B3845EE450F337ED4DA88E46401CE99DBF0A2203B2569
SHA-512:	B03E4A8711C781C898750D4B9C6461C9748765F48187CDC11A287B1D0A7DAFE7A3F6FD6ED9B33710146F1B7CB8C280E27C7C2DA957F7249FB2623C7A53488DA4
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CaoeEbr%7C&abl=CA&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=3465
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20240522';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height: 100%;width:100%;overflow:hidden;position: absolute;top:0;left:0;align-items: center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><style data-nl="centered-image" data-ns="ns-q8do4" x-phase="assemble">.ns-q8do4-l-centered-image{opacity:.01;position:absolute;top:0;left:0;display:block;width:300px;height:600px;}.ns-q8do4-

Chrome Cache Entry: 1133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3111)
Category:	downloaded
Size (bytes):	222372
Entropy (8bit):	5.5317193222526635
Encrypted:	false
SSDEEP:	6144:9XpaQxT5bUpwyKfrb5Hcimaaz27uCFUyFo34x:SSyKfBHpHaC7uCFUyfx
MD5:	17B7B4CD99E338CA4D145B291DDD2DA0
SHA1:	66E20BBE3490A10F9349A102ACE28134904490F8
SHA-256:	D094F7179F4FF446237AB4FC8C4D4F0D53627162DDC2283F1656C0D049687D4A
SHA-512:	3B90E7FA19E1E1731A056F3376725BA82CB3B54041A064B00B24D17437D9E8CA646D0231688754BDFDE69F90CB739A8C238EE0C4F1EB153D27B709849B51FE86
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20159000, 0x0, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable

Chrome Cache Entry: 1134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://c.mgid.com/pv/?lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532013842654359696&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&site=733245&i=1&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4713
Entropy (8bit):	5.255139639624185
Encrypted:	false
SSDEEP:	96:beBUgc0OmZkiCt/Dwo2oNKfE24VzMDaTpXpDidL7lDBsxenAVDKZksoPhPn0JUzc:be2Z0Otdco2iOE24xfid/AYqsWhf0J5L
MD5:	23B83551C9172B95192795A70E592C08
SHA1:	47C1BF768EC6AEBA4B8C61F836C86A837D2F8993
SHA-256:	14CD9EAFB6FE8B35A16F5AD5FEA8BFF80CFADEB5DC6667E817FC312A7668D9FA
SHA-512:	39B1DFA95F93E86B296EB717ACBCA2FDF31C21DC543F1BB39B41ADB8FDD576C2E1CC33A396521464297B2F25B576ACF7F524CC8C303B3E88E82E553EAFB59FAF
Malicious:	false
Reputation:	low
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag)

Chrome Cache Entry: 1136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=320, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=550], progressive, precision 8, 1024x768, components 3
Category:	downloaded
Size (bytes):	65475
Entropy (8bit):	7.854861664604092
Encrypted:	false
SSDEEP:	1536:FNYzRE2LxYbMaR8ybOHPh4yy/nofh4LLGJ8gTnO+c5te:FNGCHqy6HSyy/oJWLngTnite
MD5:	40B1E7A3B7E6385C8CEC8C5ECC198023
SHA1:	898AA0172B3C3CCBDF6C5F9639387C1CC084BDE5
SHA-256:	8E4162967DCB35EF964B6DF8E368C528A982C52940BCA5CA6B499FBBF0B5B754
SHA-512:	818389DB74030F69F4BBAAE662B86F192207060567C746DE36FB1D44B8677FDA402ABB0BA42E56C25C6C2D3988AF68606A835BF8B3725C7781B7B11E3F79C16F
Malicious:	false
Reputation:	low
URL:	https://digiadsply.com/m129331.jpg
Preview:	......Exif..MM.*...............&...........@...........................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop CS6 (Windows).2023:05:16 20:46:50.............0221...................................................................n...........v.(.....................~...........u.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..:...%_.>.Q.U:.b.....tBM!.\| 7.........M..-..F..U.....&..@.....nW.U<.U....aw$

Chrome Cache Entry: 1137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	5.136245038607991
Encrypted:	false
SSDEEP:	12:2JqxHQUm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2JCfm8uVCxwgxkHEZ1VZflok
MD5:	5D6D7D34E782ADB5406C47D8E759FED7
SHA1:	87E3B89AAF0E9BEA2C20D9A96A176B487FC9D893
SHA-256:	30977862B9A61243AB1F2AC954D5E6DF9967F4E4CC30D0ADC650F9C03B573279
SHA-512:	4905F07ABE79D2F1C82D10EDB2CBEBB66CCB7C9A1B94C03F1A0E2C847F5D669E48523D3E351A89968C0DF5356DB5E270F962E0831AD9A58D4D62F57DF0653D11
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/1ad7261b-91ea-4b6f-b9e9-b83522205b75
Preview:	(function () {try {const accountId = "1ad7261b-91ea-4b6f-b9e9-b83522205b75";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 1138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3355&partner_device_id=LWKAUNHL-D-BFYD
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 1140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	131
Entropy (8bit):	5.262084884511865
Encrypted:	false
SSDEEP:	3:VfTVfX0SRE9SMgDNkmlJHKe+F8GJHgvHJH/MALG/FeHkQrLXf+yIn:BdXdREU2qJscVBa/LQrxI
MD5:	05A145CACBADCA091858BD189A96456F
SHA1:	1454B35A0D8A84BF5165E358D8472252D4F6C090
SHA-256:	3D41B5ECCB6D46DE2253C6C225A6AEF2009F266FC4180385B9D1AD17C19E7329
SHA-512:	4D18312FFCA910EB8D7AFAD16655EFABEACD7554B6CA9597BED0398C9874F9BC8FA084AA136292B35CF803622A6C66A8F24C932020F7B6B8B7743E5EF58212A8
Malicious:	false
Reputation:	low
URL:	https://ad.crwdcntrl.net/5/c=3722/pe=y/callback=g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback?41947963
Preview:	g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback({"Profile": {"tpid":"","pid":"","Audiences": {"Audience":[]}}});

Chrome Cache Entry: 1141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56077), with no line terminators
Category:	downloaded
Size (bytes):	56077
Entropy (8bit):	5.3966037959270485
Encrypted:	false
SSDEEP:	768:tvB5S9KiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4O:7O
MD5:	4F8D7ECCB8B77BFF110A91871EBADCC0
SHA1:	74E5D00ECB54BFCFC2CF0D8D95441CD9236C048F
SHA-256:	2DDD96839C08E8CBDD3B1F56569B6D4770021731534B98DD17DEC8526BB0D151
SHA-512:	FAF100313010634C21A7EFA0B0E8D38D532EF52497B268AADF1AAC03DA9B5D14A45CBC1CCECC508A989B28D1DEC8BAF97270C433BE5AE85CE454267B19430DF4
Malicious:	false
Reputation:	low
URL:	https://cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&_it=amazon&partner_id=405
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 1143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://a.mgid.com/1x1.gif?id=466023&type=c&tg=a1b360f4e8ddac07859c62c6b627ddd8&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=0bdb5
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F170737076%2C22652678936%2C187271864%2FVideo%2Faniview.com%2Faniview.pjnewsletter.com&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&env=instream&ad_type=audio_video&correlator=2850479875721321&tfcd=0&npa=0&gdfp_req=1&output=xml_vast4&sz=640x480&max_ad_duration=60000&unviewed_position_start=1&vpa=auto&vpos=preroll&cust_params=posB%3D2.1&plcmt=2&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=2243379012&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44776495%2C44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dlt=1716532081489&idt=7731&dt=1716532089498&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=1129108675220747&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td8_tt0_pd8_la8000_er1396.182.1546.482_vi0.0.907.1263_vp0_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x720, components 3
Category:	downloaded
Size (bytes):	31347
Entropy (8bit):	7.968294002281451
Encrypted:	false
SSDEEP:	768:HkGsK9B0+3vgwXXSmtdSAoQ2FV9MMro/OOsqHZOVa+cuO:Hk8Owymp2n0jsqHZKcuO
MD5:	43100BEFE6384C94AB60AF1645A1441A
SHA1:	29E24201F4D14FDFE150F71450E9103EB9E4CE44
SHA-256:	3B51065A3082C38D16DBBAE6DCEFDB3A70A4D157B8A1FA8A2D65A019FE2CB2AE
SHA-512:	1488A375BA4873108D31807467A1EFB67F3222B6F006F26103FFC9BD2A171D2109EF3DE191A586C614008AF58E7F4E59DD747282D61B464284DD16B02690E952
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/daca_images/simgad/14411982658343255164?w=360&h=720&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. %%(((..-1,&0"'(&...........& ..'''&&&'&&&&&&'&&&&&&&&&&&&'&&&&&&&&&''&&&&&&&&&&&&........h.."........................................V.........................!..1AQ"aq.2......#BRbr....ST.$3.....4t...5Cds......%6Dcu...................................6........................!1A..Q"a....2Rq...#...3B..$4............?....%.;...p.l..H.N..@%..-..Br,.jT.E.....H.m..9...$.zK!.r.u.d.r.!="..H....P..@...(.!D....H...P.%..),....$.y..e.Y?K!#l.'Y%..Bu...m.d...L2...L.'..................y2l9.......S... .<..t.K..>....~.....F./".:.$d........_....c.w.=..x.A.y-......%.i ..F.t....qk...Y..,...].x.Id.B....@.H....J....B......,....HBr..1.PP..*..d.P...NB...T ...T(.Y%....,.<....!9.I6.l..l...x.;.r.f.^._.;.r.Z7.\|..(..$l..W._...uG....k...P...k...u.d.....Mq....4....g&.I..k.=.sS<....R.@n......C..../...{.p..H%.....'..iB..\l..K>...p.O....g.n.i.aN...x?....p&.G.G.0h.........K'!..!9".,.8...H...."T ."T ..B..%B.4..9.@.."..%B

Chrome Cache Entry: 1147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073061&val=8792414088104974232&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	21306
Entropy (8bit):	7.984253057026201
Encrypted:	false
SSDEEP:	384:KYo+7sitixxLBqKOxKsD1BPe8zZXUMxqSoDeZ54AR7eH7oaNNa6n:KYoysitiHLBq8WTtXnz9K47iNb
MD5:	C1164AB65FF7E42ADB16975E59216B06
SHA1:	AC7204EFFB50D0B350B1E362778460515F113ECC
SHA-256:	D7928D8F5536D503EB37C541B5CE813941694B71B0EB550250C7E4CBCB1BABBB
SHA-512:	1F84A9D9D51AC92E8FB66B54D103986E5C8A1CA03F52A7D8CDF21B77EB9F466568B33821530E80366CE95900B20816E14A767B73043A0019DE4A2F1A4FFD1509
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j...S.IDATx^....0..A......:.J..&..Ep.:...'...i;..Y....B................* T.* T@. T@. T@..PA..P...P....y.i.M...}.l.a}...cV..b.....y..bZ.S....]..u......>.W.......4..q.G.F..yH.QY`..Pw..\. .P[.<\|...:.N....u..V&...v.O...H....9.\..p...}.....k.T.D...-...V....U}..GcI......yg..^....B...S..oJ.y..L5....&.....}Ny..?3....12pg'...N....#.....0Y./%6...`.q..TH.&"~..'.y..Y..Dl...............ax`].u.U...."c..........)...}kH......Q.g.6.Z..L..RI..bf[.P...S..DsA..H......Yo......`......q..].i..............(..*..\|f.-S.....$mbx\.<Z...@..Q@.].L.&Z..}=uf5.2.Tl.q.h.W5.D.o%k\.z....q.......+..M.u?.`S.v..T.T...@a...n...-H.+.....O;.+.Hk1...9.x.WJ..Q...e.(L..3e.....T...-3^.H....v........rf...`.x..R+...$....o.<.y..t...'7o.ug.......o.z.w.../?\.4...\....@.8...9.8.(..3.;.3;;..]^.,.......H.....R-Qk#b...j0%..hJcc.XC.\|..Z[IK]TL.hi.Z.m}..kP.V..?w..o..O...r....e..?..{..w3...AC@.....~............df...}......9.......T_.'5..NJ.$.'

Chrome Cache Entry: 1149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2302
Entropy (8bit):	4.423010971502124
Encrypted:	false
SSDEEP:	48:CS1Yrg9pEhOrRfqG7jRRRfrHnSUL6LP/e6WQJJmOK83XcuBjRQN:HD9pxoG7jRRhd6L3WuJ1K83MSjGN
MD5:	617C205137825561208EF7C1A2D8F319
SHA1:	E7604CBFE99A485C9CDF01DA77F47D80CBD470ED
SHA-256:	70D5C4DE881E718D0B7638959680BA86722D44EECBE4058D20DD77B8D0D97155
SHA-512:	BD9C5AF3C4CA00C3DAF9C31E446F2855A45AF35D41CC8299FB1466D8204E84D3B5DADC4039CDCA344232B5EC45F2C8B79B39DBF89B4AB351AB091B77578A365B
Malicious:	false
Reputation:	low
URL:	https://cdn.mgid.com/images/mgid/mgid_ua.svg
Preview:	<svg width="70" height="37" viewBox="0 0 70 37" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M44.9805 4.77588L41.2695 6.32612L50.8463 11.8116L54.0385 9.98311L44.9805 4.77588Z" fill="#FF0000"/>.<path d="M47.6543 9.983L50.8465 11.8115L70 0.800781L47.6543 9.983Z" fill="#FF6D70"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M42.3909 36C44.0172 34.7304 45.2628 32.9994 45.9263 31H70V36H42.3909Z" fill="#FFD801"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M29.3285 36C27.8426 34.8284 26.7156 33.1941 25.5708 31L0 31V36H29.3285Z" fill="#048AFF"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M66.8182 5.85149V12.1707C65.3466 10.9632 63.4773 10.2387 61.4489 10.2387C56.7159 10.2387 52.8978 14.1027 52.8978 18.8924C52.8978 23.6821 56.7159 27.5461 61.4489 27.5461C63.4773 27.5461 65.3466 26.8216 66.8182 25.6141V27.3449H70V4L66.8182 5.85149ZM61.4489 24.3261C58.4659 24.3261 56.0796 21.9111 56.0796 18.8924C56.0796 15.8737 58.4659 13.4587 61.4489 13.4587C64.4318 13.4587 66.8182 15

Chrome Cache Entry: 1150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	dropped
Size (bytes):	37946
Entropy (8bit):	7.976752982706769
Encrypted:	false
SSDEEP:	768:YJ7kVDM+lwIJjdsy3/2wbYS86F/RTD76IS15lecXvuxEvv/5mvZCRr:u7k5M+KqdsCuqvS15llM0/5mvQ5
MD5:	9F09B089C281F153DD8ECF0E7B211FDA
SHA1:	8DF87C83089946A94569F18321048551E8291961
SHA-256:	9F36BB2791C2335F8412ED87D0B9F819948F9F62AFECC67ED04B888B96A20AD9
SHA-512:	F7CF95DF4993895B7E1461810EA3A60307AFAF952A13CF163D9865C906DA79EEB0249E85617953D30C0EEE7A80CF8F45BE37C6B8786C761384C28A1FF670CA1B
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress.................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr..............".................................................H.f..a."A.6......R.n.K35.Z.... A)A."I%.$.HE<"v.B ....4r.x:...iI6.(....jR...Z.((.$...$.A.JL.BP..H.-..'_(....[..R....N+;....rs...W2.!.d.......:.L.....H.N..WXD.BR.c.$......;.5.[..S.].....LvVrf..%t8..N.K7.Y..d..t......zn..-T..0..1..0@......;.3P[..qo[.3..iQ.j..:,eLy.DZ....W+.fd......1IP..B...#I....%..V.F.8..Z..^.4.8u.[.Z[....2...x. %...x.8..J...._RI1#..lp.z."5...'...r.f..Z....e......)...4X.....!.E.....%.`...}.y..4.<...Q.p.....,.u7.f....K5l...LE..<..1..5.i...-...v.<...Q....G[4._5...............]Ik.5.F`..P.!..-Y..f0...i..%..\.p...f....<.rK.-..1j.t4..........enLP. Fj...6..y..kqZ.>v.#.B.I.(m..h.......^....g:T.6..T..W..6..- ....`Z.).!..no+....P..hH...]..d.CI7.hB...L.f..w9.@dN.a..a...;....3 ..0;+.J..e.f.Z..'..BP..H....v.h...(

Chrome Cache Entry: 1151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23239)
Category:	downloaded
Size (bytes):	23462
Entropy (8bit):	5.399166406674043
Encrypted:	false
SSDEEP:	384:gpHWrBprwVyl8uYjEB/0tCp0oM/+bz2MVOgBrSP+OJgKfviRfQ:g9OprwVyl8uYwBM7oM/+QgBrSP+OJDfp
MD5:	BD0E3E7CFA43C413D3BC64F02F1D1DF0
SHA1:	09053FEE8D97A4A6F64D5475F60079C542950E59
SHA-256:	F541741AC7F0A3D1CB7336F753159C6378ED733769BC5A5A5C2DFCF4D0E015BA
SHA-512:	F311E87AD2F9EF94850694CA9BACC4170BCA53701135819C327FEBC71650976BFB79D25B01BF0C13C3F4E5B9A87D260570C1716EAC38518D54EC010BAE71061A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE.276035ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.LiveE"],{2847:(e,o,t)=>{t.d(o,{C:()=>O});t(36728);var n=t(2784),l=t(84292),i=t(98954),s=t(45184),r=t.n(s),a=t(63140),c=t(19565),d=t(67619),u=t(99628),h=t(17772),m=t(90112),p=t(15579),b=t(76275),f=t(76687),w=t(63143),g=t(66298),C=t(23335),_=t(92160),y=t(67935),F=t(99629),S=t(16657);const v=(e,o)=>o.user\|\|S.ZP.select(e,o.userId),k=(0,_.Z)().propsFromState((()=>({isLoggedIn:y.Qb,user:v}))).propsFromActions((()=>({addToast:F.fz,cancelPendingFollow:S.ZP.cancelPendingFollow,createLocalApiErrorHandler:(0,C.zr)("FOLLOW_USER_BUTTON"),fetchOneUserIfNeeded:S.ZP.fetchOneIfNeeded,follow:S.ZP.follow,block:S.ZP.block,unblock:S.ZP.unblock,unfollow:S.ZP.unfollow}))).withAnalytics(),T=e=>`${e}-follow`,B=e=>`${e}-unfollow`,x=e=>`${e}-block`,L=e=>`${e}-unblock`,E=e=>`${e}-cancel`,H=e=>`${e}-subsc

Chrome Cache Entry: 1152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29185)
Category:	downloaded
Size (bytes):	51703
Entropy (8bit):	5.662134467888674
Encrypted:	false
SSDEEP:	768:ZbSP0prf6u4Rs7CQlfqpcbEOlurxt63xREugE2Nl7kz4S4oMF35iWpBMom45NyXl:Z7grGMPFpQLoyb9/
MD5:	932A48CE6D39391FC01C947E1296C999
SHA1:	ECCCC1C1F06FC304F22CA4343AA83C2C9F1E34F2
SHA-256:	BBB74F415AC50ED5F6EFEA66050A25C4A82A0DF8C5F88092326437C781F85185
SHA-512:	2643255C88BB8757D9E3B69D4DEE7ED25691D97D5C2C15B2AD0B106D65FA25C5F63E3A10EE7E7A94799BCBCB77E449456FE6D06B35F26F6B01A2E28B178A6AD0
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc.3461f12a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisAd~bundle.NotMyAc"],{88335:(e,t,r)=>{"use strict";r.d(t,{$T:()=>B,$b:()=>G,AA:()=>A,Ae:()=>Y,CE:()=>W,C_:()=>L,D7:()=>P,Dk:()=>V,GN:()=>J,Hm:()=>U,IN:()=>H,Iq:()=>E,J$:()=>N,QS:()=>T,R8:()=>w,RA:()=>z,TT:()=>M,Ti:()=>R,WZ:()=>C,XD:()=>D,Xb:()=>I,YI:()=>j,ZF:()=>k,ZJ:()=>b,__:()=>S,aD:()=>y,bc:()=>m,h0:()=>O,ho:()=>q,lS:()=>x,q0:()=>Q,qE:()=>v,qJ:()=>F,vY:()=>Z});var n=r(446),i=r(52268),o=r(29219),a=r(9525),s=r(73624),l=r(4077),u=r(16866),c=r(89772),f=r(2669),h=r(92748),d=r(84332),p=r(6658),_=r(1815),g=r(58955);const E=Object.freeze({Abort:"abort",ChromelessWeb:"chromeless_web_link",Deeplink:"deep_link",DeeplinkAndAbort:"deep_link_and_abort",DeeplinkInPlace:"deep_link_in_place",Finish:"finish",Subtask:"subtask",Task:"task",Web:"web_link",WeblinkAndAbort:"web_link_and_abort"}),m=Object.freeze({Allow:"al

Chrome Cache Entry: 1153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.5251270918749356
Encrypted:	false
SSDEEP:	3:n9m6QiFL4:nVm
MD5:	B205296F7C49C67BAF5B78E8163061A7
SHA1:	828DED5C881601F44CE02CCB9E8B98D214B5E9AA
SHA-256:	281A6CECFF9B473286243BDC58329C1D8141B979E8985EA968D7D975F3A50E05
SHA-512:	ABBB243E84448F153F337C61919C36F68F2503F14F7301A903ED76B5A321C60C09C5E5D1174E77EBE3199A1F7A900A0668555B729F008547DD26A00937FF7B5B
Malicious:	false
Reputation:	low
Preview:	partner parameter must not be null

Chrome Cache Entry: 1154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2025)
Category:	downloaded
Size (bytes):	2252
Entropy (8bit):	5.487321482016616
Encrypted:	false
SSDEEP:	48:iI6XHlx03qVLAyGhOGoS3hV0GpSGJ4WyvOzJ5OWOLL0blKJjZrbsoupTWmQum:mX43qVLAyQOkhi+neHvob0gbliZrbapQ
MD5:	05410F948F06BAFE8E125DB0767A54C7
SHA1:	85BFF3848C245A2358096CB9BCF70285764CF992
SHA-256:	4A27DC469AA20282348378FB5DFB0BCA6533F1476FFC3B2C1798DBF0AF4E6391
SHA-512:	B0E2BC40405FD2D8B0BF5AB0C9DFCB8D05A123845839DAEC8B9A77C58DC6B5866F8BB38A72D0FE6A98E2812D4D5EF61B67F31907C6913895E1D2236A4508B8B9
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.Setti.853472ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.Setti"],{37378:(e,t,s)=>{s.d(t,{V:()=>n,n:()=>o});var r=s(27666);const o=750,n={scoper:[{type:"dmUserSearch",regexp:/^[@.]?(.)\|^$/,srcInputs:["compose_message"],scope:{result_type:"users",count:20}},{type:"username",regexp:/^[@.](\w{1,20})/,srcInputs:["compose"],scope:{result_type:"users",count:20}},{type:"hashtag",regexp:r.Z,srcInputs:["compose"],scope:{result_type:"topics",count:20}},{type:"topic",regexp:/(.+)/,srcInputs:["search_box"],scope:{result_type:"all"}},{type:"ttt",regexp:/(.+)/,srcInputs:["welcome_flow"],scope:{count:10,result_type:"topics,ttt"}}],WordBoundary:/[!'%&'()+,\\\-./:;<=>?[\]^{\|}~\s]\|$/,WordEnd:/[^!'%&'()*+,\\\-./:;<=>?[\]^{\|}~\s]+$/}},32941:(e,t,s)=>{s.d(t,{A1:()=>a,D5:()=>h,bR:()=>c,kE:()=>u,sY:()=>d,si:()=>p,xX:()=>i});s(36728),s(6886);var r=s(7

Chrome Cache Entry: 1155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4030), with no line terminators
Category:	downloaded
Size (bytes):	4030
Entropy (8bit):	5.352742314102444
Encrypted:	false
SSDEEP:	96:E5ytwNCc2B2d4znU4Vujagf1tJu2xtlsEnRS7ZYcg6:FtwNV2+6Of1SgtFAZ86
MD5:	A3BC57087B13351BBD053234997935EB
SHA1:	D2715A1F8536EAD37B46E8DECBCA659E95E43B7C
SHA-256:	950170202D9F62B8875A6FBEFB45881B870AD7605D2C02A242A1DBAA71D642FC
SHA-512:	01FC7DC71388C83AF07230D972FA977B5A30CF0DAB06020919D19A904ABA0DCB5BC17F9CB9AAC2DAAF6CDE158274CEFAD4F2AD66A0086D1BD6ABE53133EE8FAE
Malicious:	false
Reputation:	low
URL:	https://cdn.engine.4dsply.com/Scripts/MediaScripts/push.js?v=4
Preview:	g367CB268B1094004A3689751E7AC568F.Modules.WebPushNotification=function(n,t){var i={Loader:g367CB268B1094004A3689751E7AC568F,Media:n,TopWindow:t,StorageName:"InfSWUpdate",InitInPagePush:function(){i.InitInPagePush=function(){};i.Media.PlacementIncludeInPagePush&&i.Media.Settings.IncludeInPagePush&&i.Loader.Script.Load(i.Loader.CDNHost+"/Scripts/ippnotice.js?v="+btoa(navigator.userAgent),!1,function(){var t=i.Loader.FetchMediaUrl(n);i.Loader.AjaxLoad(t,function(n){var t=JSON.parse(n.responseText),r=new i.Loader.Notice;r.show(t.TitleText,t.HeaderText,t.ImageFileUrl,t.IconFileUrl,t.ClickUrl,t.CallToActionButtonEnabled,t.CallToActionButtonText,1e3,!1,i.Media.ZoneId,i.Media.Settings,i.Loader.AdTransparency.GetUrl(i.Media.RedirectUrl))},{Accept:"application/json"})})},Init:function(){if(i.Media.Settings.RunOnlyInPagePush)i.InitInPagePush();else if(i.Loader.PushServiceUrl=this.Loader.InfinityHost+"/push.engine",i.TopWindow.navigator.serviceWorker){if(!i.Loader.VapidPublicKey){i.ConsoleLog("VAP

Chrome Cache Entry: 1156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44660, version 1.0
Category:	downloaded
Size (bytes):	44660
Entropy (8bit):	7.99540254121323
Encrypted:	true
SSDEEP:	768:hgJ8wY+W8lE34E/C6z3sbYqg0OvVQ8J4WSrQek4cXzrrhDn:NdQlE34E/C6sbTg0yV54drQ2cXz/hDn
MD5:	AF0FD092A950CD858A160490AE22D16C
SHA1:	4291C81C52514932F517529F3D3C24F4A40609EC
SHA-256:	858B70C0B816C651B12A0849E17C83EAE8A76AADE2FDF02E98848D5D25868C82
SHA-512:	64123D00581D6D45C1FE0390911E20FB732A9875EEBC667C45CA4F84E5768657BDB1FA9A307C150D6E5644A7E8E5CD274C58F879FE059B8C6E1DC73E2A039B35
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/Chirp-Regular.80fda27a.woff2
Preview:	wOF2.......t..........................................d..x.`..v.D.......8..W.6.$..t..<.. ..r. ..&.$..T[.\|...q.n_...IU....o...9..A....T5...q.J@w..J.+.....E.....n...U....ww. .....s..@Yy.%....,.@d..ptN1.,...f+.VZ ..S.L.e3.=.,J....."..h....Vs....S..0.N04...%.k_......Z....7.$o(e.m6.......$..#...4LaX..G3...R.6mn.jW$..dPX..Ntg.\|-..7{...^._>.a.){.M..bU.5...5&5... .....t..X[......j;_M%......;y.......b..k)%)..R...~.P........FRRa.m.`....R.W.......bY....Q.......>.E..$.).I..e&............=......?@&..A.....%.\|.A0W.lq9......y..s.{I......"b..k...FDD..q...q.F.P..-n.@.....+ "......\|..#.>...8.....l....D....N06ka..9]....W."us.....^Z..vIH..\|@bM@.QJ,...!..c...."OH0..... ..>v./5.?...m.....T;k....."..$..!Q.;...D.l.....R.J...n.2..SW.[..[m.......0....?...k......EkP.....J...^....'..qc.....<.).a...x.....I.....u..s....4.......+...q.J.M.Z.. . ...]..N..v/...>u......"............2..!.C6..$.."K...,....V....$ni..P.:....y(k..?M..@...X...@.......-.]..*..k..)..Z... .>

Chrome Cache Entry: 1157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/c/231/1242/0/9.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=3744357513157101&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=3558595458&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44776494%2C44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dt=1716532112720&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=1846820105132762&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td32_tt24_pd32_la32000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 1160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://a.mgid.com/1x1.gif?id=783385&type=c&tg=f8602a8c26ce5bee805634dcb1adaca2&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=0bc4c
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1091), with no line terminators
Category:	downloaded
Size (bytes):	1091
Entropy (8bit):	5.577633909351788
Encrypted:	false
SSDEEP:	24:CNFicy+1JTcyIPMqCcyIPMo1MTaM/USKCvQeHDkomlg:CNly+uy/qfy/oqTjTKyQecq
MD5:	7A6809787C3F32B4A010B30D6796C4FD
SHA1:	76CF4540934AA38097AFEC938FF6EE925F9BF92E
SHA-256:	B897B3EF6D7EBFD33E38C020957238EE4B2EF43D642F51E31CC84CB0F26A1591
SHA-512:	F734C540BBDEC932531759E582A32D49531D133EB4BD239E32ADDFE3398E66E37B58E1971209A62823B07C5AB261DEBC0F912700746260FC322A3B4BD7DBB118
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20782884&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&pig

Chrome Cache Entry: 1162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1581
Entropy (8bit):	6.0759988060332075
Encrypted:	false
SSDEEP:	48:YPaUHPRr8Q0oh8QiuOCIom15arRxZaJQbB0:iPRrrfhfiuW5uYJQbG
MD5:	1AE2374D0DFEA872A622FE1B5C2FEDBC
SHA1:	4DB11FCC164901C03B1495B49ADC4055CB630E52
SHA-256:	877879183254804522FA0099B427432711D4D1AF1540225023B3A4EAFB71E08D
SHA-512:	B2EE0E94DE3E83B997C0E9A1D1029ABFD9A4FA7BA45061662FBD7F91593EB32B6FC7AB0AE1F1B3B61545D11F1C71C620820FE9E08B7FD92B2418F5DCFF3F859B
Malicious:	false
Reputation:	low
URL:	https://engine.4dsply.com/mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ftp9dKTijyUY1DoM0PXjOb7V8-PAm5K2yYFfRrH8tmMpVo-oX3bhntyeY00SFTAlPNOY8KxP6wdjHHZrwEzcZJ1BhsgJrIXyBhQ2cxeD_xgJf8g2OtgqfML26TQEIjZcDeUsig_m9fjiLGSqWrRzq4SOPgBdijpliEbSbjNu4rj0gi0crzlqMs5wzRELNRksHq6m1wM12ykDyySoSp7SQPGG25cjGvUPMzAyNeyc8i8kDlNMcuuyAiIfAt3vCDd_0PiNybdaHwey9X2brLpi7YviOrfkKhNqrQi3898KZLBu0&PassBackUrl=&res=1280x1024&dcid=1_ctx_19447f0d-6c1d-469b-90ed-716e90133242&cu=&kw=&mw=800&mh=600
Preview:	{"ClickUrl":"https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.360972254239475&ZoneId=84396&v=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ftp9dKTijyUY1DoM

Chrome Cache Entry: 1163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47410), with no line terminators
Category:	downloaded
Size (bytes):	47410
Entropy (8bit):	6.171908231899676
Encrypted:	false
SSDEEP:	768:PABuwaU+Z6tVMXEBtsaZa2ujQS1to5blN1fThkFJdNbTPvV:POuS+Za6XEMaQtjfEhfTmFpTPt
MD5:	819E0E25E068159BA237BFB83C8A50EA
SHA1:	2ECE87233AFF0591B8ABDB039C9531ADF4C654A2
SHA-256:	222B058DE12D463EB24B8049C8FC38923769E22D6918F60D6E85E604820E4BE9
SHA-512:	BB22D83F734DCB36D66086233AF7C1377AA431569AB1291A85A7562830F3E2979E51E0D25C90ED1D3ED33292FEF3F4A5F9C4578C9E562C8274A44D72A455BEA5
Malicious:	false
Reputation:	low
URL:	https://cdn.engine.4dsply.com/Scripts/ippnotice.js?v=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2&80249607
Preview:	g367CB268B1094004A3689751E7AC568F.Notice=function(){function f(e){n&&(n.removeEventListener("click",f),n.removeEventListener("animationend",p),n.removeEventListener("animationend",f),n.removeEventListener("mouseover",v),n.removeEventListener("mouseout",y),rt(),i.body.removeChild(n),i.body.removeChild(r),u.EventObject&&u.EventObject.target.classList.contains("close-button-"+t)?(w(u.EventObject),w(e)):e.target.classList.contains("close-button-"+t)&&w(e),n=null,r=null)}function it(){n&&(s.add(n," hide-"+t),n.addEventListener("animationend",f),n.removeEventListener("mouseover",v),n.removeEventListener("mouseout",y),rt())}function rt(){n.removeEventListener("touchstart",ft);i.body.removeEventListener("touchmove",b);i.body.removeEventListener("touchend",k);n.removeEventListener("transitionend",f)}function ut(){clearTimeout(h.hideTimeoutId);h.hideTimeoutId=setTimeout(it,g)}function v(){clearTimeout(h.hideTimeoutId)}function y(){ut()}function p(){n.removeEventListener("animationend",p);n.addEv

Chrome Cache Entry: 1164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 1165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/interaction/?ai=CnAoaLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKgCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohX7wNa7gSedVBxwiJS2UtAzdEoTfvnhXOrm9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOljQnbGI1KWGA7EJdRSug8aIt4mACgGYCwHICwGADAHaDBEKCxCw96fY7_C8oOsBEgIBA6oNAlVTyA0BuBOcG9gTDdAVAZgWAfgWAYAXAbIYCRICi08YLiIBAOgYAQ&sigh=PF0qigZl3Ls&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864g&label=videoplayfailed400
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6950)
Category:	downloaded
Size (bytes):	7078
Entropy (8bit):	5.47085249406347
Encrypted:	false
SSDEEP:	192:6SUOuvbh+RyoniiBSXfNgBkL6zsErQrfmqz9oG9acNllAG:6SURI0iBSXbviQrfl9tZyG
MD5:	78E4108A9F8040C23C18F82E9049681B
SHA1:	DC17F5FF9EA957D99A9CD05A4D25F0099D6BA154
SHA-256:	9C89B013B8B27BB9ACF782A761CF02AC2995B2C17DF911F036941DCA917E5787
SHA-512:	66913D4A9BBF290FC6E691540129D8A1D117418DD7E53AEAEF473F4BC395DFE3D5712F05008481F19D9D903E5EF7E7D5D5C043F790C36D116EC0D9E2398FBB11
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.SideNav.175df38a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.SideNav","loader.directMessagesData"],{4361:(e,t,a)=>{a.r(t),a.d(t,{default:()=>B});var n=a(2784),r=a(25686),l=a(54044),o=a(73186),i=a(40312),s=a(52577),c=(a(6886),a(45184)),d=a.n(c),m=a(47636),p=a(29496),h=a(11731),g=a(82392);const u=({disabled:e,icon:t,isExpanded:a,label:r,link:l,onPress:o,testID:i})=>n.createElement(p.ZP,{"aria-label":r,disabled:e,hoverLabel:{label:r},icon:a?void 0:t,link:l,onPress:o,size:"xLarge",testID:i,type:"brandFilled"},a?n.createElement(h.Z,{animateMount:!0,duration:"long",show:!0,type:"fade"},n.createElement(g.ZP,null,r)):null);var v=a(60673);const w=d().ee69d769({verb:""});class b extends n.Component{constructor(...e){super(...e),this._handlePress=e=>{const{analytics:t}=this.props;t.scribe({component:"new_tweet_button",action:"click"})}}render(){const{composeOptions:e,isExpanded:t,testID:a}=this.props;return n.createElement(u,{icon:E,isExpande

Chrome Cache Entry: 1167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	316
Entropy (8bit):	5.669131183738149
Encrypted:	false
SSDEEP:	3:YTtA/91IsTy0MGDYAL09jzP8xhzN07IsTy0MGDYAL09jzP8xhzNGzIsTy0MGDYAi:Y07y+sA+z0F0Vy+sA+z0FQy+sA+z0Wn
MD5:	5F79393B597B583F551551714B3E03DB
SHA1:	1C470EDFEA187238B81C9C18D04D94C41D837666
SHA-256:	732075125293A10E422C620BBFBCDC5A1D76B65462EE25BFC06F7BC4F9AFC05D
SHA-512:	AA550A57120F5A4F327D23F71C46AAE2BDD7433C7183578F0562DCB8E2B343E064621E9D2337AAE099CA1C32D0199C7932874557E580AD3E3BE86CD1EF2B89FF
Malicious:	false
Reputation:	low
Preview:	{"vmuid": "g6oKG-gahKMzR1JvvYjCETCT4bp5JrFGlNX9QXYC5WNb0LXkxgNBBGrXFcTa13XHVZCi6sL2-WYQFB9xMBMSqw", "connectid": "g6oKG-gahKMzR1JvvYjCETCT4bp5JrFGlNX9QXYC5WNb0LXkxgNBBGrXFcTa13XHVZCi6sL2-WYQFB9xMBMSqw", "connectId": "g6oKG-gahKMzR1JvvYjCETCT4bp5JrFGlNX9QXYC5WNb0LXkxgNBBGrXFcTa13XHVZCi6sL2-WYQFB9xMBMSqw", "ttl": 24}

Chrome Cache Entry: 1168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	177832
Entropy (8bit):	5.319836453049712
Encrypted:	false
SSDEEP:	1536:XZzmP8vyH9/Yi9QxB9mdEMfQ9ZJ5s/P6WrzWo2x36+mQRiS8J7R3azAzVzZ:pzmPXQAz9QdvzAzVzZ
MD5:	D57FE6FD61BC5DFEEF7B0D07DA5D8C0D
SHA1:	B432FC08820D60F1B30324236EFE6FF6C7C0A287
SHA-256:	3987BB590B5D9D61F8246255BF1CBB489E76FE59D56F6278ACC07E56F6BD4439
SHA-512:	4FBE606097362BB0F347724B37A0CEFA9BAA048F0D28FD94098796E9583FF36292B284BDBCB64D7AFC5CD416B82DEE973D0B5C7859B15A0F1EB958ADBA217EFC
Malicious:	false
Reputation:	low
URL:	https://api.x.com/1.1/hashflags.json
Preview:	[{"hashtag":"100T","starting_timestamp_ms":1705737600000,"ending_timestamp_ms":1735718400000,"asset_url":"https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png","is_hashfetti_enabled":false},{"hashtag":"100WIN","starting_timestamp_ms":1705737600000,"ending_timestamp_ms":1735718400000,"asset_url":"https://abs.twimg.com/hashflags/100ThievesEmoji2024/100ThievesEmoji2024.png","is_hashfetti_enabled":false},{"hashtag":"100.......","starting_timestamp_ms":1713452400000,"ending_timestamp_ms":1721314740000,"asset_url":"https://abs.twimg.com/hashflags/BF-10920_NetflixJP_18ce54ua4fy_Hashmoj_v2/BF-10920_NetflixJP_18ce54ua4fy_Hashmoj_v2.png","is_hashfetti_enabled":false},{"hashtag":"2024EidTrend","starting_timestamp_ms":1715961600000,"ending_timestamp_ms":1721145540000,"asset_url":"https://abs.twimg.com/hashflags/BF-11259_2024_SHEIN_Eid_Campaign_Hashmoji/BF-11259_2024_SHEIN_Eid_Campaign_Hashmoji.png","is_hashfetti_enabled":false},{"hashtag":"3.28.....

Chrome Cache Entry: 1169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.813607894428283
Encrypted:	false
SSDEEP:	3:OXMLQHJ/A6MBQCMDRDSr1XTDHJzDASO5n:OXFJHMBQpRDSr1DbGln
MD5:	9A041939D0821F70E69A74BB68FE765F
SHA1:	CCB7FA51258A3E2B1ADBA36037CFA6339772087B
SHA-256:	5424561FA3A1AB13A3EAC4166D498EE96453D876DD3C519088243747978952F1
SHA-512:	752A0E916B152BB805109141AF40CCD0AFFA519FFA9F9B9B6F69799BCA3CD0C5A934A4D16CF447A0491B8AB8B1FF1C691619CDD96953597FD47805BC5CAF8A50
Malicious:	false
Reputation:	low
URL:	https://id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=405&sync=0&domain=pjnewsletter.com&url=https://pjnewsletter.com/trump-reveals-amazing-2024/
Preview:	{. "addr": "8.46.123.175",. "base_id": "da68ea0929191655133f70d9fd73526f",. "domain": "pjnewsletter.com".}

Chrome Cache Entry: 1170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74049
Entropy (8bit):	5.366002698699918
Encrypted:	false
SSDEEP:	1536:6lPzfaRQHclDgVDVOm+/Ro1zHw93wnhHxf:ifaRQHcpgVDPx6y
MD5:	2A8BBAA6360BF1B733A15504E9A02222
SHA1:	0E45FB9D3F5824FBCCEE9F32FA178293AF8883E6
SHA-256:	40899035A97AF3D8DBC09A71890914C2D71D7501F74402C1C309D7F8FBA8481F
SHA-512:	768CDFA0C762DE15CE7F07DD845C31578EDE43642CA0437A49EFA85B5EB8F7968994E0D09C938870D90728E162F5D099859901FCA4D4A1F583762FA8520645F3
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/libs/prebid/avpb8.48.0a1.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[41],{2433:function(e,r,t){t.r(r),t.d(r,{BANNER_ENDPOINT:function(){return x},DEFAULT_MIMES:function(){return _},OUTSTREAM_SRC:function(){return I},SUPPORTED_USER_IDS:function(){return k},SYNC_IFRAME_ENDPOINT:function(){return O},SYNC_IMAGE_ENDPOINT:function(){return w},VIDEO_ENDPOINT:function(){return h},VIDEO_TARGETING:function(){return Z},spec:function(){return C}});var n=t(4942),i=t(885),a=t(2623),o=t(265),d=t(3802),s=t(6475),p=t(4953),c=t(8528),u=t(5740),l=t(5644);function f(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function m(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?f(Object(t),!0).forEach((function(r){(0,n.Z)(e,r,t[r])})):Object

Chrome Cache Entry: 1171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156077&us_privacy=1YNY&predirect=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata1%26uuid%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 1172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3037), with no line terminators
Category:	downloaded
Size (bytes):	3037
Entropy (8bit):	5.472385507967012
Encrypted:	false
SSDEEP:	48:guAm/IxNKzYNK10Ck83wnuwNcuZoeILWWcvFfBt+Vb9S9SLNMKkKL5LCyMxWrB17:gu3q4041ynJN5wgoOKLFLCyzAfDQ
MD5:	329BA3E915D9FA5D5315C05F1AE57937
SHA1:	4DE3200F840BF71F31CB7017DBF877F03CD906A2
SHA-256:	CDC7862AE6F3AE80124D8C672DC6D7A4D892BA42F7D651DBF0BD74D1D9E353AD
SHA-512:	3C6DFC405C41BA9D2363E7FEDCCF6BA480788C9D5D30E380B5B3E6851D6EE7E7569A68C1913A2F1BC4B76B068DB88982AD9040479ED60A3640DBC3831AC3CF7D
Malicious:	false
Reputation:	low
URL:	https://dsp-media.eskimi.com/assets/js/e/ad-choice.min.js?_=2.1.0.9
Preview:	!function(){var e=document\|\|null,n=window\|\|null,t,i,d,l,a,o,r,c,g,s,p,h,u,m,b,f,v,y,w,x,E,k,n,B,I,o,p,u,m,g;function N(e,n){return e.getAttribute("data-"+n)}function T(e){var e=e.className.replace(/\s\s+/g," ").replace(/^\s+\|\s+$/g,"").split(/\s/);return 1===e.length&&""===e[0]&&e.pop(),e}function z(e,n){return-1!==T(e).indexOf(n)}function C(e,n){var t=T(e);return-1===t.indexOf(n)&&t.push(n),e.className=t.join(" "),e}function j(e,n){var t=T(e),n=t.indexOf(n);return-1!==n&&t.splice(n,1),e.className=t.join(" "),e}function L(e,n){return(z(e,n)?j:C)(e,n),e}function O(e,n,t){n.addEventListener?n.addEventListener(e,t,!1):n.attachEvent?n.attachEvent("on"+e,t):n["on"+e]=t}e&&n&&(t=e.getElementsByTagName("head").length?e.getElementsByTagName("head")[0]:null,i=e.body,d=n.__eAdChoicePhId\|\|null,(l=e.getElementById(d))?(a=d+"-bw",o=d+"-br1",r=d+"-br2",c=d+"-blc",g=d+"-bl",s=d+"-blx",p=d+"-bsc",h=d+"-bnl",u=d+"-bnc",m=d+"-bnp",b=d+"-bre",f=N(l,"name")\|\|"",v=N(l,"logo-url")\|\|"",y=N(l,"policy-url")\|\|"

Chrome Cache Entry: 1173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	downloaded
Size (bytes):	2779
Entropy (8bit):	5.256421685296428
Encrypted:	false
SSDEEP:	48:XFZp/sZ3lYQc7ArfSM3eIubF1QkNsKclMtPp/7qgAsFte6NPvD9T5AyNBK:1f/6lGUrff3eFLhNs+G6hb9xK
MD5:	7B430C6350A59A7CF22B9ADECCBA327B
SHA1:	B48D3C289BCB6809BB52FFFD8F013055ED6BCD65
SHA-256:	058ED961BFE422AF7BFC65865F4C08531EC8ACE995F8A1EC560A46581CB7712C
SHA-512:	BBB70E6C0318ED68FC6810E0210D010FC743B9987C6ED15A43C5D308A96A43331B79C3FAB1B39A9034398418FA3321EEC8C51998D79C981E3F511DA3B398326A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/ec.js
Preview:	(function(){var e=window,f="push",k="length",l="prototype",q=function(a){if(a.get&&a.set){this.clear();var d=a.get("buildHitTask");a.set("buildHitTask",n(this,d));a.set("_rlt",p(this,a.get("_rlt")))}},r={action:"pa",promoAction:"promoa",id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",coupon:"tcc",step:"cos",label:"col",option:"col",options:"col",list:"pal",listSource:"pls"},t={id:"id",name:"nm",brand:"br",category:"ca",variant:"va",position:"ps",price:"pr",quantity:"qt",coupon:"cc","dimension(\\d+)":"cd",."metric(\\d+)":"cm"},u={id:"id",name:"nm",creative:"cr",position:"ps"},v=function(a,d){this.name=a;this.source=d;this.e=[]},w="detail checkout checkout_option click add remove purchase refund".split(" ");q[l].clear=function(){this.b=void 0;this.f=[];this.a=[];this.g=[];this.d=void 0};q[l].h=function(a,d){var b=d\|\|{};"promo_click"==a?b.promoAction="click":b.action=a;this.b=x(b)};q[l].j=function(a){(a=x(a))&&this.f[f](a)};.q[l].i=function(a){var d=x(a);if(d){var b,c=a.list\|

Chrome Cache Entry: 1174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3051
Entropy (8bit):	4.414899438809683
Encrypted:	false
SSDEEP:	48:DZRCftuQhfJx4WiL+bLoWz4jm9diSViTCKN5M:Dv4UWikLod6viSVi2W5M
MD5:	6535DD57B4099C295512E6EFDF0072F6
SHA1:	327637B04822E7BED81711E0D6D73DF2D035F852
SHA-256:	D3D6A358BDD82178F93A2C6EB3148203E0488F06319F69809798656B1C3F9506
SHA-512:	11C98215BFCF562C2332A46E5F31769FA24E8F3E0FE5B55ED11A2BC4515952397397C0730BD0A30E520D79652DF4F4A7B6CFDDA4AB6728B8B6F539EF444126E8
Malicious:	false
Reputation:	low
URL:	https://proton.ad.gt/join-ad-interest-groups.html?evid=PL2EH78S
Preview:	<!DOCTYPE html>.<html>..<head>. <meta charset="utf-8" />. <meta name="viewport" content="width=device-width,initial-scale=1" />. <meta http-equiv="origin-trial". content="A7EJXd+QZ2JL/N8k85e+yMFGsIkETopEYjLMJjZMUYg51sgbRqLKdhW9nOiyEdVwWCOq8YRHOx+w9GQ8D9HqeAoAAACCeyJvcmlnaW4iOiJodHRwczovL2F1ZGlnZW50LmNvbTo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==" />. <title>Audigent Proton</title>. <script>. !function (w, d) {. const PROFILER_SERVICE_URL = 'https://p.ad.gt';.. function addTrackingPixel(interestGroupNames, eventId) {. if (eventId != null) {. const payload = {. 'events': [{. 'type': 'dsp_js_load',. 'igs': interestGroupNames,. 'evid': eventId. }]. };. c

Chrome Cache Entry: 1175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34028)
Category:	downloaded
Size (bytes):	619941
Entropy (8bit):	5.281381600989519
Encrypted:	false
SSDEEP:	6144:ILoq7UBUxXWrs6TAzjT4aa408JWIEZ86lmn:ILoGsa6NAzgsQg6lmn
MD5:	14784C1FB1A8BB422EABC9D05B97F52A
SHA1:	41BC3E4C003540689F0C314267A36029D81B47EC
SHA-256:	3585233D16C2FA98929A97351B8E22DE700BFDF658FC7CD8872664B15A2DEF97
SHA-512:	E2BF98CBBDF618776E88E1992E56F5E6FE4DCD8872840631BD2D0488B7E567D60FC7C7B0380489E7A530A1AE6A8134AF7E348A970B3B3CEDFAE5078A6C758E5C
Malicious:	false
Reputation:	low
URL:	"https://static.xx.fbcdn.net/rsrc.php/v3/yo/l/0,cross/Xaa0ehYmy_z.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	._9dls{overflow-y:scroll!important}._9t1d{overflow-y:auto!important}._9dls ._6s5d{overflow-y:visible!important}._6s5d{background-color:var(--web-wash);-webkit-font-smoothing:antialiased;overscroll-behavior-y:none}@media (prefers-reduced-motion: reduce){._6s5d :not(.always-enable-animations){animation-duration:0!important;animation-name:none!important;transition-duration:0!important;transition-property:none!important}}._8ykn :not(.always-enable-animations){animation-duration:0!important;animation-name:none!important;transition-duration:0!important;transition-property:none!important}.._71pn ._5e4k{background-color:var(--accent);border:0;border-radius:18px;height:24px;margin:0}._71pn ._5e2h{line-height:24px;padding:0 12px}._71pn ._5e2k{background-color:var(--comment-background);border:0;border-radius:18px;color:var(--secondary-text);font-size:12px;font-weight:600;height:24px;max-width:100%;padding:0}._71pn ._442_{padding-bottom:16px;padding-top:8px}._71pn ._4438{margin-top:-8px}._71pn ._1

Chrome Cache Entry: 1176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	19557
Entropy (8bit):	7.9695986136629395
Encrypted:	false
SSDEEP:	384:x8CKPeFAbUp+lTeuqub0MRHpdhWIj9YfEc/r+xH8GhN5T3hVm2N2MhqzIRedH95b:xN/Fj+Reuq5MBDhW89YfB+V8G1T3v9N0
MD5:	297CB6218F2E9E53BA296B0FA80A5F52
SHA1:	C55BEB28DE70907F6072BD9AA722ACF69C073956
SHA-256:	A90D15274FF1D3CF9608F11BA4758B55087F00E111B9B84F1E61C41A5B3C3CEB
SHA-512:	EE02EF7F5360D48219825DBF85C5C2813A22BDFCAFBF1B30199810BFD364293A41507F6D2D5DC200B11EE5B00ABA2D292818D3617B9BC09B252B116EE628E03F
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/339734211_524326886570625_7568592290991451198_n.png?stp=dst-png_p200x200&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=csVMzTkAE-sQ7kNvgGFF5hx&_nc_ht=scontent-hou1-1.xx&oh=00_AYBUMl2TT80XPB2RhU_9heeEyN9wotYVPy26OLKkDRChEg&oe=6655FEC0
Preview:	.PNG........IHDR.............":9.....sRGB...,....TzTXtRaw profile type iptc.........0.....Ic;..B%~<._...~+J1VV;s.h@...7...K.{..m......m...Y.. .IDATx..}w\|TU..{.wj&.t.{H....v....`WPQWE.....ko._...kw.....{.z.9...L.%.....<.\|...s..;....}..}..X....h.......&.5..`.X....5..`.X....5..`.X....5..`.X....5..`.X....5..`.X....5..`.X....5..`.Xc..!.......t./`.....!.8pJ..;.!..9....F.qb.. .H..c..u(.....t..q..F$....'......9..;..P.s.jB.C3...S..fL.J...XU.<.......!.qb..bI..q.J)w(..JA"........s&g..OJ....u..9.N..z.i..{[..UUzP.c.@.U:....\..1.B......71:"'51/'mvn....hI".c9.....DD..w..u}G{..2;......_.6p6...`.4.iBhfb....9..3&.g%O.2....q.]g.....R......7..8...!.h..X....s2CQ....@.d.J..553y...Y..rR.b#'....g....!B..s.9c\|.E.o.Q@........8...$....LUA..8...:\|RjB..9...2.S.c4.....q.x.T..e.`....c..FtZv....M..x.........Y6N...N...:{rF^NzVR\p...X/.G..C..c...3r.....^..L....A._....S.......dL.....2;7=/'=751>:..X.9c.....,...s.9..{Ic....)g.....2c....)..2pz]d....Iisr3.e..%.h5........}.t.B....4a.

Chrome Cache Entry: 1177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	5.381510855334676
Encrypted:	false
SSDEEP:	6:qI2/P5w3PPFCEt9FPKKRNFAIyiOcpnfBktsTJxRdWShROgHV81xdWSlAIZYHY:r1CEfY5I0cppFh0g6VaIZYHY
MD5:	8164104F8245073243A8A579F1B51A3F
SHA1:	ABAFF5EF184AFFA9EFAEBBAB67BEA17AF043D364
SHA-256:	F54515A29E54BACF457948B7142151FEE5FF4EA4B61CB9C61E0C0FD50AF5DA42
SHA-512:	ED3504306CB680FAE5D9E4AFAFC58382C46F2EAE574D3A99BC95FF0565F25CB58EBE422096AFC73D6F78B25BADC521E8998DA6B2A045F7ABAFDC2892FDEB12AD
Malicious:	false
Reputation:	low
URL:	https://thepatriotjournal.disqus.com/count-data.js?1=27459637%20https%3A%2F%2Fthepatriotjournal.com%2F%3Fp%3D27459637
Preview:	var DISQUSWIDGETS;..if (typeof DISQUSWIDGETS != 'undefined') {. DISQUSWIDGETS.displayCount({"text":{"and":"and","comments":{"zero":"Add a Comment","multiple":"View {num} Comments","one":"View 1 Comment"}},"counts":[{"id":"27459637 https:\/\/thepatriotjournal.com\/?p=27459637","comments":17}]});.}

Chrome Cache Entry: 1178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	281005
Entropy (8bit):	5.565005385092807
Encrypted:	false
SSDEEP:	3072:nwlgjVc0Iard8OdwzMhba88yCKqjysCBIQ+9agdDBqzGmRFeHxK6+QH54OroD5+A:wWb8OdwzMqFz1zQ+9fdDBqzGatQ+Ok
MD5:	B7600153945DBFAC64C0A379A619CCDB
SHA1:	087004993432979FB18658375604EFC0E5884022
SHA-256:	3A72B6089C4A6A76FD7F8B9EB13AE3EA71719B3FA3CBC77C8F9159497CE51026
SHA-512:	C88566803605553B9577BECB5683CB851AF01248AE3D20CEAE3351C3B9ED0046BE4F25F0736A057FF38C52673E18E2192FBDF7964BCCB022BCA25158F8912ED4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-6L5Q55KN3H&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":21,"vtp_rules":["list","^thepatriotjournal\\.com$","^americanjournaldaily\\.com$","^patriotjournal\\.org$","^gopdailybrief\\.com$","^pjnewsletter\\.com$"],"tag_id":6},{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":8},{"function":"__ccd_ga_first","priority":10,"vtp_instanceDestinationId":"G-6L5Q55KN3H","tag_id":19},{"function":"__set_product_settings","priority":9,"vtp_instanceDestinationId":"G-6L5Q55KN3H","vtp_foreignTldMa

Chrome Cache Entry: 1179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=3824438719000972&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1612236560&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dt=1716532102271&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=3693339094566329&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td21_tt13_pd21_la21000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts12_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=305368220&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=E907B026-7955-4417-9D5A-A22567CD04FA&nel=1&eid=44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532103289&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=3499962194712370&scor=1974084332211596&ged=ve4_td5_tt0_pd5_la5000_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16427
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	4.690157785331443
Encrypted:	false
SSDEEP:	3:qtKHIuRyRmgO9lNC4Co4Bxrp39jEs+RJRzlLBKf:qkp8mgO9lcLBxrh5x+31lLBKf
MD5:	FB49B04D2B9DE4E8261C0F9B5FBB26D3
SHA1:	1E868EF64B61407E2B610E177FF9488324F13FAD
SHA-256:	DDC14C746F5146780C870BB8E8886361DFDCF8AC33DB43B4D0E66D6C2BD8198A
SHA-512:	54414A996E7A5557B2F7906D2DC73EC4EFDFA0DF6360120B44B102B8E16CE47CFD162BDC0B96EECDAD9AE2C596BB3A1B0800AA3F7AD4912A3DC60F864638E373
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/themes/patriotjournal/js/clever_ads.js
Preview:	var e=document.createElement('div');e.id='LESfbmkdUexV';e.style.display='none';document.body.appendChild(e);

Chrome Cache Entry: 1183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2302
Entropy (8bit):	4.423010971502124
Encrypted:	false
SSDEEP:	48:CS1Yrg9pEhOrRfqG7jRRRfrHnSUL6LP/e6WQJJmOK83XcuBjRQN:HD9pxoG7jRRhd6L3WuJ1K83MSjGN
MD5:	617C205137825561208EF7C1A2D8F319
SHA1:	E7604CBFE99A485C9CDF01DA77F47D80CBD470ED
SHA-256:	70D5C4DE881E718D0B7638959680BA86722D44EECBE4058D20DD77B8D0D97155
SHA-512:	BD9C5AF3C4CA00C3DAF9C31E446F2855A45AF35D41CC8299FB1466D8204E84D3B5DADC4039CDCA344232B5EC45F2C8B79B39DBF89B4AB351AB091B77578A365B
Malicious:	false
Reputation:	low
Preview:	<svg width="70" height="37" viewBox="0 0 70 37" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M44.9805 4.77588L41.2695 6.32612L50.8463 11.8116L54.0385 9.98311L44.9805 4.77588Z" fill="#FF0000"/>.<path d="M47.6543 9.983L50.8465 11.8115L70 0.800781L47.6543 9.983Z" fill="#FF6D70"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M42.3909 36C44.0172 34.7304 45.2628 32.9994 45.9263 31H70V36H42.3909Z" fill="#FFD801"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M29.3285 36C27.8426 34.8284 26.7156 33.1941 25.5708 31L0 31V36H29.3285Z" fill="#048AFF"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M66.8182 5.85149V12.1707C65.3466 10.9632 63.4773 10.2387 61.4489 10.2387C56.7159 10.2387 52.8978 14.1027 52.8978 18.8924C52.8978 23.6821 56.7159 27.5461 61.4489 27.5461C63.4773 27.5461 65.3466 26.8216 66.8182 25.6141V27.3449H70V4L66.8182 5.85149ZM61.4489 24.3261C58.4659 24.3261 56.0796 21.9111 56.0796 18.8924C56.0796 15.8737 58.4659 13.4587 61.4489 13.4587C64.4318 13.4587 66.8182 15

Chrome Cache Entry: 1184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	151564
Entropy (8bit):	7.996927193044319
Encrypted:	true
SSDEEP:	3072:iW62HePzFgqxHqg7CE+n9+M6CX3uNEeuM2rrdjVmjq1yqu0:82He7FgqYU+n9+aX3EgMSmjrqf
MD5:	BC97B7513C9968C019379B11D2DE9519
SHA1:	83C2E4C6541AFEF649B20989368EEF20815C8945
SHA-256:	FA63184DF8B8D5599728B629A8B11D42E5C11494A03A5DD6523E3966FE077601
SHA-512:	F946F2D6D1E45C5A11E00411EAE4AE458FE08991C5ADD1905BDCA1E15BABE82263C18BA56AF293819EF0060E58E673FBDF7D1B0D8EF12BD1D1862068D3D1A13D
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/05/israel-dc-768x403.png
Preview:	RIFF.P..WEBPVP8L.O../..d.........r..0.v..S..f..4 ......0.c>.y.....=`7...0.$.$)...{x...{"..'..`.C....+.P..!.v6......8`7.Ip....W.2...."G.H2.<KJ!.....X.D......)s.1..BQ,. w.B.3.......6..jClc.Zi%..h..<...bku..@....q.."......0{.;=..j.1..M.lF...@.N..B..6)&...c........(...../.n..,.h..T....8..l.(..l..../..h..z......,...(..!..a6.a..u...-.Q.F...A...$.!.mB...s {.w..Nx......G..#-#..T.L.7Q.T.n+..........2.IB....jD..]..f5....+-.}..g..,..:....:a%{. .\|p..QW.?.lb.e.s.X....r_m....vg1...37..yw'f.V}.........a.P.h..%/..=.......W..M%s....{..7.#...v"..U.....nG.....{....f..O.g......I.J.v.......5.8]:.<a..ni.gs3B.....r{...~...K!........Ee...8.a.6....&..........P.w..!.@.HJcN..z.......R........... m...C.D,...{.2..3J)..uYf.......nf.f..F.M........45-w......s.{.......*...H.....P...J.H._...~.....u..;.m.J@m{z%..0.1n.`...H.'..tB....=.\.....U.;r... ..}...Oc....P......;.........L.8......B.z....k..FR".q@.`...l..N.a.f.qA...@.A.'.fL..-uC.]..n..\W..2<...~eOa.>.>...X.

Chrome Cache Entry: 1185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3
Category:	downloaded
Size (bytes):	30132
Entropy (8bit):	7.969483557620218
Encrypted:	false
SSDEEP:	768:p+qtAvuQaC4i5g6B1gxXta5CAPr3QoLBSVVk21agfKCSOgOA0a/QFlUKrs:p+z6C4Et1gxEEAPrAoLBSn1jf69w+
MD5:	621731B0AC9DEBFD941A1AF46D4A1541
SHA1:	BA566057A945C2E7A59774E00932A27E73CF32D4
SHA-256:	F2A96A76FAAC763DB3BE7331003E2A79F81BD564F648502FAB70619773076379
SHA-512:	D1FB287D84CF885ADA5BF58B143108AB535209AAF8227974A2D693B4C8F30935182BEF95D1E6069E73F1FEBDD61771555E8DA9060E8B339F8566289EC051F627
Malicious:	false
Reputation:	low
URL:	https://widget.adcovery.com/images/18710/18710-375x250.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....'..N...QT....p{....:....@.y.#.N.1..........F..(q..ns.l{..w..4...7p?DGG$.;..\.?Z{$..Q...)...2..2....Q..?.R....th.....\|.Cc.....5S..L.q.H..J...1L\|J...~5(.H.?Z.pE...z..=9..%r.....z.8..U...7..~UdG..0.....hWw..BJ.W#........r.3.t...%r1.k......G,aQ.#...t.;H.W..C2..'j..C.~...."!.`..yx..ji.{x<%%.j....g].....mA..+.@...>....4.m4...5..B`W.....I..oi.;.5..).. W...

Chrome Cache Entry: 1186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	5.377693365242254
Encrypted:	false
SSDEEP:	6:qI2/P5w3PPFCEt9FPKKRNFAIyiOcpnfBktsTJxRdScH8fgHV81xdScpTAIcA:r1CEfY5I0cpp2g6RMIH
MD5:	A4F805070106ECB6AF800EA4A03CE9DE
SHA1:	8DB64F071174011F6B7562AF60EA9D166E3B4439
SHA-256:	A0FFD257E5DFDB1B4A2C657F8374CB3AA1668DD81067BDDAF7C0526930B5FEA9
SHA-512:	B220905704DCCEDC305A13A820F69F65EBDAB9D8A893E5F591D75C0301A69A3D3B90CE574DC534740291CF3E7DF2804F129A609BC69BD51FE9E4D364DFBA708F
Malicious:	false
Reputation:	low
URL:	https://thepatriotjournal.disqus.com/count-data.js?1=27459679%20https%3A%2F%2Fthepatriotjournal.com%2F%3Fp%3D27459679
Preview:	var DISQUSWIDGETS;..if (typeof DISQUSWIDGETS != 'undefined') {. DISQUSWIDGETS.displayCount({"text":{"and":"and","comments":{"zero":"Add a Comment","multiple":"View {num} Comments","one":"View 1 Comment"}},"counts":[{"id":"27459679 https:\/\/thepatriotjournal.com\/?p=27459679","comments":20}]});.}

Chrome Cache Entry: 1188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3574)
Category:	downloaded
Size (bytes):	3797
Entropy (8bit):	5.279422276663892
Encrypted:	false
SSDEEP:	96:OWGxB/YVPwYLihiRDxGZHbeG9eCYQjweXc9qcMgdSbkg/Fd0aQ:ZUB/YVPwI3DxGZC+bjwkc9q1gdSIg/LI
MD5:	E9396D7F2F6E130BC35E1CEADCB654DD
SHA1:	573FE9B906495CD698166A13E978C80970A2837E
SHA-256:	35E4D3CA888FE927E7FE788EB170A06C0891BF096B3A9AE6DCADB9A0451E6DEF
SHA-512:	83734D46749A6755BB1C6E7B8D33B336F57BB09CE4531C96A92BCA154F6E30AFB9586283F4056C880D685E2604FC304D0CAD9332E9E84DB1402738D22939AD4A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpacePeek~bundle.Communities~bundle.Compose~loader.CommunityHandler~bundle.RichTextCompose.1048fd0a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpacePeek~bundle.Communities~bundle.Compose~loader.CommunityHandler~bundle.RichTextCompose"],{80833:(e,t,n)=>{n.d(t,{L:()=>R,Z:()=>_});var r=n(2784),a=n(25686),i=n(82392),l=n(49758),o=n(73186),s=n(39274),c=n(69263),d=n(45184),m=n.n(d);const u=(0,c.ju)("https://help.x.com/rules-and-policies/twitter-rules"),p=r.createElement(m().I18NFormatMessage,{$i18n:"j33cc663"},r.createElement(i.ZP,{link:u,withInteractiveStyling:!1},m().h9526e03)),g=({containerStyle:e,explanation:t,explanationStyle:n,heading:l})=>r.createElement(a.Z,{style:e},l,r.createElement(i.ZP,{color:"gray700",style:n},t\|\|p));var b=n(10364);const h=({getPivotLink:e,renderBadge:t,rules:n})=>r.createElement(r.Fragment,null,n.map(((n,a)=>{const{description:l,name:o,rest_id:s}=n,c=e(n),d=t(a+1),m=r.createElement(i.ZP,{weight:"bold"},o);return r.createElement(b.Z,{description:l,key:s,label:m,link:c,thumbnail

Chrome Cache Entry: 1189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 1190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1596)
Category:	downloaded
Size (bytes):	1819
Entropy (8bit):	5.258001080553222
Encrypted:	false
SSDEEP:	48:iI6GqlgJPeMTW9gNwlM3qlrnLOT5bFnb8WmQGr:mVlJMTWqClvlrnL05hnYKa
MD5:	1C6032C455CEB6C8F5CE8677FEDEF8CE
SHA1:	76225378D19C3E2F6412D38659C15C40905E5409
SHA-256:	CCAB142FC2F31144438FDAF84C425DCCB6FE73F0CA784929A7A3F1C1BE095F60
SHA-512:	BD4236D7EDD428129465904B5863D4C91E6A62E31164B4303E0204D0C89BFE02FB5DB18571B6DB9C5F63540191BC2C9D943C16B1B89651E505F90CC4C80A96BE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte.4e8cc19a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.Birdwatch~bundle.Communities~bundle.Twitte"],{23162:(e,t,r)=>{r.d(t,{Z:()=>s});var o=r(2784),l=r(25686),a=r(59890),n=r(73186);function s({borderColor:e="borderColor",isSlim:t=!1,label:r}){return r?o.createElement(a.Z,{style:!t&&c.root,withGutter:!0},o.createElement(l.Z,{style:c.gapColumn},o.createElement(l.Z,{style:[c.gap,c[e]]})),o.createElement(l.Z,{style:c.gapText},r),o.createElement(l.Z,{style:c.gapColumn},o.createElement(l.Z,{style:[c.gap,c[e]]}))):o.createElement(l.Z,{style:[!t&&c.root,c.gap,c[e]]})}const c=n.default.create((e=>({borderColor:{backgroundColor:n.default.theme.colors.borderColor},nestedBorderColor:{backgroundColor:n.default.theme.colors.nestedBorderColor},gap:{height:e.borderWidths.small},gapColumn:{flex:1,justifyContent:"center"},gapText:{"flex-basis":"auto"},root:{marginVertical:e.spaces.spa

Chrome Cache Entry: 1191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2241)
Category:	downloaded
Size (bytes):	162900
Entropy (8bit):	5.418285042236576
Encrypted:	false
SSDEEP:	3072:wH6w8Lrds5QlNeDoxmocB/Ei5QAZwlwgvY1varZu:a6Zs5QlNeDoxmocB/Ei5QAZwlwgvY1vX
MD5:	F762D1CB078BC638A29750A7A39D22F0
SHA1:	BB3BDA8174AE02F5BA4067179F3529C5D904721A
SHA-256:	B9C0A794910C2EEF61327122BF113801F7751BA58BC2E4786D5FA35B9172F3CE
SHA-512:	F8FA306CCBA19C84E85E49FF007791A1FF1068DE6FF67C45DAD73C3719586D879DEFA97E81B763B267EAB282D73827917D791C6B186F7061DF11423F4B9C3A6E
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iAu44/ys/l/en_GB/hKDvLPKrsa6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometContextualMessage.react",["fbt","ix","CometRow.react","CometRowItem.react","FDSIcon.react","FDSTextPairing.react","FbtResultBase","fbicon","react","stylex"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k,l=k\|\|d("react"),m={root:{borderTopStartRadius:"x1lq5wgf",borderTopEndRadius:"xgqcy7u",borderBottomEndRadius:"x30kzoy",borderBottomStartRadius:"x9jhf4c",overflowX:"x6ikm8r",overflowY:"x10wlt62",paddingTop:"x1iorvi4",paddingEnd:"x150jy0e",paddingBottom:"x1l90r2v",paddingStart:"x1e558r4",$$css:!0}},n={highlight:{backgroundColor:"xwnonoy",$$css:!0},"highlight-bg":{backgroundColor:"xfmpgtx",$$css:!0},primary:{backgroundColor:"x1jx94hy",$$css:!0},secondary:{backgroundColor:"xlhe6ec",$$css:!0}};b=l.forwardRef(a);function a(a,b){a=babelHelpers["extends"]({},a);var e=a.addOnPrimary,f=a.addOnSecondary,g=a.body,k=a.headline,o=a.headlineLineLimit,p=a.icon,q=a.level;q=q===void 0?3:q;var r=a.meta,s=a.testid;s=a.type;s=s===void 0?"primary":s;var t=a.onClose!=null?a.onC

Chrome Cache Entry: 1192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	134
Entropy (8bit):	4.988231661403621
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiOzt5TpmH/Nh:8WiIUemo/HPbfCYKpY4DCVeELABZjmH/
MD5:	7FB4522EDE5D38E9795BD01FBF5F19D9
SHA1:	9BCB3F23E99D62924C0764E0596E232098C08C9F
SHA-256:	8818D28959EA7D868C6005E9116E1E31637FA8C648F2F7BCEE8DB697C541CFB5
SHA-512:	B32A8822D7C3294E21A3A1320DF535C347A8D93F973E2A557C61385200D283C7F9CCA60097EE748D52B6E5A3EB7F91398E786F08716A7E7DAA34C1D1B77A2F4D
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"0"})

Chrome Cache Entry: 1194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=320, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=550], progressive, precision 8, 1024x768, components 3
Category:	dropped
Size (bytes):	65475
Entropy (8bit):	7.854861664604092
Encrypted:	false
SSDEEP:	1536:FNYzRE2LxYbMaR8ybOHPh4yy/nofh4LLGJ8gTnO+c5te:FNGCHqy6HSyy/oJWLngTnite
MD5:	40B1E7A3B7E6385C8CEC8C5ECC198023
SHA1:	898AA0172B3C3CCBDF6C5F9639387C1CC084BDE5
SHA-256:	8E4162967DCB35EF964B6DF8E368C528A982C52940BCA5CA6B499FBBF0B5B754
SHA-512:	818389DB74030F69F4BBAAE662B86F192207060567C746DE36FB1D44B8677FDA402ABB0BA42E56C25C6C2D3988AF68606A835BF8B3725C7781B7B11E3F79C16F
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*...............&...........@...........................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop CS6 (Windows).2023:05:16 20:46:50.............0221...................................................................n...........v.(.....................~...........u.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..:...%_.>.Q.U:.b.....tBM!.\| 7.........M..-..F..U.....&..@.....nW.U<.U....aw$

Chrome Cache Entry: 1195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60151)
Category:	downloaded
Size (bytes):	60374
Entropy (8bit):	5.482786940949836
Encrypted:	false
SSDEEP:	1536:UbQIe2/q9/KpbpMe7tAbKtSW96JAj0qKxNPrQq7:CtSWIo0HxNf7
MD5:	8B60EF49DE083E576ED18F88FFCF985F
SHA1:	4FA057BB949664E8BEE937EB83F1EBD5764BD179
SHA-256:	DCC44849E94C1F90B1A178621EA929843F491F1828C47A846A02F1B3B49C2AEE
SHA-512:	399B2D7A3BF94C58110EC04FEE3DC60FA9704BFC5910D9A20F545292859A1E178B2CE12E4EE7507A7CE095027756407C95C59E77E9C436A447662341DE30568D
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD.15765d4a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD"],{8893:(e,t,i)=>{"use strict";i.d(t,{s:()=>s});var a=i(10622),r=i.n(a);function s(e,t,i,a){return r()(e,t,i,a?{networkCacheConfig:{metadata:{isFatalError:a}}}:void 0).toPromise()}},95e3:(e,t,i)=>{"use strict";i.d(t,{Y:()=>_,Z:()=>R});var a=i(2784),r=i(82392),s=i(69263),n=i(45184),o=i.n(n),l=i(17530),d=i(87338);const u=o().aaa798fc,c=o().f75d1806,m=o().hedf9d7c,p=o().f13bb672,h=o().ab0decc0,g=o().e4e92f35,f=o().i859a9d4,_=Object.freeze({All:"All",Premium:"Premium",VerifiedOrgs:"VerifiedOrgs"}),y=(Object.freeze({EditPost:"EditPost",HighlightsProfile:"HighlightsProfile",ArticlesProfile:"ArticlesProfile",ArticlesReader:"ArticlesReader",ArticlesPostComposer:"ArticlesPostComposer",CreatorSubsEligibility:"CreatorSubsEligibility",IdVerification:"IdVerification",LongformPostComposer:"Longfor

Chrome Cache Entry: 1196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7512
Entropy (8bit):	7.892125316058073
Encrypted:	false
SSDEEP:	192:RdfZuPQB9HwymPSf4rqGEmY4fDCGfThrj:RdxtHwywbrDlY4+q5
MD5:	DD2ED676F249B0A5AD9D4DE32DCA36B8
SHA1:	40EEBC25D0C6416ED6E9CCDB988DABE5FA5BBF36
SHA-256:	972BEBB79DAB4ED30EF6B488C44511129C76C7272448F361CD7865F8566784EA
SHA-512:	826E9E8B09C46FE1095EBD9915D642DAB911AAC727282424DE602FAC988DEBD9CDFC270BB9217E1F9872CEB16D9A89348E14360ED126FCA81A79EDAD0EE0357D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000077030000b4060000d7070000ac0900003a0e0000ab1200002b1300008a1400006b160000581d0000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".....................................................................................O....f....4.Q..3..e.....(e...s.$.z.w.........)%b...1...hz....L..u.R.o....D.Ow..z.q..X,.....;..p.[3.(k.....\..$1M...G.,V.......`...'..\|~.\.O}.....-....hw.:.o.m.../.h...doX......qc..m.y.k7hx......X...-........5....@>7<;r.a{....n.....9jF.....=.]'..wQ..;V.E...ih..D.R.0....W....)..,Eb.;.<..m..FXV.....dh...Y.....T.I.td...h;.-.KF.$Y .............z...L..I.H.!K.B^..+'n...+.j..i-.U.'.`...s..Sx......=o.)...I.{t).s.G..m...LTt.T.....b.......+........................... 5.!1.."0#2A34...........x...W.+.s8...$.abJ...h.6...O..x..c..a..1..h+..9[9...4.1..yV?...2.3..O....<.ry....2..v..q}B..q>3-.

Chrome Cache Entry: 1197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33589), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	58753
Entropy (8bit):	5.26167812703519
Encrypted:	false
SSDEEP:	768:y5B9KXqe7mdOgKY0hXpXVG8FoAKRXSdRKftld0VTScQI8rdFj8:EB9K6d8gghXnyXSuVld4z8Z6
MD5:	A9C11221224C7869C6B916618D892612
SHA1:	39C436EE6D2AFD6F851840AB4673C56CE0372D3E
SHA-256:	7B48A74FA0F94D83AE6D60C772F5E7AA66E7BE1B63CCF223CA14E34D3D7B0D22
SHA-512:	EA05BD1555D819AA35985D16EDA15F9A3805DA01F192156157739E30CE2A22D2888F8E4D1A2ED7A3FC2739CEF848B7EE882A5A628B3657E27AF979FE8F0EB09D
Malicious:	false
Reputation:	low
URL:	https://hbx.media.net/pubcid.php?itype=HB&cb=window.advBidxc.mnetCoRtusId
Preview:	try{ window.__mNPubCidCB = window.advBidxc.mnetCoRtusId ;/. This Source Code Form is subject to the terms of the Mozilla Public. * License, v. 2.0. If a copy of the MPL was not distributed with this file,. * You can obtain one at https://github.com/conversant/pubcid.js/blob/master/LICENSE. * Original github code https://github.com/conversant/pubcid.js. */.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"s

Chrome Cache Entry: 1198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 45, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1862
Entropy (8bit):	7.728984042371834
Encrypted:	false
SSDEEP:	24:5wouZjMOWlFRaQx+ivbXv0958jdKHEmLpu39GQRjQaUdF1i67:uo6MvFRaQx+ivbvddV4MHQh
MD5:	DDF25E44E397D0490AD8A772F2ABFAEB
SHA1:	EB3F3B28B0EE70E47C07235A2B97D46EC9D94841
SHA-256:	392B9C04352053E71CE46CC48B8BD19691F544A2BC0308156910199055CE703F
SHA-512:	ACBE543EE58B61EAC34B1BCEF1BE0BAA26915486587758596654A241A51141D7732C015C53DBB6B5B3BA0A694C59D7894F67C047596D0C07CE6AD1C49456860E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......-......pG....WPLTEGpL.......................................................................................W....tRNS......&-07AO^hr..............Z.S....IDATx...(....D\.5(...9....s...._.....R.6.1.Y......l..oJ..s".f1l.......1.&...K..".0^.)E.N%.....h.)...=..W...Z.2<.Sm..m...R .zB..PsJ<.> ...;..g.."..V.3.'......V.=J1j....(.;. ..D.T.S........i..3nyuu.A:.MUu.......).l........@1.<...pkU...cERZx.%.)..;.....$S.\|..=k.B....).`.}..S..'.H\...'..L.;%..L.4+.....s....E...\0u.......(.'.=..v..E?...8....S.t.J....mjC...W.';Xh.....)?.t..<5.....).D..p./..5.x.V<...O...ZslZ.p!..).(.^...8......X.i.W.8..{...S.PLf.d...<&.EM....G.-\..W,...^.9...t.E(.W...j..E...r....y.k..ss.QW.aE%...iD.;...}H..x.t.~.....gIC.9'.............CH.2.A\|......?Q...x..;..F....b...V1... J.<.b..{E.]..........D.]C..5.....;<..8.8<..D.?..O?RT..).P.."...;...'tt...[....MHQ.n^...4:.......5^..Uj\..a..).....80...tm..N1..p...sE...ULk.)#....Y6Ejj.."0p.3.)V.z..-.N.:.N.@i..".y.zF.....}[dv.9

Chrome Cache Entry: 1199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14712, version 1.0
Category:	downloaded
Size (bytes):	14712
Entropy (8bit):	7.984524638079703
Encrypted:	false
SSDEEP:	384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM
MD5:	3AFEAE0D768769F5E5F30AC9805C5B70
SHA1:	3ADA17C2B462DB3E7A1FD85C3F4670DFE7704F4D
SHA-256:	0D0A6262C545E8BBC895116E5AFB22579C468D7ABB77E378F377D6FED57C1DCE
SHA-512:	71C361AC0D7B72B222D4F087B46D1BEA318ED6652C4D37EC3403F0B0616482B5040232E06F2FCF13109CDF6151DC209E882C0DB40B2C6ACE4E2E0292FCDCDAB5
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
Preview:	wOF2......9x.......8..9..........................n..<....`..b...\|.@..d..6.$..D. ..\|..4..v%.m.... FO.#F"l.d..#......?t..'$.2..n..Ye.1$..]...$s..W.s9.<%.L.1}Yy.6...-. b..[......7!..<K.W\|.ij.f..?.\;.....N.$..T(.}.9."0n..........g)@.WE..@.....ZV..=U...;....}.:.t.H.B..H((2.E%$.@1...s.]..R]T..2..vQ.m.7....bm....T.....To.w..v)...H..).B!@..,.zB.ev.....3..L....[..z...\f[...BUV...^...0..8.....D.......\.$_e;.._../K.0.D..0.@..`...mn.....b......h..#.n?.A..}v.l..]yq.......].#=N..9p..9b.8i.!Hl......(.p.>.....{..`.^}W..Fc.O.~.....f..a.%..k.I..e9@Ov.dH.M......i.T.....K.x\|L1C..j..r.l..#.l/...=.Z...e...,k.<...A.A.I..]..@._...z.o.f2.....8,..?..qDUQ.S....a..L$V........K.d.F=~Ga..`.T.H......e{\...^..4cap...o!`9.-.d......._.k.Na..@.......`>.d..E...N....!.DE....`e.)P.R......Q.H....FA0..[U......I....d.......y{...J^...........]#...kH....0..}..C.\|b}.n.....7$c. ...........y....-.0...}..D..#...>}.Q.....*...=R...?.4....n...5.!93"/<9Ao.v.e..Jw.S..0..RK...L..k..)....-...M.

Chrome Cache Entry: 1200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	335
Entropy (8bit):	4.632842996624426
Encrypted:	false
SSDEEP:	6:vgj7NRwOgGF9/r2pwXllAZyUz6GezXXhCvNil:oj7jrDDxlaoUzihcNil
MD5:	D6E714B97AABC217D1946D7BB54771CD
SHA1:	044BDAB80961755FA47FD22007F09E60570C5DBD
SHA-256:	F363D11FB246038D2D2C5ABF92DCB75B63DD923AE1DDBB3AAD45573D6B2EE797
SHA-512:	D8A22A45ADF488AD1D3C3D2FA70E02F6DAD1CD0EBEE700C30546248CFD04E2FE152ED55681F9FF434D0EB4A16C134D7EB84E4936584ADBB8FEA4D4657C75730F
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/manifest.json
Preview:	{. "name": "Patriot Journal",. "short_name": "Patriot Journal",. "start_url": "/",. "display": "standalone",. "background_color": "#fff",. "description": "The other side of the story",. "icons": [. {. "src": "/wp-content/uploads/2024/01/touch-icon-1.png",. "sizes": "192x192",. "type": "image/png". },. ].}

Chrome Cache Entry: 1201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x156, components 3
Category:	dropped
Size (bytes):	5227
Entropy (8bit):	7.809004705895549
Encrypted:	false
SSDEEP:	96:tWu3/XkH56JDDia8VopPQKyfAhK0w/7qtfV1ru/I9xaSj0eFL3:tvXIW9AoYZAc0cufO/qkS00r
MD5:	00583E38F58E2AC8E5FB0EBAE0CEF81F
SHA1:	4C8F6EF51572FFD3F797573DA465818FE572FD80
SHA-256:	DA4354F715FDBFDA7EB1AF95D2A8E3718E9E7E7379D04B09D1F5312F8A1D62C6
SHA-512:	B7DA0261014456F136FDCBA27918352BE44909F09520B5B380E7FCCFC0EB10EF734B4A9238DF17519A16B5851457C9EE27407086448434DB2E20F2233BC5A6B9
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000046030000f6050000a00600002407000036090000af0c00002a0d0000d70d00007f0e00006b140000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."................................................................................M...Ro...d....$rgS:8......S.B:r..>...Z.X+....u[..?...G;. ..Q.2...@.T.A.....4.7+...OO.....?...h......]..M%g.... ...N..jV.....J=,..b..w3..Y.../...Qg..w..1#w..(I68.^.4y:.nF..+.p,o`..@n.7..2!..(.;...F.Z......{^ek.LyS..e..V7.XW.o.tT.C"".n...b..u#1...Ni{...p=.F..............!....zq+..,.....^..hL..j..k..\3.L._[..O&j.y.+......H.....".[....(..tl.U..#W..lG/r...e%Dx5.@EE.....0.V.....V.%...us..4..9.....)........................... !"1.A$#0234...............s...6..^...V.K......9..3K..<_...Xr..._..U8.s.M...... l..}_..^..+`0r<.....@.nl..8..b...7%../.Uku\|B....f..IecW...?.LW.~..>.D......-."E...5...

Chrome Cache Entry: 1202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2156)
Category:	downloaded
Size (bytes):	44701
Entropy (8bit):	5.556418658154966
Encrypted:	false
SSDEEP:	768:0n23gP8cSTWDHO4Y5DoAsxaVTlo50Zpl+B8Jpc02Wf:0vkt+BAsKxO6pcqf
MD5:	6583128F6D84D81BFD8CBBF3F2D13FC8
SHA1:	47DB6DC2FB779DEA41436F1AEF6B38B90588774B
SHA-256:	D0BFFC7261DF1454C5E05475CDA7D9E6647318DC6C3936767E1252BFE8849C54
SHA-512:	DF4026351FED40111D17EF75FF87E650627AC408BA175B7B1240D48551EF32321365139CA677C2F14178ACD0C71228B39C95C53A02BDEE10478437784AE6B263
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/instream/video/client.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.endsWith must no

Chrome Cache Entry: 1203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZTkwNDY0YjctYmNiMC0yYmY1LWVkMDAtNmUwZmE3Yjc1OGM3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4689)
Category:	downloaded
Size (bytes):	4912
Entropy (8bit):	5.326092854869487
Encrypted:	false
SSDEEP:	96:m7yvUsvwdgZcH6BA93EJuJHOXahqmej6HIyy+9Km:Wy8svWgGH6BUUJXXahqmej6Ry+T
MD5:	CFEAB5DFF45022EEE016F2D4D2E70FAD
SHA1:	C4AD083398AC46A07814AF1BDBDACDBAC7EEBFFF
SHA-256:	6DF3BAC9A5981F76DA3EDBBA88C605DDDD99B410383F763AF09636CEF9363489
SHA-512:	002C5268E275DBA58393F1B10E01E42C984A50E420D8521F03EE7C534D5A8289322185AC458C8815647EE4B82ED2DB553C762D322CE79E57BF3B6ADF0A26586C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa.fe9ed3da.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bundle.AudioSpa"],{72983:(e,t,a)=>{a.d(t,{Z:()=>h});var n=a(7896),s=a(2784),r=a(77799),o=a(68472),l=a(73186),i=a(45184),c=a.n(i),d=a(51405);const p=c().aa6e3300,u=({retryMessage:e,...t},a)=>{const l=r.Z.isOnline();return s.createElement(o.Z,(0,n.Z)({},t,{icon:l?void 0:s.createElement(d.default,{style:m.icon}),retryMessage:l?e:p}))},m=l.default.create((e=>({icon:{color:e.colors.gray700,fontSize:e.spaces.space32}}))),h=s.forwardRef(u)},84292:(e,t,a)=>{a.d(t,{Z:()=>B});a(6886);var n=a(2784),s=a(25686),r=a(45184),o=a.n(r),l=a(82392),i=a(29496),c=a(50829),d=a(54484),p=a(54044),u=a(71791),m=a(73206),h=a(73186);const f="confirmationSheetDialog",b=o().e23b20a0,g=o().bb5d8cd2;class w extends n.Component{constructor(...e){super(...e),this.sheetLabelledById=(0,d.F)(),this._handleConfirmPress=e=>t=

Chrome Cache Entry: 1205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56077), with no line terminators
Category:	downloaded
Size (bytes):	56077
Entropy (8bit):	5.3966037959270485
Encrypted:	false
SSDEEP:	768:tvB5S9KiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4O:7O
MD5:	4F8D7ECCB8B77BFF110A91871EBADCC0
SHA1:	74E5D00ECB54BFCFC2CF0D8D95441CD9236C048F
SHA-256:	2DDD96839C08E8CBDD3B1F56569B6D4770021731534B98DD17DEC8526BB0D151
SHA-512:	FAF100313010634C21A7EFA0B0E8D38D532EF52497B268AADF1AAC03DA9B5D14A45CBC1CCECC508A989B28D1DEC8BAF97270C433BE5AE85CE454267B19430DF4
Malicious:	false
Reputation:	low
URL:	https://cdn.hadronid.net/hadron.js?partner_id=405&sync=1&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 1206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F170737076%2C22652678936%2C187271864%2FVideo%2Faniview.com%2Faniview.pjnewsletter.com&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&env=instream&ad_type=audio_video&correlator=3461366151276946&tfcd=0&npa=0&gdfp_req=1&output=xml_vast4&sz=640x480&max_ad_duration=60000&unviewed_position_start=1&vpa=auto&vpos=preroll&cust_params=posB%3D2.1&plcmt=2&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1591584028&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44776495%2C44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dt=1716532112712&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=1338512982949851&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td32_tt24_pd32_la32000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35763), with no line terminators
Category:	downloaded
Size (bytes):	35763
Entropy (8bit):	5.208404080149892
Encrypted:	false
SSDEEP:	768:uVUiSF4XqEM3/5Ayzq+bg57I9TSjeiS0gSvEkI4Z:+83LzaJjeiS0gd4Z
MD5:	3659FB79310EDAA2C76E9B0E906D52F7
SHA1:	B34F6C550C8B3458320E6374C8248408878D9430
SHA-256:	9017A7980262AA8B8B2FD958073202E698826CEAF6BAFD179E0DF5982912802B
SHA-512:	B0B9621E30915703BF3108A68768B040961C405E750B9DF0FC4E0B3B4E25DF4F9188B359176C8F4F4EEFEB65EF30A9229FCF1AE59399DFEA4C2504B90E0524D1
Malicious:	false
Reputation:	low
URL:	https://cdn.browsiprod.com/bootstrap/bootstrap.js
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=0)}([function(t,e,n){t.exports=n(1)},function(module,exports){!function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=6)}([function(t,e,n){"use

Chrome Cache Entry: 1208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47742)
Category:	downloaded
Size (bytes):	47966
Entropy (8bit):	5.4888497205721185
Encrypted:	false
SSDEEP:	768:doYApjb+15+HTkY52eElQtnpXkQKRLAA0yuJNJuH4KWYKo7H+cFZQ0bGJEm8lpDa:d38SPO5ySp88HNJVKao7dF+XgF5Ia4zB
MD5:	37883D4D7A8162AE106B6DD1CC31419A
SHA1:	9C940844DF3E8D3E01502EE0052B9D9B9BD22268
SHA-256:	63ECA1580E05B9AED09406A03C76D54AD5FED08578FCE0D0086E650CC76A262B
SHA-512:	EA1E20E8C93422B02D354E61588BBABBC1D8266C6810002BD4D97444487A0FC6C971F5D07EF50E7E413EA55A586F47B1C4AB92AFA0AD5AB9D034A72EFE75E4A8
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMDrawer~bun.c246d6ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMDrawer~bun"],{37800:(e,t,r)=>{r.d(t,{Z:()=>i});var a=r(2784),o=r(25686),n=r(73186),l=r(81142);const i=e=>{var t;const{borderColor:r="cellBackground",borderWidth:i="small",style:c,userAvatarSize:d="medium",userAvatarUrls:u,withIncreasedSpacing:m}=e,p=u.length,h="transparent"===r;return a.createElement(o.Z,{style:[s.root,c,{height:null==(t=l.default.getSizeStyle(d))?void 0:t.height}]},u.map(((e,t)=>a.createElement(l.default,{backgroundColor:r,borderColor:r,borderWidth:h?"none":i,key:t,size:d,style:[0!==t&&{marginStart:-1*n.default.theme.spacesPx[m?"space4":"space12"]},{zIndex:p-t}],uri:e}))))},s=n.default.create((e=>({root:{flexDirection:"row",flexShrink:0,overflow:"hidden",flexWrap:"wrap",justifyContent:"center"}})))},77227:(e,t,r)=>{r.d(t,{Z:()=>C});var a=r(2784),o=r(25686),n=r(217

Chrome Cache Entry: 1209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	5.699621597454565
Encrypted:	false
SSDEEP:	6:6v/lhPkjl/Mmw3gwYFE+/2MpWI1BhOsvs36SCYVyecdQjljp:6v/7Il/MwwYh2zI1XOeWTNVyeTZN
MD5:	A1E5F333AD092F16905FC1E60D404729
SHA1:	6FD7E3A35CA3AAD1BE2B46E7E69866110719EAE4
SHA-256:	4A0CF97FCD185F5DEABED3C6F3ED7991B241E3E6EE2BA67AE20589449A60D19F
SHA-512:	1E8C4CE386612D07B844CB84C72C68837B9570BE56F7280BF828D0D5D052358921CCBE844409E33EA58F49F8865D8F8C112A3920C2CD73FE592715C30C5C264B
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/4PEEs7qlhJk.png
Preview:	.PNG........IHDR................>...0PLTEGpL.............................................%L.9....tRNS...PU.....J..K.l....yIDAT.[c```....*...N..@..Z.....L{..3.......$....d.. ....c~e.)..P.$7.......@.'......V.f~.k.3....3......l...(p@v..#......8W..g.-)....IEND.B`.

Chrome Cache Entry: 1211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11442), with no line terminators
Category:	downloaded
Size (bytes):	11442
Entropy (8bit):	6.005749716336548
Encrypted:	false
SSDEEP:	192:PCL97Nk61l237Nk61e3ptSUxH8AdXBUxH8Av2SyKfN+GNmu3px:w97Nl237NeJhdXQhv22ftmu3L
MD5:	62EE0B56A10EFD0682211B67BD60FCA3
SHA1:	9C3A63385BB717CB6678D9990B51831C82ACF698
SHA-256:	78ED22653B3F562207C51914B43BE0F52AF8F6C5BEABF232BBC0B4E72DEA7772
SHA-512:	C15B58A2B71D51D1211C06A75093DA6B6F555AD1227F807AB558E13DD22F55F208768E0BAD1C80668C87092B9F98881B2C98AEEEA598B5517FFD4E71D6366EDC
Malicious:	false
Reputation:	low
URL:	https://engine.4dsply.com/Tag.vrfy?time=240&id=0d94d46c-3cdb-4ae0-a09a-420aae9253fe&rand=72009&ver=async&referrerUrl=https%3A%2F%2Fpjnewsletter.com%2F&fingerPrint=123&abr=false&stdTime=-300&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&kw=&sig=BAYAZlAzMQFmUDMxgAGBAcAAIBCTQRzc6TWBIyrSBmfxYDEZLgSr9Hds5ZsTO3lhcO1bwQAg32yN53KdZuAc45yqFd7WziA9ZSdrCCh49MaXiVIdDJY&bp=%7B%7D
Preview:	g367CB268B1094004A3689751E7AC568F.Media = {"Items":[{"IsMobile":false,"ZoneId":81804,"SiteId":22696,"ZoneName":"Before You Go 81804","ScriptUri":"b.js?v=4","ClientSideFilters":[],"MediaType":"BeforeYouGo","Settings":{"BarType":6,"CloseButtonStyle":1,"cap":1,"capLength":86400,"ShowAddWithNewUrl":false,"ShowPageTitle":false,"PageTitle":"Before you go...","RssTheme":3,"RssUri":"https://pjnewsletter.com/feed","UseCustomRssUriSuffix":false,"RssCustomBarColor":"123456","RssCustomLogoUri":"https://pjnewsletter.com/wp-content/themes/patriotjournal/imgs/logo.png","RssCustomLogoHostedFileExtenstion":".png","RssCustomLogoHref":"https://pjnewsletter.com","RssShowSubhead":true,"Tracking":false,"RssCustomLogoType":1,"StopActiveRequests":false,"Id":81637,"CreatedDate":"2023-01-17T23:03:22Z","LastUpdatedDate":"2023-05-10T21:04:30Z","UseRemoteMediaHost":"false","UsePopCustomHost":"false","PopCustomHostUrl":"","PublisherDomainAliasUrl":"engine.4dsply.com"},"VastTagFillTrackingEnabled":true,"AdItems":[{

Chrome Cache Entry: 1212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5737)
Category:	downloaded
Size (bytes):	5806
Entropy (8bit):	5.397013150935254
Encrypted:	false
SSDEEP:	96:2iyLoAV+YIRzTEtm++xi5uXy9RveEJGtK+/BiO9Uaci+xS/GeYURFXwy0GR:2hUA4RFTEw++xDXy9RvCBNWacXxS/2ls
MD5:	9A32F0FECBD801A7A6B3545487636386
SHA1:	EEAAAECE780C0A9BD2D2A152545E24F45DB91DE0
SHA-256:	A673D4F16DC53823FA9507E85AC4F6B2BD6E585E8EA7496C064015FA7959532E
SHA-512:	327CA7B550ACC379A381776FE01E58600175986D34DD8436BA23BAE90F14E7166E3A490EB28FC2C91B0B2098A2B55FCB5F925DA03FDD6D501CCE6B76779F2824
Malicious:	false
Reputation:	low
URL:	https://cdn2.decide.dev/_js/ajs.js
Preview:	!function(t,e,n){function i(){/@cc_on return @_jscript_version;@/.return!1}function r(t,e,n){if("html_pixel"===n.user_sync_tag_type)new Image(1,1).src=n.user_sync_tag;else if("script_tag"===n.user_sync_tag_type){var i=document.createElement("script");i.innerHTML=n.user_sync_tag,t.appendChild(i)}}function o(t){var n=e.getElementById(t.id);if(n&&(t.hasReportedOffsetWidthIssue=!1,t.checkedIFrameSizing=!1,!s(t,n)))var i=setInterval(function(){s(t,n)&&clearInterval(i)},100)}function a(t,e,n){t.addEventListener?t.addEventListener(e,n,!1):t.attachEvent("on"+e,n)}function d(t){try{var e=t.getBoundingClientRect();return[e.x,e.y]}catch(n){}}function s(n,i){var r=window._ldAdIdMap[n.id];if(r)return!0;if(!i.offsetWidth){if(!n.hasReportedOffsetWidthIssue){n.hasReportedOffsetWidthIssue=!0;var o="AdUnitOffsetWidthIssue",a=window.getComputedStyle(i);a&&"auto"!==a.width\|\|(o="AdUnitInHiddenContainer"),l(o,n.slot,f())}return!1}var s,c="-webkit-box-sizing: border-box !important; -moz-box-sizing: border-

Chrome Cache Entry: 1213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.773557262275185
Encrypted:	false
SSDEEP:	3:YL+Xy:YP
MD5:	C6A1847E6D7BB4295ECDAE2664AFFB5D
SHA1:	B332217021C4A707F950EBC9294CDA83CB2EB77F
SHA-256:	663DAB1310A7E64C3BDD7DFDC81B7FC9A28884D4EE290B96077C7B32BBE84707
SHA-512:	B776180826C9AC422479D424C6AB1B8CB33CB0F47A6476D59AA8AEC225834399F450D9CFF4B65AB163184B131816D2B90726FD851BCACE7FE3B645CEA0B8A816
Malicious:	false
Reputation:	low
Preview:	{"nobids":true}

Chrome Cache Entry: 1214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10993), with no line terminators
Category:	downloaded
Size (bytes):	10993
Entropy (8bit):	5.961445243763472
Encrypted:	false
SSDEEP:	192:PCZa7NC287NTJptphBW4YS/4hBW4YU2Q3mvmP3px:6aA28N/l/432vmP3L
MD5:	43D65F702E2E138430E9B01AD83ED159
SHA1:	E587BF5FBC50154D7E69CC6C51B267A950F3D637
SHA-256:	627960234D8BA58E8C8786E7E11747B8E9AD5328E7C1657859F07CD5271CDF6C
SHA-512:	D11A4018164FF6D070A227E4E9E33270D1DF9D5A16B8420F0EAB84F5F789C8A33FBB2DEE3BED7A2EA766BC86688FB5030D1E14E500D2B2DD364E1621E41F8AA7
Malicious:	false
Reputation:	low
URL:	https://engine.4dsply.com/Tag.vrfy?time=240&id=0d94d46c-3cdb-4ae0-a09a-420aae9253fe&rand=16024&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=-300&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&kw=&bp=%7B%7D
Preview:	g367CB268B1094004A3689751E7AC568F.Media = {"Items":[{"IsMobile":false,"ZoneId":81804,"SiteId":22696,"ZoneName":"Before You Go 81804","ScriptUri":"b.js?v=4","ClientSideFilters":[],"MediaType":"BeforeYouGo","Settings":{"BarType":6,"CloseButtonStyle":1,"cap":1,"capLength":86400,"ShowAddWithNewUrl":false,"ShowPageTitle":false,"PageTitle":"Before you go...","RssTheme":3,"RssUri":"https://pjnewsletter.com/feed","UseCustomRssUriSuffix":false,"RssCustomBarColor":"123456","RssCustomLogoUri":"https://pjnewsletter.com/wp-content/themes/patriotjournal/imgs/logo.png","RssCustomLogoHostedFileExtenstion":".png","RssCustomLogoHref":"https://pjnewsletter.com","RssShowSubhead":true,"Tracking":false,"RssCustomLogoType":1,"StopActiveRequests":false,"Id":81637,"CreatedDate":"2023-01-17T23:03:22Z","LastUpdatedDate":"2023-05-10T21:04:30Z","UseRemoteMediaHost":"false","UsePopCustomHost":"false","PopCustomHostUrl":"","PublisherDomainAliasUrl":"engine.4dsply.com"},"VastTagFillTrackingEnabled":true,"AdItems":[{

Chrome Cache Entry: 1215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1694
Entropy (8bit):	7.839238467644974
Encrypted:	false
SSDEEP:	24:RYXpX7Ba86n1FBm3laOT12s3QqnX4q/d64WNVv8rlifSXPCryMdCYAChJkcTliia:8pXVaJUVTb3QqnoVtUhX6jkyhTTlriP
MD5:	ED92250CC08321C2A06BA2F7607A3FF6
SHA1:	005EC9E976ECA13C29FAFD69C43B48264D955D48
SHA-256:	10BD3E6C095AFFEC71509E1C2B46CF10B0DD96D88A9F5694B48285602FD43464
SHA-512:	2AA6387BE53B5EC8896868897267B5ED45602CB169895530CDE55101C4A0CBA04273909933BB062C69BE3AD38571B7E9E4EFD634F50C2458775A2BADA6AFF5FB
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/logo-1.png
Preview:	RIFF....WEBPVP8L..../.....0..?...mc..._.......Gc.p...@.!...@...m.jH..U...P......U........U.}....Nk...i.k...+....tf..F.E.....HT...Tf.'3......e..8.5.....PJ..:Q....X...~..y.m.!.g......<..f...Q?..q.H.\|...U.h?E..t.].'.fZN...+P.$..[...........;./.z.w.?..rO..c....\|...J9.[...\|.h.....q.l.l.I..m[=K........4[.J......<W@5I..X.K....;..w7....d.y\....9.(.@....(((. .....4C...@A...BA!]..\|t.........,.2^b..\..Q..(..T....\...VY.........y.^X..2.PtH...Fu.q6ReF...V..%/..6....7L...F..4.......907....$....Zk.D.,...(Naz+x.@..pR...........[.k.......8..N8.Kdd:.n.R.R.....Fz...@n...qV@y.Z..h^...L..+..\|9.A.._.$.......z(.AX.3....T--..z..A.Gk...........k'..#.[.........S.q9.9.o.m..\|p\|'.....3.....j.N?..J.R......K../.Dzz.P.x`..u...k.:..!4'.P.._.........O?....k...2......D...[....(Oq.S........d.L.....$..l.G}......V'q3E....9.....W.q.l....$9..H!...o.U.t.....9`&.....R.\.<..$i_j(z$.4..-..V....+.J2...{n.........n.I2.N..(..\n..w....>Iz\.'.<.....ukd..........<G..h

Chrome Cache Entry: 1216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6068), with no line terminators
Category:	downloaded
Size (bytes):	6068
Entropy (8bit):	5.165159830793222
Encrypted:	false
SSDEEP:	96:9vf6HlrXOCfc3G87DtfHxCRnXGlJHNXJNulx96yaSGAHry1N:ZglrXOUc2yJC1wNXWlx96yJ2N
MD5:	4494696AAFCE2F472575557D8A6431D7
SHA1:	554FBB00EED857C0C5DA71DE53A7699B395B4714
SHA-256:	9FFDB3A21DC973582F5EB23A6B13AC80A913ADB4EB7F3942B5AB483153FB0B04
SHA-512:	F97C4D5CC0A213E53F49CD69007A98B925E03F3D1522BBB26E271FBFC895DA101F59494A579BC3286F5E31181E8A00A14194C2207372067E135D3D2681F1C6DA
Malicious:	false
Reputation:	low
URL:	https://jsc.mgid.com/p/j/pjnewsletter.com.1171406.js
Preview:	(function(){var h=function(i,e){return function(){return i&&(e=i(i=0)),e}};var b=function(i,e){return function(){return e\|\|i((e={exports:{}}).exports,e),e.exports}};var d=h(function(){});var s=h(function(){});var u=h(function(){});var p=h(function(){});var l=h(function(){});var v=h(function(){});var f=h(function(){});var P=b(function(y){d();s();u();p();l();v();f();Object.defineProperty(y,"__esModule",{value:!0});y.AdditionalWidget=y.ScriptUrlType=void 0;var G;(function(i){i.es5="es5",i.es6="es6"})(G\|\|(y.ScriptUrlType=G={}));var j=function(){function i(e,t){var n=this;if(this.additionalWidgets=e,this.urlType=t,this.additionalWidgets.length)for(var r=function(a){setTimeout(function(){n.init(n.additionalWidgets[a])},0)},o=0;o<this.additionalWidgets.length;o++)r(o)}return i.prototype.init=function(e){var t=this,n=e.widgetDivId?this.createWidgetDiv(e.id,e.widgetDivId):null,r=this.createWidgetScript(e.urls[this.urlType]),o=e.insertTo\|\|"before";this.waitForElement(e.searchSelector).then(funct

Chrome Cache Entry: 1217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73081
Entropy (8bit):	5.518483041163519
Encrypted:	false
SSDEEP:	768:HtLhYFNAIwJm5XmevRJj4bvS6Q/E3C6EBlq2R4SV0ClzNTKcjq1nSwII:lSFeQNJIqv/OslqQV0CxNTKfSpI
MD5:	6D789BE78A1DF3EE3E4D40CA25D45005
SHA1:	7CB79DAB4B5859FEF2D9B00B6669169044510EA9
SHA-256:	6EDC07CAC2192C4E4E179E8466AB805E728444AD00EE4F72E51425020DA1D78F
SHA-512:	4112C5B4BF7597C5A68BB4BE79CC2E4EEC82CFFD4266F9F578363F29E3E545A98507CCA59F9C75B68E41D3C74BBC3B8E976B2145A2E226CEEF00CF61827AC7AE
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/libs/prebid/avpb8.48.0a4.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[233],{2017:function(e,r,t){t.r(r),t.d(r,{BB_RENDERER_URL:function(){return U},ENDPOINT:function(){return D},GlobalExchange:function(){return x},ORTB_VIDEO_PARAMS:function(){return j},adagioScriptFromLocalStorageCb:function(){return k},getAdagioScript:function(){return L},internal:function(){return z},setExtraParam:function(){return W},spec:function(){return Q},storage:function(){return w}});var i=t(4942),a=t(2623),n=t(5644),o=t(3802),s=t(265),d=t(4030),p=t(4953),u=t(5774),c=t(1582),l=t(6064),m=t(4171),_=t(5740),f=t(8528),v=t(9398),g=t(5992),h=t(4125),y=t(460);function b(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);r&&(i=i.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,i)}return t}function T(e){for(var r=1;r<arguments.length;r++){var t=null!=argu

Chrome Cache Entry: 1218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=940246409092661&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=3721884631&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776494%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&dt=1716532062652&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=796417356918648&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td44_tt27_pd44_la44000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts9_eb16619
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AQAJndZOUe5MKgJim_JaAQEBAQEBAQCOqEgLRQEBAI6oSAtF&expiration=1716618487&google_cver=1&is_secure=true&google_gid=CAESEDHRr7299ULI77vDNnF--WM&google_push=AXcoOmQNVAAeCuTUz_Wg6hYx9g4Pj1zLfFa5VmVxXCGWz82AbugRSWEvZdJyNh0RP2SAADCeCNoHAYqRvFWnYphp7P_a1dN3lG7MBAU"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	89034
Entropy (8bit):	7.994603714435639
Encrypted:	true
SSDEEP:	1536:oh0kCLjHbuZIb3cVBZlZkAQQ2fn7lMGQME2uJPzpK00Zfl5W050oG:A0kCj7uKMXZ3DwfhwlzGZf3W20r
MD5:	DB4F357990CC9F7AA084D784EA139880
SHA1:	AD8972A5FB709E2D4CBCC0359FF6764068B95C9F
SHA-256:	BDDABC03D1692D04E937C37F8B09AD062575C07B98142BADE0E502B32E6CCA9F
SHA-512:	C9F2D47358813100535F8C6C241CC24EABAD9DFF2183762D83658B1D7EAE71BA023074481D64888DB8860A0CE387FDD34F3483ACD8A7019DEA1F3D5608433934
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/trump-biden-768x403.png
Preview:	RIFF.[..WEBPVP8L.[../..d......F....d2...fi.e..Y..6...l...'..2.F@. .5=.T..7H...m$.C.3o?.'wcf.X.<.A..,L.F..H". a. I.2...c.&....5D..E.B....X.0F8D. &`+.....2..1[.[....L...v..!.2c..F..p..(....1..5....$".&....%.Z.J..y.4.!...D..Z=..O.Yv.i.&...[...+.a6..h..d:F...A.O.?-3.#-Y.;..Q,.i....0+$.j..{z.=..0.o.D+Q..K. A....E}.\|d..b;...pY..K+.x3..`.eDy..~\|jFAL;..D..3..&.,..m1.?j..@z...(.....).[L..l.d..7...6.h....xT(..I.B.@..~..Wa{.UGF.....F....C;..a....>W......Q...L...j.Y.$g-.tLz..5..~vg..7._..{....ly~vK...}.o...".U.!.o\\...'.v.d.<...cZv"W\....}.r......=.HP#..&`I.......\..K%.........\|..........ceee._...s.a.H.....[.~.4D......;.03..w......i&.p....4"...k......sM"..v.1.9.^Z[......yP/6.kFy.{......{.TyU}h..q.;U.P..z...o......[C....;..].q.!..B..DzO.K..-zJ.z'...H.42U.w(6.h2.tl.d. Tz...@5!.eP..d....k..}..W....{E.....t+*.....Jm..E...8....\h.F.+...l..>..Z.^....wFm/P...}.Q.....g..k[."......{.5.s^.........sr.....@.%J.y3S.....hp....t7)Jd.........4.v.....0.2....{.tK

Chrome Cache Entry: 1223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	13996
Entropy (8bit):	6.4808029254950394
Encrypted:	false
SSDEEP:	384:wDR0LU1BkpRxm0umWLUUWg/Oj3uBcUb6i:wDRy+BERx/WnOj+BcM6i
MD5:	45F16F38355B24F1F6E0503656B43BC7
SHA1:	09915E39E188CC8F66B1287F6D32F68E3CB0C195
SHA-256:	7901D70D2E03B2564F43FE21E60721AF0284B0D1E1305E8CDDE646CF6180E0A9
SHA-512:	74F242C6C9339AA49BE6A730DEBBCD7F99801448CBB6E79FFE60A96F8C92A5564D3F9E31AF7F600BA3FACE36DE402F0F4DE2E253D1D32A5C6C97BB97CC7A5FF8
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYDk6KsBm4c9z4YrBrp017ZJP2rN1zaIcUox8Jmyk24dFg&oe=66779F00&_nc_sid=7da55a
Preview:	...KEYF....$................. .............\.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d........................................................................................................!a.1Q..Aq."2R....B..#br.S..3C..........................!1AaqQ"............?..g..y.\|..2....@.).8.t.2...f...1....)..DL...x."i..F....m_.3.....d..?.......>=a.\|z.GU...N......Y^8.."..G3....J.P.h.....%K=.^.'..0..0.....ix....*..eI....,'..\....g?.?.....Z.v.5M.r.#.....m.0....o..t.q...e:..N..S.q...e:....7 .+..>\|FA.S..?.`...L...$....N.%_nG..L....r.......L..$....S<....<..D~:."?.c.K..M....T.f.C...>...(F..oDF.,oE)...)Z,......,..Q.W...).b.....x.:.".o.....o......Q:.{.:8z.[..~...5.3.~.L(2...A.S..?.`...L.....)^.t...e)...S..r.......V.&ej...Z..'.%..px3....qE...+..TF..L.i<...9.g2e.J.,.^4U.UO.e.!.-....tv.......R.n.V......Z.

Chrome Cache Entry: 1224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	543
Entropy (8bit):	5.501580638840677
Encrypted:	false
SSDEEP:	6:6v/lhPE0EswQ9SvnkkFOShjVHAcPicZzEQ6zgiRlWCsPBG8drm9jB3tbHup:6v/7MJs/9Svnk8OUjVgO5GnR9sPBEBhc
MD5:	8C6D3D65395902083479FD327F86A1D7
SHA1:	0667B3AE1799ACB8455631AEB99CEF56DDD43698
SHA-256:	DA8B7678427D3159D0F68EC15EC42B3536ED1D0085E94AFFBB1FD05C600B7420
SHA-512:	3A1577E6DF18C7A5257D3F2E979BEECBF2924B70DCDF01573280D942A1699FA7FF216527A9B6305A5B1073257F27C0D9FD2E5E47A556A37C9707716493D418AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE.......................................................................................................................................................................................Z.C...<tRNS......C.$..0 ..".<........B.......i.n.~.....{..........o...]....IDATx^E...0.D7q.N!....[{/...u52...g.#YP.82&.Sx:.O$...g4y....a.?.2V...i.2)+.\7a.......}.Dg.....0..3..Q...e,.....*........ys.`J....l..B.W}.........-..;......<1....[~...A7.#....=q!..........t-F6p.......y.vq..Zu... ........IEND.B`.

Chrome Cache Entry: 1225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	129409
Entropy (8bit):	7.905660189131528
Encrypted:	false
SSDEEP:	3072:Y6xbXAut6G37otSO5ZNqTFzAu/ejRFq4YsfYfBAeON:YDuAGLuSOLNqT6tFq31AzN
MD5:	BCFBE5F11E3BCAE7077EEBB5A565DA6A
SHA1:	4FBD3434F2C9953A9008866EFC0C0D1FFA5B36A4
SHA-256:	6972D89A2997E89AB0D8623404103DBFF93BF035495DA783D44324932E9FE8E4
SHA-512:	D64DEF7B534E94ED17B26858B1D0EC98E97D1528DC93DEA29AC06679D57A9DE37B4C90841007252CADC8851170E784CEE1AC34890CA46E2DE95CD811ACDADE31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.x....PLTE.Y.............................................................{..................u..................d...........v...................\..w....................x.......L........e.............v.....Z..x....i........Sl.........x...g.........y....En...q..vV.y_..xr...y[.~..k..tK.mY.wg.d..k..pI.tU.iIww}.kYjw..i8.n@.c..hHyrkKu.gLdq..iA.hM._<fm.lkt.h..U..^CwgLWh.jgdYh.bgr.R..]@Xfy.X4{^8Tb.u\Ab_b.W4.O.U_vX_mf[RxY'xU7hWFJY..M(QYrkW6TXfYXXJXxlV$ZUKyK,rK3.C.HUgEStMTWqJ'eJ8hJ)fL.UKGqB'CLgHLX5L.eB)9JsJIIWF5AIVdC.[G.8Hjs:.EEFe;!:FTXA.6CbX;,I?;1Bh:?MZ8.?>9J9-P:.4<Oc/.+;cT3.S4.@63F3$47='7Y-7HG4.84P.}..F). 0W'0B5)4$-J&/99('E'.<'.P...)R(()&&83&..(:.&I1!..$A.%7"!.2... -..8..G..*..@...$....-..8..'..8.....(..1..!.....7........(..#......................]z....<IDATx.._L.w...f..Fl7!.ij=....l..c..dLl.:.........qR......WP.R.=(.bF^....+.2....R+......pa..)3......x.m;Z..E..=..y.?.....Z..{x....v.......+.....^....+o........l..J.+Wz.......

Chrome Cache Entry: 1226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	22168
Entropy (8bit):	5.93483918073825
Encrypted:	false
SSDEEP:	384:U62J824pAKFNW2Vr4/r33n4gU9kFcvyO6iH/ug3sOoWEt4bK8ArCi:N2J8FpAuY2VrGn4gU9kFeyO6iH/XsOoD
MD5:	07DF54DF91480FBFE2906765452C6FBF
SHA1:	A52E8A49117192C1EF95BC076DC156B1C64597EF
SHA-256:	27FBF1CC76894C289357A1601105392F1DBAAFABA15DAA258C954487B507718D
SHA-512:	6AC0F00ABD894BBC17C8440F1EFE6AC67E5167D91412B318013A5898713E2DD1AFC9413B2F9E5D93B3A70C61B3FEBC4F5911C471C3016311363D89F147393F78
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 1227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	129036
Entropy (8bit):	7.994246064603044
Encrypted:	true
SSDEEP:	3072:kDA9agVDk5bMxAD28RP0U5jvT0OIKmwArc:k8PggARcURv4OBmwWc
MD5:	CCDD09C5FB47F6DBEEADB15CCC61B778
SHA1:	72F54B6161FFBCA8E7BAAE38211810D72FCCC2D0
SHA-256:	3828C9B3A90D93A5B48CC498F58D016473F1439D21286AF482EB195091F52503
SHA-512:	89C36728169D03DB37F6411219E515945076AE756C2856FB893F808AE15FBDEA8C80706B717B4B08773A4CCF7535169D927BCAD3CF38CBBF26C10A111881CB16
Malicious:	false
Reputation:	low
URL:	https://dsp-media.eskimi.com/upload/130693_1260306407_ccdd09c5fb47f6dbeeadb15ccc61b778.png
Preview:	.PNG........IHDR.......X.......p....sRGB.........eXIfMM..............................J...........R.(...........i.........Z.........................................................X......p.....pHYs.........."...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx.....eWq-\};........r....A.$....lc?.....lc.`.......?...m...... $..B.(.h.&....._.j.>u.=.g.3.g.Z...>u....L....f.T[.Q..S.m..~l..Y.5.f....HG....J...(m[.Yf^..d... .../{...rVk.H.~X.....Ko6.@".y;.%f.I?.ny.....m.....E..O......;rYw......=.a.c`....lJ.IQ..J...s..F..d..O{.0/.1.... ..?$./..7.LO+m.bR..g.dKy.<j.%..W.R??)s.. ....j&.H.......jq....M......m...:.=..c..8x.rK>.yV{.6.K+....uTj..D\5.....S.+.........L_..oj

Chrome Cache Entry: 1228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	dropped
Size (bytes):	17530
Entropy (8bit):	7.957463158537474
Encrypted:	false
SSDEEP:	384:7tJaLIJihF0jzuDsKwn14R5EL3z+d7jJnrhRHm2b10bKo9K/XnDN:7aLDvn011Sd7lnrhRmA4zIDN
MD5:	BF4FDB5F8DB177FCF136F44382900A8F
SHA1:	CE530F56FB142FA184CCAF26C90EDADD7F53B820
SHA-256:	0C00CF5A2656976B6E21399509FCB10006BDED0E546DC9CE7CE65BF6514EE8EF
SHA-512:	B417B5DE9233CC40CF9A3053AF6FD37EE4272D4C7599F5C14760205BDE032A4BE60D3363D667CC117537B351658FF81310A6214C77F7F6C8A866102ED922E5DB
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress.......................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn................."................................................F.`....1...M...^<.l..... @..!.Lli..c...)...@5.NwUn.m.`4..B.4..B.!..c....0.0c. ....6_N.W...2.....&.4!4."....4..5l........]..TB...t{....M....@.A..&....m..ft...6..y.G......y.]....1. B. "... .0........F@...\|=....;.9.z_5Ws0`!........ ....@.O..;.0...s.~....v~.......2. 4..B..$..!.6....ir'....0......,..u.z.]U~... ..CA.......L.C.Z.....0........2.~k...#..d....h. . . .....0%..._..d.......'M\|.y...K......4 ........1..e.s..ddf........z.F.[....5...L`..0B@...M.M...`...%....{.)....=v..Z.....+BL.. .&. ...""I.c...+e....V..I.........su.3.l.....@4... DF...0.r.h...T4.CMI%.k4u.N..O.........B......M.....X8._Q .h......w.C.m.....!.b......li.1.mo.i...........O7......os.......@..E...". .....V;.....4...0..jm....6..H... @ . ...61.6..'.....@0. iGY...:..W..

Chrome Cache Entry: 1229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEKxcbJCz5zyxgFEK_iiZGYg&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	downloaded
Size (bytes):	41150
Entropy (8bit):	5.32836800322513
Encrypted:	false
SSDEEP:	768:jh1KbpBz/i38NOlPM6V3tqUFIru9FITGH4ARR3iLjZJj1wjOfbXhbNvRfuKLBzd2:jh1KbP3B03t7GZG3iLjZJj1wjOfbXhbk
MD5:	03DD89B74FB02695DAFAD8B06F080B69
SHA1:	9405160A8CEAC347E575DBD0C508321AB5AB37CB
SHA-256:	5B9CFA0283D9A9F6A909DF2B61C9933C11130343F08AEC96CDD8F49C29972526
SHA-512:	F865528394AD972A618ECBD6CDC3555B81F65DDE612EEEFE27EE18761CA1A11B2CA3A52FF090CE0D9B200FB73734AD2CD3D8996CB0D284D2D2C017282461A108
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 1231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (7423)
Category:	downloaded
Size (bytes):	531770
Entropy (8bit):	5.52131268862355
Encrypted:	false
SSDEEP:	3072:rdIOMwSGq7jhBTqaqAY8xzPN4EbvagiGNHpP6K5/qkXzzc9c1+0nc7TzMB8llIYu:ndI1uA8K5/qkX89E+0c7nM4VTmBVVVF
MD5:	D295E49EA3B78BB158A40A9FA00BFFB8
SHA1:	D2B9893E05C4813CE4FF8A604CBA9D26746A2BED
SHA-256:	79B97F0903D9907FE04D3F6183BBBB6A6DA3D2A660E5EF65CA5ABCA8FDA024DD
SHA-512:	667DB4DE6150F0DB6572498B3F5668DCD7720FA220BFAB61BE0FAAF1389FE407FFD2027BB49C1A97DAE1B54E4EC650F76A69919BCE778624699F029ACA4BD4DC
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i9144/yl/l/en_GB/2Il807KwZkF.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("LynxGeneration",["LinkshimHandlerConfig","URI"],(function(a,b,c,d,e,f,g){var h,i=new(h\|\|(h=c("URI")))(c("LinkshimHandlerConfig").linkshim_path).setDomain(c("LinkshimHandlerConfig").linkshim_host),j={getShimURI:function(){return new(h\|\|(h=c("URI")))(i)},getLynxURIProtocol:function(a){return c("LinkshimHandlerConfig").always_use_https?"https":a.getProtocol()==="http"?"http":"https"},getShimmedHref:function(a,b,d){var e;a=new(h\|\|(h=c("URI")))(a);var f=j.getLynxURIProtocol(a);a=j.getShimURI().setQueryData((e={},e[c("LinkshimHandlerConfig").linkshim_url_param]=a.toString(),e[c("LinkshimHandlerConfig").linkshim_enc_param]=b,e)).setProtocol(f);b=d==null?void 0:d.trackingNodes;e=d==null?void 0:d.callbacks;b&&b.length&&(a=a.addQueryData("__tn__",b.join("")));e&&e.length&&(a=a.addQueryData("c",e));return a}};a=j;g["default"]=a}),98);.__d("NonFBLinkReferrerProtector",["$","LinkshimHandlerConfig","Parent","URI","cr:5662","setTimeout"],(function(a,b,c,d,e,f){"use strict";var

Chrome Cache Entry: 1232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 1233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=57e618150c70d90&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 1235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (402), with no line terminators
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	5.060962920481377
Encrypted:	false
SSDEEP:	6:BdXdREU2qJhX3q5emVGJHLVEqzuTtmBriRSh0Oma/LQrldRnMwOnpEXeQy3JO9pg:HTFBa5HGJhvaTAjKeW3MTp5Mg
MD5:	BFFF576BBBB3FFEF259FC11BB12BA620
SHA1:	AB6666FDBC95E012D40AE1E2210B66D476C8BA84
SHA-256:	18150938C55F5B965A1580525D4625FB56801C467BE135B49B83362DBD8120A8
SHA-512:	AAB22F42E2232B0247D36076E3E8CA30CF19628004D96FEE1EA1F8279F720224047AA2B8F687DAD065F657DA287C4FF329A91C823F4E690715F06ADABEF4762A
Malicious:	false
Reputation:	low
URL:	https://ad.crwdcntrl.net/5/c=3722/pe=y/callback=g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback?98130053
Preview:	g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback({"Profile": {"tpid":"39eb6d2ba46c2d2b20e3e5915738e262","pid":"72aac350df2b4a40201cac1fd18dfe1f","mapped_ids":[{"namespace":"ADSP","tpid":"604bb3aba77046f19190d795b2aaca34"}],"Audiences": {"Audience":[{"id":"120506","abbr":"ConvNegative"},{"id":"239568","abbr":"239568"},{"id":"39585","abbr":"all"},{"id":"239548","abbr":"239548"}]}}});

Chrome Cache Entry: 1236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/colossus?cls_id=1235620d-4170-4893-8f5c-ee2884cdcd8a&id=AU1D-0100-001716532054-VWROEXDT-D1CK
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1900)
Category:	downloaded
Size (bytes):	408463
Entropy (8bit):	5.526010130392721
Encrypted:	false
SSDEEP:	3072:ylJ+IubpmGZvehUuJyBLYl+khCZCc0I3jOdGCXFUk2JRTCYnlc71H2twiVZ8DKVG:kJwpkABElV8ZFg4lchHuwiVZdV0dl
MD5:	F28932EA4F300B603223470CFA68D237
SHA1:	33A830C1ED066C2FB92F756C2E4172141B42EC28
SHA-256:	4B2C8B6E7978DB1A1BA167674DDB400A9168C48D9DE88016FA0CD5FF9FBE720C
SHA-512:	B8C0C5BCB7EECFCFBB9ACB6B7FD84AB35D861FF4EBA62D4EFCABEC218BC5F26531F6CB01F744EB90B72ABD99751D79EC655D084E454647981841808B10D28A21
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var l,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 1239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://win.eskimi.com/doubleWin?eid=2&w=EiEKFmZWNGFGTUxEb25KODVrenBqZ2l1c0EQAhi15aPK-jEYDCCA9rlBMbgehetRuI4_QXsUrkfheoQ_SI2ohJeEAVj_zQxoAnDYnwJ4sMeDAYABBqIBFjlfLTI4NDk5ODA2MDgyMjM5MDg4NDGpAQ9fJoqQup0_sgEXIAI6DW5ldyB5b3JrIGNpdHlCAnVzSAHCASYIAhCbmbohGK2Oh6EIIAEolSUwBTgIWMLYUGgDcAF4AogBAZABAcoBIDIyMjEwY2E3M2JmMWFmMmVjMmVhY2U3NGE5NmVlMzU22AHD44GP7pKInArhAQAAAAAAQFVA6gECZW7wAd8MgAIBmgIgMmUwM2IxNmI0NDQ0MDRhMGMzMzBmMDJmYTgwZGRjMDOgAgg%3D&esc=false&spent=ZlAzcQAEDw4CJ7F5AAA-FA8OuUGN6xTgdaWPpQ&cbvp=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1232)
Category:	downloaded
Size (bytes):	1395
Entropy (8bit):	5.266269096802252
Encrypted:	false
SSDEEP:	24:8F0nlr3DI/R2u5QjjvGhgeShu57RjAGhOfnKWKdG9576ZXuBrgAk578e5rGhtb:ck5jjvGme0ijAGoPEdGGop7cGv
MD5:	47C2E90594757CB6B9F95CF636965097
SHA1:	EF32BF20B07CC306900618093A7B3319D1F8AB37
SHA-256:	87D6138FD9CDAD41E82B7BE3C0B16E5D6AB375E57BB766ABB98BD9D42A7BD63D
SHA-512:	FCF635C9B28C4417A4C912BA56D2D8D64AB38BDAC97385062B1D5DCDD19D283B919FF74954DD6384D6540D2A7978ECB91269E7A18F00945112F08B7B65BC04C9
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/5/c=4575/rand=374118104/pv=y/int=%23OpR%2341329%23pjnewsletter.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23pjnewsletter.com%20%3A%20Site%20Section%20%3A%20trump-reveals-amazing-2024/adv=%23OpR%2342598%23Referral%20Site%20%3A%20pjnewsletter.com/rt=ifr
Preview:	<html>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>.<html><body><div><img src="https://sync.sharethis.com/lotame?uid=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0" height="1" width="1"><img src="https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=72aac350df2b4a40201cac1fd18dfe1f" width="1" height="1"/><img src="https://token.rubiconproject.com/token?pid=7&puid=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0" height="1" width="1" /><img src="https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=72aac350df2b4a40201cac1fd18dfe1f" width="1" height="1"/><img src="https://match.prod.bidr.io/cookie-sync/lotame?gdpr=0" width="1" height="1"/><img src="https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=72aac350df2b4a40201cac1fd18dfe1f" height="1" width="1" /><img src="https://id5-sync.com/s/19/9.gif?puid=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0" width="0" height="0" /><img src="ht

Chrome Cache Entry: 1242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=MDVlYzYzNWUwOGE3ZWFmZWVjNzM4YWYzNjA3YjIwMzA1ZTlmMjYwMg&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27036
Entropy (8bit):	7.9927146835964145
Encrypted:	true
SSDEEP:	384:1NTsZlPNX71b5OSmAbNVJZQqdDSKknkFAzGauIjc+cNA26zbasfSY3KsmN:1NKlJzyc3ZQ1K5MGau2ACzOsflK9N
MD5:	C234633D08A7793116FE3E5CA74FF6CC
SHA1:	3D0242032CB8A1D153C2A95327CF898A7A8D669A
SHA-256:	350A31932D2C4721D10171938C16ABFA5F5197220BF39B6817DDF2E440DE0BC0
SHA-512:	4A03139079AFC74168ED928F2834EE75233DB0F8D6D1BD066F0BC38FD35007072C05BD720063598AC461176A0777334AF60FB77FAC847EFFB889CFBB3B010151
Malicious:	false
Reputation:	low
URL:	https://s-img.mgid.com/g/19574287/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwczovL2ltZ2hvc3RzLmNvbS90LzIwMjQtMDUvODI1Mjk4LzBlMzNmNTcyZjI2NzU3MWQ3ZWVhNjJkMjhlYzlkYmZiLnBuZw.webp?v=1716532022-QkteOGqeVaRcUJ02RxM5pJXViDpBNmbZFN-ozX0Ytaw
Preview:	RIFF.i..WEBPVP8 .i...V.......>.8.H%."#.x.....bm..J....\.....7....?.~[..l..w..GT...../.../Q../_.....e.b......{.........\G..R.......+...zF.....u.K......z../._..f}..{.C._..w.4>..]...'..0...............@.{...[..W....I..?...{..4...7....$.t...Y.......O.......[..._.........).....g.?..vO.....F.mo[`.dn.d..r........7d.+<[.....3>...n0..D.......3..)A.><.....^...w..n4HhWL....4...;<..C;..6...+._.].l...c3.....Rk......l..C.%+..CF.I..V<....u.."....9... ..1Y.t.8..n.^..b.L......)b.9a3.6.,.P.w.....?7.>..Ui~.O..e.(...D.".4....v..}..,#./.....@ ..f,.,...#....q.>.Z..X..,...C..j.:u..P.3..1..".;..e?.;........_.(\>?C.yu.....u..g1..S@>%.UR...>bu.....&..;..X.i/.....9.......E...Q..i...8...1...=+...}.......&.. N.;.?..'i.Y.<.J.-.g.........c.....)..t..o.E8z..bA.y..k{.[.ACV9...%.9..&.5Mg....JK.....U.}....)..........^*D.p....N.4E..K..(".U.iu_. n.1.@o1.ya..,g....} o.&..q....BQ..ks...~....)...mh.. A.Z.4\........k..n#..XN.&...?X{...<.W......!Hr..............&..a..C.

Chrome Cache Entry: 1244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4276)
Category:	downloaded
Size (bytes):	4499
Entropy (8bit):	5.158024129706151
Encrypted:	false
SSDEEP:	96:moFsXrQRjn47VTO40Ki9G7X30CBogB9LCam:TFskRjn47MKi9G7n0CBogB9Tm
MD5:	2BF82D59DEDFE9B01C8585D9591FCBAD
SHA1:	214E1A92C2D7DF4C69FE763B2990679C50E9A5DD
SHA-256:	02D163C67EF85938C8BCD6E7C466D9FB2A160421302DD6DEDE20561E624B9741
SHA-512:	D7F4F583A06D41A558D18405418EC59223BD20E1B65722290E3405AF1F5E4BC1ECE2E35F72E5341B491C309C2008F23464C02CE4ABFCEA0BE59C11E05BD74103
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi.8f8260ba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.Articles~bundle.Audi"],{76372:(e,t,s)=>{s.d(t,{Z:()=>_});var o=s(7896),i=s(2784),r=s(25686),n=s(1477),h=s(16587),d=s(48501),l=s(28377),c=s(75202),a=s(27745);class _ extends i.Component{constructor(e,t){super(e,t),this._unmounted=!1,this._handleResize=()=>{const{viewport:e}=this.state;e&&e instanceof a.Z&&e.notifyRectChanged()},this._handleViewRef=e=>{const{onViewportSet:t}=this.props;e&&this._lastRef!==e&&window.requestAnimationFrame((()=>{if(!this._unmounted){n.Z.unobserveAll(this._lastRef),this._lastRef=e,n.Z.observe(e,this._handleResize);const s=this._getViewport(e);this.setState({viewport:s}),t&&t(s)}}))},this._getDataSet=(0,h.Z)(((e={})=>({...e,viewportview:"true"}))),this.state={viewport:void 0}}render(){const{children:e,dataSet:t,onViewportSet:s,...n}=this.props,{viewport:h}=this.stat

Chrome Cache Entry: 1246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3571)
Category:	downloaded
Size (bytes):	3753
Entropy (8bit):	5.574840861071505
Encrypted:	false
SSDEEP:	48:iIIJV31FZ75msX/OYngDHmDQvBKLipLpl8EzGMSL4B+v4U5CF+21DJzMP69FEWm9:M/loeDSwqVdK5vvuQsSinETv
MD5:	F7965ABBAF030D628302E6FED892CD90
SHA1:	19FD52FF14609A1D7B7AE36A3DBA02D90397C796
SHA-256:	6C30C8431D811A26BEEC54A912A7A418B73767034A8E7FA874A50B9333302693
SHA-512:	383EA9C0FE0B86D302E00CEF661BCE23C7B14075D7D49ED06992E5BDD8C5C340155D3FC0CD94DD00ADFDFA938D2647972A9833B28922F7342D40C3EBB8E14BFA
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery.1205694a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~bundle.AudioSpaceDiscovery","bundle.AudioSpaceAnalytics"],{20604:(e,s,t)=>{t.d(s,{ZP:()=>k,UJ:()=>S});t(6886),t(36728);var o=t(2784),r=t(25686),i=t(73186),n=t(82392),a=t(45184),c=t.n(a),u=t(66927),l=t(1206),d=t(68547),p=t(66961),h=t(76687),m=t(48501),b=t(92160),g=t(16657);const y=(0,b.Z)().propsFromState((()=>({viewerUser:g.ZP.selectViewerUser}))).adjustStateProps((({viewerUser:e})=>({viewerUserScreenName:e?e.screen_name:void 0}))),q=c().b47e760e,w=c().fd2c7b44,v=new u.Z,S=e=>v.subscribe(e).unsubscribe;class _ extends o.Component{constructor(...e){super(...e),this._bindKeyboardShortcuts=()=>{const{history:e,viewerUserScreenName:s}=this.props,t=(s,t={})=>e.push({pathname:s,state:{...t,source:"keyboard_shortcut"}}),o=e=>s=>{s.preventDefault(),v.getListeners().length?v.notify(e):t("/explore",{searchFocused:!0,searchPrefill:e})},r={[p.uq.lab

Chrome Cache Entry: 1247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	64756
Entropy (8bit):	5.225827032715958
Encrypted:	false
SSDEEP:	768:OmzGTKHFfqqFgt1qNy/eGvs6jfsrP0bz8JpvegbKUAWKwIM:jFq/noy/ekfIY8JF6S
MD5:	679A3A4A17037D73A8C5289E662E71BE
SHA1:	9C67A9F0AE800CD4758FED2C9C108C6CB89B66FA
SHA-256:	0E7D78CFE6AD5ABCC9E7AEABE78DE85A2BB8DA203CFB48C83C1015F3FFA873A8
SHA-512:	832D7841382B699B6C98F0C1B1AEED00C15A8EAFE912D530DBB4C5A2E686315357BE323159F1AEA8DE77B1389B681B98FC2F7F94E91BFB31D7BA66DCD9858A77
Malicious:	false
Reputation:	low
Preview:	....KEYF..$... .........................8..........B...B...?..pB............RandomSubdocument...................B#.............B...B...?..pB.................~..Tk...X...D..d1..........N#..............\...`...d.......\|........... ...8...................`...<............4.=...>W..?..'?..:?............................~..................?..?.......>...................?..?.....[.=..>..................a?UUU?.......?...................?"......>...................?0....[.=..><......=...=H...`..=`..=T...\..=\..=`......=...=l.....=..=x......=...=.......B.......B..............pB..pB........................ ...........D....... ...8...................`...<.........<N.=4..>.[.?.c+?N.>?..........=....5..>5...................8......?..?R......>............X......?..?d.....>..>R...........\|...UUU?UUU?.......?r..................?.......>...................?......>..>...............?...?............ ...........p.........<N.=4..>............<... ...................0......C`...............

Chrome Cache Entry: 1249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/51acd139-e56b-e718-c937-224392025bee?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	319048
Entropy (8bit):	7.9967406573122375
Encrypted:	true
SSDEEP:	6144:+iJxZ77XjvIHnrp5jKNz9gQQ0zOcQpyxNCj94wEQo5XQUBOn6l:BxZ3TQLpwNVzzVx6lEfXyK
MD5:	9EE2B3B8AC54FD9DAFB60074D88676A1
SHA1:	F591568BC632F79796984E627D8663DF6D4C2D69
SHA-256:	BFA36B4BF70E18714E6FEE8A8CC729CF343EDA535AF30DA1C887EAD48A5C7B8C
SHA-512:	C84EBA2F70AC64C3C566A133CCD7694E363F98DFB406EF0EBBF7639F6F8E8A8E3ED65C3D61ED3AFC349EC452553D354E4FEF791B6EA1B090CC6EA69CE1473FE7
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/05/biden-congress-1024x538.png
Preview:	RIFF@...WEBPVP8L3.../.C.......4.'...e....2.l.....I,..I...d.......y.u.2..K2$.v.H...N....P._D.x..Q......0x!..dD." B.........D..=.!D.,.f!..QMx.P...e.2`.`....P....R.%h......BXT4p( @g.LZ.N.......TZ#N.;.....5hD...[%....P.T...... S.VP[...bb......G...\fDcu.ph.a.I.w.I.GY._..3.,A..5.hP-[.E.i.`p2W...%....gZ+-..3.....`.....@...U.?Y+....PT..(J$r8.N...M..@.<.,:I@..W..`.X...[XZ.I.Z....n.....H......2....a'.A....z.$..\z.8....v%..k.1.^...@..5....Q..A....T.......)..Z.-..6"...<[..&\|...#p....g.......B.+_{.vN.....M.D....~.ZN.s}...&.....}....i..~Z.wI/YH.`.}.......k..w..zN........ie......;..+GG...hv..yF.I........yZ.r..H...-..(.I........r...R.m.J..m...HF.DPD.@)......HHD. !(...P....O8j..Z+...xH....Z..{m....~....)...>.~.v...ED.21...~4.R...<.....z..V......#9is.I.....h$.....wg../4..e..4.Hj..k...."U.a.......5T.a.\.=....L........C....z.E. .u.;.J.;s-p.........k-.F......q..yn.[.JU*.%K.c.PI%..XR.%...h...3........'...lpH.....M..I...<.=&}..9.}.......r.\|NN..=.}]k}.O

Chrome Cache Entry: 1252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/ppnt_match?uid=Mfm5DWu5r7XL&ev=1&pid=562316&id=AU1D-0100-001716532054-VWROEXDT-D1CK
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	3.930990186162398
Encrypted:	false
SSDEEP:	3:fuMLQJaecD1jn:2LaLdn
MD5:	B244E5087B64B137E3659C21B48E6D6D
SHA1:	B3D17CB434D8500280BE34A51AB0ECE2725E8E73
SHA-256:	F26847BEA8592279409A22D8F1446C16F02C238B701DA3FD165995917F3A69CA
SHA-512:	72F81985409461740CA705180EDCDD7EB4A4036CC0AD11CBCD851420D92EF3E097BFB1EC357CCCC8CBE826C7C5CF3206EC7080E7F43229C1F2A8E4B3FC7F2E8C
Malicious:	false
Reputation:	low
URL:	https://4.adsco.re/
Preview:	8.46.123.175,953ee6681b10db530f0a8c8646bbc31e

Chrome Cache Entry: 1254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (27355)
Category:	downloaded
Size (bytes):	37074
Entropy (8bit):	5.45359961932555
Encrypted:	false
SSDEEP:	768:Ziw/wFyc2KBdMtCGsOlBS1+dfz4wDQjZvy/RQWwY4RXrqt:ZtwFTBOtCGhBSIxDQjZK/RQWwY4RXrU
MD5:	A761A4F89F526B3B9E58B2B2F2763129
SHA1:	1F0CD8BF3B1009FD737786486E3B74AFB2608238
SHA-256:	4868F41E27D456C48F916BF8F99A29FBA61A0DB6E39257856A77393D0D1DAA27
SHA-512:	D5DA8D749CCD6B1858399189E680DEE1757BD356E077AE96CC11FCFA41A2DA83DAFCA6E49749493C9DD0915D32B7563C54BAD40E7AA4E76C2A7A58925A4D2EF4
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU322PTV&prvid=2034%2C2031%2C2030%2C2074%2C2029%2C2106%2C2028%2C2027%2C2026%2C2025%2C2069%2C437%2C97%2C2109%2C99%2C2045%2C3012%2C2043%2C2087%2C2120%2C201%2C246%2C4%2C521%2C126%2C203%2C2037%2C2113%2C446%2C9%2C2099%2C173%2C251%2C175%2C450%2C2009%2C2126%2C3017%2C2125%2C214%2C338%2C459%2C77%2C2022%2C141%2C262%2C461%2C222%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","lookup":{"ppt":{"name":"ppt","time":350,"cookie":"data-p","urls":[{"type":"iframe","url":"https:\/\/bh.contextweb.com\/bh\/rtset?pid=560210&ev=1&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D%3Cvsid%3E%26type%3Dppt%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26axid_e%3D<axid_e>%26ovsid%3D%25%25VGUID%25%25","eu_url":null}],"pvid":28,"isBl":0,"g":1,"cocs":0},"con":{"name":"con","time":364,"cookie":"data-co","urls":[{"type":"img","url":"https:\/\/medianet-match.dotomi.com\/match\/bounce\/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D%3Cvsid%3E%26type%3Dcon%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26axid_e%3D<axid_e>%

Chrome Cache Entry: 1255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 1256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 1257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7572
Entropy (8bit):	7.900845067462685
Encrypted:	false
SSDEEP:	192:eyc0CF67k382XtCXE2USe8qSLkdtHTpwDjgxTC06ZmrLwhYL04:eycU2sEKLPLW0kT1ZHL
MD5:	D26B227B068AD3C133650B12B8ED65B9
SHA1:	04EB2F1FDBCC591C4489636FB80216AEA84E089C
SHA-256:	E10D71A25089ACDD595EB1AE284F7F37D733FDE53383329A46745BB329D6F671
SHA-512:	D8A0625E08E70214192361EA2C044F648704F448E78A5AD98C305ABF547E94CB810D48A5DD2EB2FF7A1C0A9DABF04B627E5F9B2F257B2BD2030E083DDF6A1C54
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000890300001e070000420800001c090000a00d0000ac120000291300008714000096150000941d0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................h.....T.'`.....e?1[..........N..j.)..9.K.wH...9.FI..l....P\.{=.;.yc.=.<.......\;r7...!.%..>..\|.p.@..L.PLVqD.s<E8........3.):..<.......e.}....+.'...h..d.i.....gzB.b..X..Ek....y..M..w..sGK...+..&..<. x3..k.{<b`hn...`...\|^5q._K...P+-=.tdhb.c.0.~... .e..k..k.}..$x..dk......B.^...a.g.a....Dl..y6.P.$.{...y.g2k.......}...a.,..Z.....4.w.._..5..........v....)`.[RU.C....\|..Q...eR.apj....jfc..#6V.H$.<...ZM.D..Kb..+...;..E.iuUL[Y'.)m..H.yZ.[..f.....+...........................1...!"2 3.#A4B..............S.....gr!.....A..J#...2&....f....FG..m...r..?..<.{2...q.V.p.....L........T

Chrome Cache Entry: 1258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4074)
Category:	downloaded
Size (bytes):	4297
Entropy (8bit):	5.261567412258206
Encrypted:	false
SSDEEP:	96:O6svrFWGWXvn+ExG0RS3UkJ1X2+xuRA7/bn82a6C:oFknr5bkPtxuRAHn8j
MD5:	F0BFAF5132F2CF2BEBC4BFECDA9A6017
SHA1:	EB1E78C63A42B47F39230C3FFD3ED14C7E0DFE00
SHA-256:	4E9B6BAAEB90207EAA13EB37874D81B8599D7E2177D63765924C38AB18CD3EE1
SHA-512:	EDF644F9FBAC8767F6EBEEAEF07955EBB9E9D7357342F81111AAB5790C47EE926B8C0EB5D6F545DFD6AB66831D6CC721153991B0D3CA1B50172BB16549BCEF3B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpaceStart~bundle.TwitterArticles~bundle.Compose~ondemand.ComposeScheduling~bundle.Setting.79940e7a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AudioSpaceStart~bundle.TwitterArticles~bundle.Compose~ondemand.ComposeScheduling~bundle.Setting"],{85204:(e,t,r)=>{r.d(t,{ZP:()=>g});r(6886);var s=r(2784),o=r(25686),i=r(35131),a=r(40190),n=r(51384),l=r(82392),d=r(40080),c=r(15686),p=r(73186);const h=s.forwardRef(((e,t)=>(0,d.Z)("select",{...e,ref:t}))),u=e=>(0,d.Z)("option",e);let b=1;class _ extends s.PureComponent{constructor(e){super(e),this._selectRef=s.createRef(),this.state={isFocused:!1},this._handleChange=e=>{const{onChange:t,withEmptyOption:r}=this.props,{selectedIndex:s,value:o}=e.target;t&&t(o,s-(r?1:0))},this._handleBlur=e=>{const{onBlur:t}=this.props;this.setState({isFocused:!1}),t&&t()},this._handleFocus=e=>{const{onFocus:t}=this.props;this.setState({isFocused:!0}),t&&t()},this._id=`SELECTOR_${b}`,this._errorID=`${this._id}_ERROR`,this._helperID=`${this._id}_HELP`,this._labelID=`${this._id}_LABEL`,b+

Chrome Cache Entry: 1259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-6EDY1BF25J&gacid=1010184661.1716532012&gtm=45je45m0v886867345z8848813796za200zb848813796&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=209022674
Preview:	<html></html>

Chrome Cache Entry: 1260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7103%2C22652678936%2C187271864%2FSMG_Aniview%2Fpreroll%2Fsyndication_2&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&tfcd=0&npa=0&sz=640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=1367849102038363&vpa=auto&vpmute=1&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1612236560&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44776494%2C44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dlt=1716532081489&idt=7746&dt=1716532089546&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=3332235650527490&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td9_tt1_pd9_la9000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3051
Entropy (8bit):	4.414899438809683
Encrypted:	false
SSDEEP:	48:DZRCftuQhfJx4WiL+bLoWz4jm9diSViTCKN5M:Dv4UWikLod6viSVi2W5M
MD5:	6535DD57B4099C295512E6EFDF0072F6
SHA1:	327637B04822E7BED81711E0D6D73DF2D035F852
SHA-256:	D3D6A358BDD82178F93A2C6EB3148203E0488F06319F69809798656B1C3F9506
SHA-512:	11C98215BFCF562C2332A46E5F31769FA24E8F3E0FE5B55ED11A2BC4515952397397C0730BD0A30E520D79652DF4F4A7B6CFDDA4AB6728B8B6F539EF444126E8
Malicious:	false
Reputation:	low
URL:	https://proton.ad.gt/join-ad-interest-groups.html?evid=O3EASLW0
Preview:	<!DOCTYPE html>.<html>..<head>. <meta charset="utf-8" />. <meta name="viewport" content="width=device-width,initial-scale=1" />. <meta http-equiv="origin-trial". content="A7EJXd+QZ2JL/N8k85e+yMFGsIkETopEYjLMJjZMUYg51sgbRqLKdhW9nOiyEdVwWCOq8YRHOx+w9GQ8D9HqeAoAAACCeyJvcmlnaW4iOiJodHRwczovL2F1ZGlnZW50LmNvbTo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==" />. <title>Audigent Proton</title>. <script>. !function (w, d) {. const PROFILER_SERVICE_URL = 'https://p.ad.gt';.. function addTrackingPixel(interestGroupNames, eventId) {. if (eventId != null) {. const payload = {. 'events': [{. 'type': 'dsp_js_load',. 'igs': interestGroupNames,. 'evid': eventId. }]. };. c

Chrome Cache Entry: 1262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5852)
Category:	downloaded
Size (bytes):	6032
Entropy (8bit):	4.397236553196237
Encrypted:	false
SSDEEP:	96:OmqM5HYeWKgbt9ptiVQpfJ5iJGjqpt1I7yglM/hGiwV8aXRhub77lE1+/8t1wVfW:hB4nKgjprBwJPgyCM/y6aXRIP7u18u1r
MD5:	7CFEA1371F54279AD8A6C74AD372B481
SHA1:	10B25BA8778013E2D9B6B4A3B261BBF1B533528A
SHA-256:	AEAD4CA3C9D25ECD2B0E7F99EE40EDC82861D83885A79BB9CCE8446E971A1C1B
SHA-512:	F187842DBBF0FB07AC12488CB21E8114DD7DE6DEC106C3180D910E1DC10A8F5556C9ADDECB5DD3CACC39059BBD59A497D33F2B2CF7CF2354DD90BADBAF9B410F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.Place~icons/IconFoursquareNoMargin-js.54ea6afa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~bundle.Place~icons/IconFoursquareNoMargin-js"],{11712:(c,h,e)=>{e.r(h),e.d(h,{default:()=>i});var v=e(2784),l=e(8543),m=e(83427),t=e(73569);const r=(c={})=>{const{direction:h}=(0,m.Z)();return(0,l.Z)("svg",{...c,role:c["aria-label"]?c.role\|\|"img":void 0,"aria-hidden":void 0===c["aria-label"],style:[t.Z.root,c.style],viewBox:"0 0 158 20",children:v.createElement("g",null,v.createElement("path",{d:"M1.29 9.333v3.992H0V4.31h3.412c.876 0 1.443.22 1.88.593.54.464.89 1.147.89 1.92 0 .772-.35 1.454-.89 1.918-.437.375-1.004.593-1.88.593H1.29M3.35 8.11c.618 0 .953-.155 1.185-.4.22-.23.36-.54.36-.888s-.142-.657-.36-.888c-.232-.245-.567-.4-1.185-.4H1.29V8.11h2.06zm6.155-.966c1.79 0 3.13 1.352 3.13 3.155 0 1.802-1.34 3.154-3.13 3.154-1.79 0-3.13-1.352-3.13-3.155 0-1.803 1.34-3.156 3.13-3.156m0 5.152c1.12 0 1.906-.89 1.906-1.996 0-1.108-.785-1.996-1.905-1.996S7.6 9.192

Chrome Cache Entry: 1263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4152)
Category:	downloaded
Size (bytes):	4375
Entropy (8bit):	5.311719978279525
Encrypted:	false
SSDEEP:	48:iIRHmNZbuh/jqt4Gbsij4qRQ3R38hHQESr6UAb08/e0VW7Dbg3+3+y/Sru05mgPM:lOb2/TijFahTr63WTcvaAm/n1M990hj
MD5:	B96991CB5E2FC3FB4481D9CB93CF49C4
SHA1:	1BD06B9A78686E51A2591C8FFB6861FE32EEC9D7
SHA-256:	E4F475BB69439E2E1D564B808EA8AFAEC096AE357B0412CE0E8C45D4C81EAE90
SHA-512:	2AB90005ED2432F917CE9E073DE7949C895B9C44D2A98EB4CACA7E24ECAE10A2F6DE699E28736C7562EF2055E8B708F4782D80A444812976F3978225180BBB42
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings.7debc35a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.AccountAnalytics~bundle.Communities~ondemand.SettingsInternals~ondemand.Settings"],{92051:(e,r,n)=>{n.d(r,{i:()=>h.ZP,z:()=>k});n(6886);var t=n(2784),o=n(28123),u=n.n(o),a=n(72845),c=n.n(a),l=n(57074),i=n.n(l),s=n(1206),d=n(63174),f=n(23335),y=n(72599),h=n(23803);const v=({render:e})=>e({fetchStatus:h.ZP.LOADING,data:null,error:null,retry:s.Z});class p extends t.Component{constructor(...e){super(...e),this.state={error:null}}static getDerivedStateFromError(e){return{error:e}}componentDidCatch(e,r){if(!(e instanceof d.Z))throw e;this.props.errorHandler(e),(0,y.Hj)(e,{level:"warning",tags:{userVisible:!0}})}render(){return this.props.children(this.state.error,this.props.retry)}}const m=({query:e,queryRef:r,render:n})=>{const t=u()(e,r);return n({fetchStatus:h.ZP.LOADED,data:t,error:null,retry:s.Z})},k=(e,r)=>function({fetchPolicy:n="store-or-network",r

Chrome Cache Entry: 1265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5630
Entropy (8bit):	5.162335072997965
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNxYrR79PaQxJbBwLq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNKr59ieJBm5
MD5:	9001C75A6A2AA4BF4FCBBDAD576BC36E
SHA1:	46DFF080951A6F7EF3AE90AE3A11FD4E10678CF9
SHA-256:	1C767FF6AA0828859A2EADE6B3F5A7878C86086CA05B4D40FEA2451DDB3B20E1
SHA-512:	A1083F188C5D590EC7F59395AB2340C601D81E04696F7EB26FF4059FAE9B0E7686EF6F9A67ACDD2D94323156CC71B4CC120E354794D40CC96940782C431FD396
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 1266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.988231661403621
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiOzt5TpmH/nM:8WiIUemo/HPbfCYKpY4DCVeELABZjmHU
MD5:	D7751D30983759C80820E17A41BEA462
SHA1:	076084757B70922F93E1B6EE663287A6B568F377
SHA-256:	C36CBF0C5FEF531A43CFA6CE4659FAF63F3FDACD3EF79D6280B88C75FC1C0A77
SHA-512:	2BF3AF2C8BCBA9D50EA6CB4E46F98FAE70026EE5E64A4B25CB47718E4F2582A85EEEC04A38B9AF8BADD74219AA24F2ADF20CAF599DCD007B63F9F1E903B32B5C
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&pr=https%3A%2F%2Fpjnewsletter.com%2F&pid=8kYxv30bs4uTT&cb=1&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043eec5-ae4e-47b4-b8a2-caec03297ff8&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22%257B%2522id%2522%253A%257B%2522hadronId%2522%253A%25220001yum0ea99jha6clfcgeaikjhlll68igi8eiflgfabackkc2jl%2522%257D%257D%22%2C%22id5%22%3A%22ID5*GCXlQwA6TIr5I2oPS-HCzJYkNfHooxCNfIbq27tYAtGhKb7pbItrgiUEls4JuzP_%22%2C%22lotame%22%3A%222a6b5bfc26c4271a6d08d61f53e3185ca02c0303ba90d4ca8d8b1e4062883277%22%2C%22pubcommon%22%3A%22a765ec8d-6663-47cd-ab57-34873e7f277c%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"1"})

Chrome Cache Entry: 1267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?cb=1716532090214
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 1269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 1270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 7756, version 1.0
Category:	downloaded
Size (bytes):	7756
Entropy (8bit):	7.927264618844438
Encrypted:	false
SSDEEP:	192:7JpwPfCs+0qhMjx564dkgSAO6BsEC1FzkvdI/Vhor7g0:7JGfCsVcM956oSAFsEC1Fw29KrJ
MD5:	3E23F19DBB39650BA97C873FB3151835
SHA1:	F686712BB2A373075A8B0CAD905E31F5AD3FFE08
SHA-256:	038E857C929CDB13F93D776F1B664C0B6CD25074B65EF6D739D06734DB1E45B8
SHA-512:	CE79F9D6BAFDE394D0CA17C4FF4D1ACCEAB1DE85441BB81A306D4C217CEF16C33268A8BC49DD9C10F74598D9D4DA8D753F64246BA1598443F350901B6B585564
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.woff?ver=4.4.4
Preview:	wOFF.......L......,.........................FFTM...0.........Z.oGDEF.............'.@OS/2.......D...Vo.8cmap...$.......j..W.gasp................glyf...8...K..#.s...head...0...(...6#$.{hhea...X.......$./.;hmtx.......O....qk..loca.......v...v.3..maxp...p....... ....name..............K.post................x.c`d``.b.l....6_....@.!..=2.....P.....x.c`d``b..=0.b32..+....qx.c`d``.b.f.`..& fd..9..........x.c`d..8......1.....J.e.dha``b`ef..F...8' .5....@.........j.......x.c....L....J@.C..>P:.M.$.~_(..I..JG#...[......@..f...".]...bQ.....X....`....x.c```f.`..F..H....\|... ........d.2.2D1T............!........G..e.5..0.u.........t.@'......sprq............KHJI...A......UT..54..ut......ML..-0....."...............>.....J........."...4.....h.....~.....T...D..... .@...l...~... .V.p.....B.........J.b...0...........<..........x.}z{...yg.U].5....<vfg.gzvwvg..j..].Iq..$K.C.iJ.H.h=b)0....(....V....8.$.."[..D...6....$.O..s....p.CpA....zv)....LuuuuuU}....z..l*].+.C%R..........I...G...Z#Y.A:.P.....

Chrome Cache Entry: 1271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1921)
Category:	downloaded
Size (bytes):	433874
Entropy (8bit):	5.602000724930819
Encrypted:	false
SSDEEP:	12288:ZLCRo2fNB4rgZJ3igVCyZzvQ1zQrAQjj+bpaA0jE/k0dhjj5hCuX8rer/xIDsxCF:ZLCRo2fNB4rgZJ3igVFZzvQ1zQrAWj+o
MD5:	361DBB9B934DAE78A4A490513EF17120
SHA1:	163E051BC378169B6197767DDA41529DB07B60EE
SHA-256:	6C5365A784FD6924A53B6082198B016BB8F935B7649C2D209BC02CD609BD0165
SHA-512:	9020A37424D5F8957BBDC6376A6C2706B1F882758F4F6BC09AA59BB00F72837D6FA4BF3D46B67718898EA41040E82E7084190D1515AC1BF8E586440637ECE98F
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202405220101/show_ads_impl_fy2021.js?bust=31083940
Preview:	(function(sttc){'use strict';var q,aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),ea={},fa={};function ha(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function ma(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0===fa[d]&&(a=1E9*Math.random()>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 1272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	6756
Entropy (8bit):	4.943823679998798
Encrypted:	false
SSDEEP:	192:Gzlkq+gKr4qpYt0pSjgiJ0MwHa4o+lld/9p6:1qxKr4qSoSjgiJ0XHDhlld/j6
MD5:	AAC18EC46CDFF4E56D77EC8EE1DEC2C1
SHA1:	81F294310D14E041A3E3F58595A33306097DE207
SHA-256:	E13171DD374E3750F9CCFC1B8AFAF4D4BBAA6838C9550FD3ECC9A39D9EA128FB
SHA-512:	C23CF65449B2ADD4BF6689CE5FB7D3904D057FB008E5C5494447872EB4D7450D5A455ADFC32B64894CCC781179CD7E6BB48C8EE4C2F62C271C57ED5349948D53
Malicious:	false
Reputation:	low
Preview:	....KEYF....................@.....1C..1C.."@...A......................................................0.................................................H.......$...(...,.......p.......l......?...?.......B.......B............................(...@...X...p.......0...... ..............................................(...8...<...@...P...............@....r..$....... .....+?..+?8......@@.....1?H.......D....A.A\...........................\|...@................... ...........{.>@q=.A....\.....A......?Aq=.A<........... ...........\...=..@....{.>@........\.....cAt........... .............A........q=.A=..@......?A................ .......4...q=.A..A@.....Aq=.AL...q=.A..cAl.......`.....?Aq=.A............................................ .......H...$..............>..{?.....a.?..u?.a.?...................?..?.......>...................?..?.......>............H.:?H.:?(.....@0....r.@8.......4...]..?\@'A....................$...(...,...4.......t..................c.T.......k.................

Chrome Cache Entry: 1274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 1276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	159916
Entropy (8bit):	7.995997654686461
Encrypted:	true
SSDEEP:	3072:BpG0rfjNYAV9HeGSzsMEZy5EvdiQimviOzpX4P89GJv5tOjtw156Mkcwf5M:Bk0r7NYfzsNddi7QBzl4kcJv5wQ+cwe
MD5:	75F8C0DDCA27414BAFC33F3DB1350A42
SHA1:	B9A823F79AA7063EB25704DC2071CA5FFEAD5DF8
SHA-256:	8D0B1AE485B1B0B2E301F2F7D3A81DA3147CC0C5F18971E287C45F539552D35A
SHA-512:	9FB3C2874881AAFE58AC134AC57EA1844D3DFDE24001B1FDACD625F25070833B1139E79FACEE87FDBB4CDD289356E0BA6F9F1CA0FE9A0201F1FFB6807D3BB871
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/05/supremecourt-climateprotest-768x403.png
Preview:	RIFF.p..WEBPVP8L.p../..d....%E..,.n.m..Y.....Cij.6 I.....a...,.Q....'..i&.....$.P8f...pK..7....1...?4..dA...H....THc6r.aP..C}......na.."..Bl..O.P..../.....c..C.x!:.0.qD.e@@....I2...A.LyA.@...".F\.%H#6..A....[.........$...@.Pt...J..J.T..4Pg1........g.L...A..$(.0'u....g.+....r1.../pt<..P.?j......?.......h.dijT..f&..l%..."....P..Fm.P.M...:../..k.S^.....L..g.b1EvQ..Y.*I..K\|...t.1U.C...{.m..........A..R.....XX..i.n?.)..7...k.B.&uK8n.........U..^.!....A.(..R.(....j...@....I..~m.XTx(IN..P?.Yg...G._.I.....5~L..X.;....3..L.Y[?..q.q.B..._J..8....y...`.........p....X..DI...........M............W.......o.....M.E.`..9.m...p...s...6.X..%_v..R.2CD(l...qKqni...[.....q2J..m+.~...b..:w.m...A!...D..EDQJ.4<_. (XJ..{.._.+....O7U....... ..TUp.m.....Bj..E..j. o=.a.r.\y.?X.......^.).."..%.......>.....5..."..".. ..K=..ge.i,..L^o.szr.y.um...g...N{......?%H..6R..UY.8..D.....K..$..&.d".@"X..h..../.....2....`....%.H...o...Y#.l....".b.a.3"{..5.gn`.....s.6W.;..9....Z..T..

Chrome Cache Entry: 1277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3968)
Category:	downloaded
Size (bytes):	153008
Entropy (8bit):	5.601071405389905
Encrypted:	false
SSDEEP:	3072:jlK3p0l44365XNtn+hLYu2b88wT3OBUfV7cJhKrPV3J7lLsmAKyHpvhXReX16:jw3pf4365XNtn+hMFo8UeB2V7KhKZ3Ji
MD5:	12C4989C06D28B23AE7A44D9E3DE2A61
SHA1:	49AFDF3196114C8114EE510EDA7D1BEAD9D4172F
SHA-256:	2D64CBC8B9428C4740BB6C4F953457F42C06EF7BF1D351FC333CAADFBAF416F3
SHA-512:	B999A569D6CD66C1609363E720B9DDD69DD0D9766987108774E897C077BD6829B6284BA38B2C7026726B4C05AB109A6F730E53860083C30672182FCE1DAA2612
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-7666278362879166
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 1278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmQqtdILa8ulTWckC3Yhg1bJAIJRXMR_BnAWVmVVil-mO42GW2-T5BgAFP23Pe0k4559P8qkpuN1lhABghDNUHb4DB6TYt5CvRw&google_hm=Egzl29NeTxaDR_WKUf07Gw==&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23549
Entropy (8bit):	5.497269137822647
Encrypted:	false
SSDEEP:	384:kM/aDTs8RJbt81z0xObdLZNjsoSoX/KPH7T3BZJfrL2TeWNrpKyzy4dYlkWyv7+X:J/aXsMJt8x+SdLZNQtoX/KPH71TrL2TQ
MD5:	04D54855E108E62BB5D4B0F48931940D
SHA1:	D09FADCC7BAF9DEB38F01A02E7F331CB2AE4F6D6
SHA-256:	36EA295580B6AE83E3E1D6B4BDF7564AF630736A9D46E3A7E8B7AACAF96B1DCD
SHA-512:	0DFA11277B4E15C426FD0092A73BE9B6B1C7A5C2DAA3880373F54DFE6CD8A377F612F4C6F79ECBA9EDAE7D5F1DF8964E77078E10F638282C7FBEF412A54CA716
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 1280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x155, components 3
Category:	dropped
Size (bytes):	6113
Entropy (8bit):	7.857897729545636
Encrypted:	false
SSDEEP:	96:tYCtHNm9LjAISzoHRlXA4zhiDzZWMLBehRPHoajPLeKsgyEMHeUIrDYK98hkwa:GecAJmXnzhiD5q7HskMHe5DT+Pa
MD5:	571D5B1DB829AEC8E2D88AE55AF527ED
SHA1:	05CFAF0AD52ABD0A1B90A093C6371B8B861457F5
SHA-256:	6F1AE6739830DFA6DA15C86E97F900BFDDFA0FCD7E2B2F93E5D2A2368F47BEC5
SHA-512:	CED8A5A1F70E3D3AD8D0184525A6AD37787AE92D19BEFC8671D3E3031D4F096BE3F7208FE14730FA64AA9F1AA90CF923628D186CEA838517F855B23C62BE7DDA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100004c030000500600004b07000018080000120b00000a0f00008b0f00009710000063110000e1170000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...................................................................................r...thWD$.R.q.....3...k".q...!F.8?9.N=\Y.-/......R...gG.3...@+Y>k?G$.... .9b.I.n'.6....\|...;C.. ....+.v.#..!...y......R...)..OL..._...[zY.:}.u,$.xC.6.........t ...y...R....[.q.<..g.j.....-GBh...P.....N\|]..}H..c~^n..g...d.}.k.6...W......$ygg..x.f...UoQ.Y;..KL.<3ha.kKOb..QXy......Q..p#...B...Au...v.J-..0..Y.0.aH5...=t-I.....)....1.HJX.[..K.q.,...<7\|4.Z...2M..l2..ck.Z...,l....../.-.q.e....J..q...+............................ !"12#A.034@B...........m.....,.....M;...;..f.e..\.u.[f.O\|...hgl6v.;Z.m\.I.b..4.A8.3...)..7..S.&n.x....Es..wU...9.w..0...c...Oqd.r<..S.?.J.".V.8.H.t.5.o...{.

Chrome Cache Entry: 1282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 1283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	6.991335815776394
Encrypted:	false
SSDEEP:	6:6v/lhP70wS7/6TsR/55XxKpoqPrQj6NLFO1h1TKzPJ9rsKMvc7Fdc58adX4NRwhG:6v/7M7/6Ts/51xeoqPrQONLFO1isE7Fj
MD5:	E1B87AFEDB16651B65DE3C4459639ADB
SHA1:	2359F5E9EDA21DCAD55F0C59A1FA1D587F5CF829
SHA-256:	04DD17131968A07C34224FB2E34A25D3BDD06FED40C6025F20ECDFC9E6EFF2A0
SHA-512:	79D3F3B1534A55CB1E2B13979D2AC8B557FAA8E64515B1F52B3FDCBAF0E1A71CAE3A52635E819CC24272F11C49AFA7C8CDA9C8F30BE765B557B36169A6D8DAA7
Malicious:	false
Reputation:	low
URL:	https://dsp-media.eskimi.com/upload/wl/eskimi/adchoice_logo_15x15_v2.png?_=2.1.0.9
Preview:	.PNG........IHDR.............;.J....pHYs.................sRGB.........gAMA......a.....IDATx......A.E...2.L..,.+0P432..L......S.Ssc..PP02T......(*..8.8...@.t...R.......3do...S......:.j...Z.Q+M..`y.d".....;..9.PD..q]x4...,....s.k..5...d0.l......e.....^..c{D....i%v....Y.@....:..Lt%...2y.T...6Q/.1...$...SG.....x_..+..`..!.....JF.R......IEND.B`.

Chrome Cache Entry: 1284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	163566
Entropy (8bit):	7.943268763804804
Encrypted:	false
SSDEEP:	3072:ejGqV3AQQN3ANxN1nAv63T3EiiXpSR5Qb0xewGeHbMVvP/DKRuj0f64f:KlV3AQQN3ANJJz0XpSRn1w/uOi/f
MD5:	03F128DE509D1970CB126F30C769D344
SHA1:	8B8E730F7F9D245635423A1382D522A80D2FC1F6
SHA-256:	7E8AA0694A84AA0811DA612D625B5E86E390ACA954F3E1A60DBD521FD8E8D283
SHA-512:	EEC01FC76800265A3C6BBE812F540905099B7B03CE6F27EDA024D501E6D9DCD39C23306A4F3D8B4BB6C8FBCBA2A25AEA76AB49DF1799EDF8C95BDCB74878492D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.x....PLTE..L........................................~.x..\|...w.\|....vv...p....t...r...o.u.li...p.k..\|.nl...f.k.rc...i.~l.}e.~he...\|c.}j.yhW...x`.zcx..[..xf[..wa.t^.zmX..\..s[.u`..lS..nYJ..r].o[U..p\.jWK..u.y.iU.jW.l[P...fQP~.B..fS`z..bM.gYzt\@}.Hw..bQ.^M.Q\?w.dqnHs.3w.[K._Q.[K.`S=n..YI-p.bf^.WH.TEEf.gaN{WI.CL4g.Uac.PAIay\|O@uQC4`..g.XYQhOBsJ<ZSD"].HV`..@lF9KRQ..B..>NOF$U.9QndE8.Z.TH=f>2..FHIB M.6I_Y>5IE9<GK..J.N.a5)=B=O:3V7,F=5~...Az..O?</g)%.=R%=c=96.C.M2)..Q<5/E1(,7>63,X.Y=/(t.VG.Z.4c.7zH'.6-.1S.0+;) ,$Z0,.2)%f...-d..r.+Z;"..+a0%..])&%.)i.)_'&.3 ..'\.(\+!..%M.%V.$\.&\&!..$\.$\."b.#Z.#X#..%..."V."T/... T..W..\"....T..Z..X..\..T#....R..V..P.....K..Z..O..S..W.....O..W$....L..S..O.....D..J........H.....E...............................I....{.IDATx.}.kcYv.~..`~....,...4.z.....Ey........bLmTq...;..ZfPa..4.....Fb..z4..H.<./..VInI%.l.....U...so]...r....w.su...s.=..5..j.}t.n.Pi..Xa...6~Z........qyv..{.6.N....W....

Chrome Cache Entry: 1285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 1286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	1517
Entropy (8bit):	5.4820423020716085
Encrypted:	false
SSDEEP:	24:iKfWu0xRR144XDyjdX+ZVk87iwB4ZRWFxRWPRWNud5Q9H2va2c0V2Q2GOtGUXIrQ:3kxZDyR+zV7bBowFxwPwNG50HkBzSGU5
MD5:	64932A1E2564351AA7642475ACDF3FBF
SHA1:	C3DD2B7D1D4604E3559C2732FD90D71059DD77D8
SHA-256:	3487EF2BAF0C08BA660A8A143CDEB8EBEEC961EEA04BCCD7C49096B4EB26B875
SHA-512:	FFE08187EF578D7AFD64ADB9F50D189A894819BBEDBC116A6A5D3C18BDFBA1A44FF5CE5A86FC365500E2EC03D4757EDF03CDAFB92FBE9AB7E5A3191829BC74A3
Malicious:	false
Reputation:	low
URL:	https://thepatriotjournal.disqus.com/count.js
Preview:	var DISQUSWIDGETS,disqus_domain,disqus_shortname;.typeof DISQUSWIDGETS==="undefined"&&(DISQUSWIDGETS=function(){var f=document,a=f.getElementById("dsq-count-scr"),a=a&&a.src.match(/(https?:)?\/\/(?:www\.)?([\w_\-]+)\.((?:dev\.)?disqus\.(?:com\|org)(?::\d+)?)/i),e={},s=f.head\|\|f.body,j={},q={identifier:1,url:2};e.domain=a&&a[3]\|\|disqus_domain\|\|"disqus.com";e.forum=a&&a[2]\|\|disqus_shortname;e.proto=a&&a[1]\|\|"";e.getCount=function(b){var c;c=encodeURIComponent;var a=e.proto+"//"+e.forum+"."+e.domain+"/count-data.js?",d=[],k=0,l=10,r="",b=b\|\|{};b.reset&&.(j={},r="&_="+ +new Date);for(var b=[f.getElementsByTagName("A"),f.getElementsByClassName&&f.getElementsByClassName("disqus-comment-count")\|\|[]],m,i,g,h,n=0;n<b.length;n++){m=b[n];for(var o=0;o<m.length;o++){i=m[o];g=i.getAttribute("data-disqus-identifier");h=i.hash==="#disqus_thread"&&i.href.replace("#disqus_thread","")\|\|i.getAttribute("data-disqus-url");if(g)h=q.identifier;else if(h)g=h,h=q.url;else continue;var p;j.hasOwnProperty(g)?p=j[

Chrome Cache Entry: 1287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10325)
Category:	downloaded
Size (bytes):	109273
Entropy (8bit):	5.414730921440593
Encrypted:	false
SSDEEP:	1536:Qg5dFHDoweIvoPfcrnVntCo636tgSd+aOMj1BnwSo3XItkuSfFVRA0LAP3aX8:Qg5dFjFeIvoPfcrnqMj1BIRA0LAvaX8
MD5:	3C82911D3548146B8D41B818D95B1651
SHA1:	E22E4990E508ABF7829376161D30F0CEFED235A0
SHA-256:	B501196901445F93B4FB9B590D3B7664B50763839864519931010925992399FA
SHA-512:	56B522732735A63712767AD7E49D09CF35F8A44072A2B339063ACEB1DB40ED90650715FDBC0F59754F9326249C613C4F61BF0AF90D4041C8449CC8EC74BCDFF3
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iXK94/yK/l/en_GB/QhAqzEJYp63.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BadgeCheckmarkFilled12.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 12 13",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-98 -917)",children:i.jsx("path",{d:"m106.853 922.354-3.5 3.5a.499.499 0 0 1-.706 0l-1.5-1.5a.5.5 0 1 1 .706-.708l1.147 1.147 3.147-3.147a.5.5 0 1 1 .706.708m3.078 2.295-.589-1.149.588-1.15a.633.633 0 0 0-.219-.82l-1.085-.7-.065-1.287a.627.627 0 0 0-.6-.603l-1.29-.066-.703-1.087a.636.636 0 0 0-.82-.217l-1.148.588-1.15-.588a.631.631 0 0 0-.82.22l-.701 1.085-1.289.065a.626.626 0 0 0-.6.6l-.066 1.29-1.088.702a.634.634 0 0 0-.216.82l.588 1.149-.588 1.15a.632.632 0 0 0 .219.819l1.085.701.065 1.286c.014.33.274.59.6.604l1.29.065.703 1.088c.177.27.53.362.82.216l1.148-.588 1.15.589a

Chrome Cache Entry: 1288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64095)
Category:	downloaded
Size (bytes):	171315
Entropy (8bit):	5.738977696701764
Encrypted:	false
SSDEEP:	1536:m3hEUjlRC3YxEtHKp+6cnM6dUq1Ov+2RHUi2gsjwxe5F4PtHAACOKk44roi0JY31:GhEUFEtHKg6cnM6OhxrO8vWOiodH
MD5:	10766CD3263BBA46CE8C362A9CAAE4D0
SHA1:	FBA2DD55769341F111F24DE2813709CFBBBA91FD
SHA-256:	14723EEB8635A60C6CC8A7E801E216785B9DEF19E16422800892EE3B99E4756F
SHA-512:	8F37E26791D8AC1C4DBE367028C538BC218FE22872BC154473FF346BF0BF7C46C86890583CED7A5CB325E94D9D563ABAA1F25E7B16FC2E2FE72E441B87ACBD89
Malicious:	false
Reputation:	low
URL:	https://cdn.engine.4dsply.com/Scripts/infinity.js.aspx?guid=0d94d46c-3cdb-4ae0-a09a-420aae9253fe
Preview:	var g367CB268B1094004A3689751E7AC568F,adscoreVerificationStatus;if(typeof g367CB268B1094004A3689751E7AC568F=="undefined"\|\|!g367CB268B1094004A3689751E7AC568F.Core){Array.prototype.filter\|\|(Array.prototype.filter=function(n){"use strict";var i,f,r,e,t,u;if(this===void 0\|\|this===null)throw new TypeError;if(i=Object(this),f=i.length>>>0,typeof n!="function")throw new TypeError;for(r=[],e=arguments.length>=2?arguments[1]:void 0,t=0;t<f;t++)t in i&&(u=i[t],n.call(e,u,t,i)&&r.push(u));return r});Array.prototype.find\|\|Object.defineProperty(Array.prototype,"find",{value:function(n){var i,u,f,t,r;if(this==null)throw new TypeError('"this" is null or not defined');if(i=Object(this),u=i.length>>>0,typeof n!="function")throw new TypeError("predicate must be a function");for(f=arguments[1],t=0;t<u;){if(r=i[t],n.call(f,r,t,i))return r;t++}return undefined}});Array.prototype.map\|\|(Array.prototype.map=function(n){var f,r,t,i,u,e,o;if(this==null)throw new TypeError("this is null or not defined");if(i=Obj

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	151112
Entropy (8bit):	5.436457227851175
Encrypted:	false
SSDEEP:	3072:1FiVxW5Sn9rC88Bp0bZcdctMXQgCe6rzsMVv1:1FAxWGhcwZ0rgje6rzsMP
MD5:	4CB08CE34E989E6B7799216A5077C495
SHA1:	131453E3A82E4961BF9A5A4A347703DCAF890FC1
SHA-256:	B3790AAF2C91DC30C90A8E9BC622D7DD480AEDBD56550E082F040AF9AA10CA62
SHA-512:	F6FD757B09A802EB1F790F56D901D4EA3B8C035E22D4922A7135476ABD5396271B66E1442EA36BED30CC56E54F9F7100D6EBD9CC6EAA2DB8E7983262557020D7
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYBJE8N7M_A7v_ISWaLxyzukiqD4cD80lwVscEtbDW06CA&oe=6677B9B0&_nc_sid=7da55a
Preview:	....KEYF....................@......C...CUU.?...A...............................................................%.......c..........$...0...4...4...D...H...L...T.......,.............d{<......?x...H..............?...?\.....RCd.....RCl.......`...X...................`...T...H...<...0...$.......................................................\|...p...d...X...L...@...4...(........................!.=.!.=.1.=.!.>J)%>.1F>.9g>.!.>)..>J).>k..>.1.>...>.9.>..>.!.?.c.?)..?:..?J)%?[k-?k.5?\|.=?.1F?.sN?..V?..^?.9g?.{o?.w?....0_...[...X..XU..$R...N...K...H...E...B..d?..0<...8...5..T2.. /...+...(...%..."..............4...............T...\...........^.......f.......n.......v.......~.......................................................................................................................................................................&...............6.......>.......F...........................\... ...........l...0...........\|...@.................. ............. C..RC......#C..RC.......C..RC

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3142)
Category:	downloaded
Size (bytes):	3365
Entropy (8bit):	5.221285194839932
Encrypted:	false
SSDEEP:	96:mnlXjDD0nBqqtyzi3xGIx9bFXRF0QBOCfX:GTDonB/tyzC4YJXFLB1X
MD5:	5F4966E28DB0C0F255903F8D9125E637
SHA1:	B182AE6DACC1CC1233154731399D0EC939BEF326
SHA-256:	9E2AFBBFE8ED5412FCE92F12DE167B3D58851F5BD2B8C5075E67EDA8B0D2500A
SHA-512:	9344CFF72E187E2E679D4A0FCFFB10DD7DFB174083FBEAA8DDB73B92D67BE11176CC537A4E34C8586A394606A0493A4C40166543FE6385AD4B8D2DD5A74D7C3B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.TwitterArticles~bundle.Compose~ondemand.Com.8f801eba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.TwitterArticles~bundle.Compose~ondemand.Com"],{96818:(e,t,r)=>{r.d(t,{Z:()=>m});var o=r(7896),l=r(2784),a=r(4152),n=r(25686),s=r(7066),c=r(82392),i=r(40080),d=r(35094),h=r(79866),b=r(11839),u=r(73186);let p=1;class C extends l.Component{blur(){this._checkboxElement&&a.Z.blur(this._checkboxElement)}focus(){this._checkboxElement&&a.Z.focus(this._checkboxElement)}constructor(){super(),this._handleChange=e=>{const{onChange:t}=this.props;t&&t(e.nativeEvent.target.checked)},this._setCheckboxRef=e=>{this._checkboxElement=e},this._labelId=`CHECKBOX_${p}_LABEL`,p+=1}render(){const{checked:e,disabled:t,helpText:r,label:a,onChange:p,style:C,...m}=this.props,g=h.Z.generate({backgroundColor:u.default.theme.colors.transparent,color:u.default.theme.colors.primary,withFocusWithinFocusRing:!0}),f=h.Z.generate({backgroundColor:u.de

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	146320
Entropy (8bit):	7.996103535566476
Encrypted:	true
SSDEEP:	3072:b/2I/eiRPX6Rnzpb+AE5E2iMr5NFihyn0Nstr+fLofKBpfmgg1:iu9PKRzl+AEcw5NFicgssfECnfNy
MD5:	D652989E90787D20967F092DA9645E53
SHA1:	5826E58659898A6FEFD1854420A1E9BC126220AA
SHA-256:	E0268A262CE91106B3BDC77857724F2326FC74C820E97216CE770223E0D10B58
SHA-512:	1EEE6FA8F9FEC2A31BC6C5B9A244929A4FA2B1FBA34DF559D5953F22BF0F04E90FFF61AE890D4AB4CA67969A04F957B9AF39612211C325D42376A8E5F1C91375
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/hunter-biden-768x403.png
Preview:	RIFF.;..WEBPVP8L\|;../..d...9.....cz....../....\.n"I2.n...L.....`X53..,H..d.......?.m.......=...E1.@$..P.E.f.....4..cY....$...Ye....Cd..`.. ........y.-T.....9.VlA.?..A....-..B...J..>`P..$j..26....T....}3...X3...HEo.....M...H..:'.....P..#.3..x....:.zs..j.xv.su.1.'..R8..zK...".h.`..7...E......./..........@S...X".-SM.TY..)!(..Y.Y....Z;rG...mpU.yq.r"....:":R...r..T.I#T,I.R.Rw.it....T&.N.PS..o.Z..3.9.=.........Y..\|...C.?.]..6....j.G.O`..\|Q.]P...jz..i........q.sr..>.......o&tn....&..../5.......x......4.<.(.u..?._\|.C#..d...l.C.p.?\...y.,"N..t....A.K...U..m....L.c.?....Zg...Nn4...k.O.i...r F..7../.@....CDD.1$.TU.).f.$#....RMU..<"B.......TI##..........%I..z..S]d.......nUw..=........B.....8<.D.....+.;.w.x. ....H...........=.....".f.]d.q.9...y..3....5.[.".r(..A@.&...U.....]...*.....I.z.}...T.sR>.O$ZS-....t... ....9g..JL.E,.T.Yb.....y.?....%......"[.(.4..mz.fN_..m{6....R(.Bb!h..T%.lX....tO.9..q+..5. dI8t..9.C[.9...q..0A.fH22k=.u..[.?p]....O..F.$I....P

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (881)
Category:	downloaded
Size (bytes):	77221
Entropy (8bit):	5.655968066265703
Encrypted:	false
SSDEEP:	768:ddKW29gdw0AjMq3mDUjQXTE8kCqz6qtTs92lo3ULS+SaLV3c9wZjyasx+Xsu19sZ:iW29l3mgjQXTbm/Ts92lo3ULSzOFz1Yf
MD5:	0D683BDF35D89F985A1029ABA278A5D9
SHA1:	97BC8BA038325C26B258E59BAEBB62D55498B1B3
SHA-256:	3F549D3829F1C3139F3B9803AEE55F74EE3A9A38C53A816B5344BC20C3168208
SHA-512:	35FC5175D3AA798F5ED75338CA533E53170D5062F97FCC811C3A4FBF3E8EFC7563AE67A6320501F30600314F9383358736D1E61C6BA2430AF2DEA812E80D3701
Malicious:	false
Reputation:	low
URL:	https://c.adsco.re/
Preview:	/<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adscore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.location.hostname+"/",!0);a.onreadystatechange=function(){if(2==a.readyState\|\|4==a.readyState)window.parent.postMessage(document.location.hash+"\r\n"+a.getAllResponseHeaders(),""),a.onreadystatechange=null};a.onerror=function(){window.parent.postMessage(-2,"")};a.send()}catch(b){window.parent.postMessage(-3,"")}};</script></body></html>. //. pako 2.1.0 https://github.com/nodeca/pako @license (MIT AND Zlib) */."function"!==typeof AdscoreInit&&(AdscoreInit=function(ta,F){function bb(e,b){var d=e[0],g=e[1],h=e[2],l=e[3];d=V(d,g,h,l,b[0],7,-680876936);l=V(l,d,g,h,b[1],12,-389564586);h=V(h,l,d,g,b[2],17,606105819);g=V(g,h,l,d,b[3],22,-104452

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7103%2C22652678936%2C187271864%2FSMG_Aniview%2Fpreroll%2Fsyndication_2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=215194485326584&vpa=auto&vpmute=1&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=149136882&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053612&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=295401604960124&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td35_tt18_pd35_la35000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16619
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (51722), with no line terminators
Category:	downloaded
Size (bytes):	51722
Entropy (8bit):	5.717571113782744
Encrypted:	false
SSDEEP:	768:3wYAQUMXQRvNgfXwWiG/3/SGAImwQL2jy/17e7uZQ8bkPH355p6myBEtOX/BowRO:OOSGsp2YkPH3jUrMTwR5g7kY6S
MD5:	61515299BDC06D7E3944A16ED9FE8D57
SHA1:	8378191F6D535DB96920953F3A6781D6F3E43BAB
SHA-256:	5CE9B803B0E45BCF3104517558CA080B144B9ACF1EC95AD7ED7F43547AE2264B
SHA-512:	DD1E6858B2299668AC45C19BC165B90311A0B9F9D4F526C7729C119132DA2C7C79C663843D8C0879D5082BAC4DA3A605C6F1C702DE349929E211979883674710
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221071&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078302&bpp=3&bdt=290&idt=658&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&prev_fmts=0x0%2C590x280%2C590x280%2C590x280%2C590x354&nras=1&correlator=2528708288376&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532079&ga_hid=396375652&ga_fc=1&u_tz=-240&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2155&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083639%2C31083822%2C44795922%2C95331983%2C95333409%2C31083940%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2604152591232249&tmod=1068189570&uas=0&nvt=1&ref=https%3A%2F%2Fpjnewsletter.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CaoeEbr%7C&abl=CA&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=5&fsb=1&dtd=662
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240522';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 160px;height: 600px;position: absolute;left: 50%;margin-left: -80px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="160px" height="600px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240522\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {ebrpfa: true,};\x3c/script\x3e\x3cscrip

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4992)
Category:	downloaded
Size (bytes):	5215
Entropy (8bit):	5.52222256833567
Encrypted:	false
SSDEEP:	96:OokQWed0bBQ6ydnzocHJ4cIAuM+rL4V6mlU80WOvuQsSiD2aL:hkQWe6VJyzHp/IAuLL4VBXJOvgZ
MD5:	2A3DB014C6415B61680DA73471D0D48F
SHA1:	12D516ADA023D6D3BA0349E287BD1D8BB228C100
SHA-256:	FF0E8DCC3817191ECFB70F57A67293A3B6CD595C25E5F99412FBD840A5511039
SHA-512:	27B20398E4B0C5D5BE32944A5E230B351DC81B281F097FB5A8DEC4DA55772AA56B0D611BA5C71DB171526CF7C77AEE98DB893CDDB1F0A54B48A62EDFFDF2A3D4
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund.f0d3ab5a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.AboutThisAd~bundle.NotMyAccount~bundle.MultiAccount~bundle.AudioSpacePeek~bundle.Birdwatch~bund","bundle.AudioSpaceAnalytics"],{292:(e,t,o)=>{o.d(t,{Z:()=>b,w:()=>u});o(6886);var r=o(2784),a=o(25686),i=o(41441),n=o(70451),l=o(73186),d=o(63705),s=o(53363),c=o(26176),p=o(6454),h=o(76372);class u extends r.Component{constructor(...e){super(...e),this._renderChildViewAppBar=()=>{const{appBarRef:e,appBarStyle:t,backButtonType:o,backLocation:i,centerTitle:n,hideBackButton:l,history:d,isFullWidth:p,isLarge:h,middleControl:u,onBackClick:b,rightControl:B,secondaryBar:y,subtitle:g,title:k}=this.props,{isModal:w}=this.context;return r.createElement(a.Z,{style:w?[m.childViewAppBarRoot,m.appBarZindex]:m.appBarZindex},r.createElement(c.ZP,{backButtonType:o\|\|(w?"close":"back"),backLocation:i,centerTitle:n,fixed:!w,hideBackButton:l,history:d,isFullWidth:p,isLarge:h,middleControl:u

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/5907?limit=0&id=5283defe8db625a5edfac58f7d0521d2
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x156, components 3
Category:	downloaded
Size (bytes):	4902
Entropy (8bit):	7.781128149169606
Encrypted:	false
SSDEEP:	96:41B9WWXukuqdu+FNsUbi1yC4fPggPsxvWgRSpm0:4TouO+FNsUOY2U0Sw0
MD5:	706A31547C3901D9D8A53F598D3B6FA3
SHA1:	A0715BAB170858AAE8A1213AACEF7F76F35075CC
SHA-256:	7FEF482E1E3022F28BAFCA3FE08D1F5F4F59BA2639050D3C745C8DED9982DE45
SHA-512:	BAE5CADF669BA4D43B89A3C1A71F5DE3A5997CA6D63606FA0C5A5CC9333C0744919AE5D127764F2B401674A6791CE845CE74E061AD91638CEF2F1F58041183D5
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/343213522_664317988851570_781294073108064249_n.jpg?stp=c70.0.156.156a_dst-jpg_p296x100&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=tkZDgOAMBJUQ7kNvgFao7XN&_nc_ht=scontent-hou1-1.xx&oh=00_AYDH3rwzAAE5irvsjnOaUe--cLsElSROdt4WEEsxb8cpSw&oe=66561BCC
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100003b030000de05000079060000ed06000015080000550b0000cf0b0000840c0000290d000026130000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................Q......m..6..R8.U,z...%..&e..e>g.......O...l.r7.n...^.F..\..c.Z.....A..W.g.e..=...vX.2(....U8.N.:$..../.]...p...d.^`M.. f[p.t.tc..$.U...+3l.T9...:Q..I6...l.....Yh...I.c........e..Q.fP.Sr...9...9..Km...lv.......9.m..Q...~}..;.9.....af..K.h....T.q..N.>.x..q.n{D..B.s...Q..'...g.t.IF..&.6...%....:B.~d.o.Y:m{.<y.2F\C.....Zyj.b..2z.HY.O.....h..cV..W.Bc>/...B...zQU.c.2...Ry.O.?.nx^..........(........................!..1.."A #2.34............>c.+n..>....Cg...8....;..&..b..2s...a3.m..R\|..D....kE..(BEfU....%..y++0.q,..,..SxxG5e]....j-.cE..i..).4.G^p".s..tz..G`../.v.%.n>C..V.5...O.ek..xh."'......s

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	316
Entropy (8bit):	5.616511663699283
Encrypted:	false
SSDEEP:	6:Y0nA8tYwXv6wkVosmUpvFp0BA8tYwXv6wkVosmUpvFpAA8tYwXv6wkVosmUpvFyn:YZ1iSwkVoTUfp0+1iSwkVoTUfpZ1iSwh
MD5:	173FE4228A304EA3E2C866561B26F164
SHA1:	0A94E4A289C175C7F4265213C2C4AC196BC39CBC
SHA-256:	0AF9BF4C55BBDDF2071F23F10A2C4D43A069E9EE3F811E572B58B1189437F5AB
SHA-512:	C5B46C4C17C2DCC556C00264A61B8F0CDCD67C79A015F687EE1867476CB971DD4D406B84E39D134991130750637BF1CDA4D77DA821AC2F46622E16A19B9046B0
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58771/fed?1p=0&gdpr=0&gdpr_consent=&us_privacy=&pixelId=58771&puid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
Preview:	{"vmuid": "0Ff-EVBwTmQIsXKIL5rasS9T0fseZ564nfJUrEOvca2ZVuJEK8x1HnRqiz-Lgkxtaz2ZIDEmUo-n7SteyYn2uQ", "connectid": "0Ff-EVBwTmQIsXKIL5rasS9T0fseZ564nfJUrEOvca2ZVuJEK8x1HnRqiz-Lgkxtaz2ZIDEmUo-n7SteyYn2uQ", "connectId": "0Ff-EVBwTmQIsXKIL5rasS9T0fseZ564nfJUrEOvca2ZVuJEK8x1HnRqiz-Lgkxtaz2ZIDEmUo-n7SteyYn2uQ", "ttl": 24}

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zeta_interactive&google_push=AXcoOmRiZf-uCEy69ojnD_JoqQNxo5WljohdF5xejqncgeKVdOKdvZ7xg3uVshEVBMIiEqEy-1dKK9OKF22M7Pg5RRWtrslBEilGavmZ&google_hm=NTE0MTIxMDgzMTExOTkzNjI1MQ==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8257)
Category:	downloaded
Size (bytes):	39683
Entropy (8bit):	5.309691039296486
Encrypted:	false
SSDEEP:	768:Wahd6imF6U5v/FLXisVLk3a+aw/T3THDizmH6oNVXNaeaikNT+fhtgB/8jhoh:Wgd6FF6U5v/FjisNk3a+awDbDi5
MD5:	F637D1D43A26C26B0CA6F13E5295FA4F
SHA1:	23E8D3D90B6745142E50ED7E7A54FC85CF3F4C55
SHA-256:	326B8CF465B5179AA09F90256D3FF90F7FAD66BBBF056084733E8EC26D1FDE6F
SHA-512:	08850B13C6CD4E8F4A60FFC0B69A0F7481431580B586E523A4094DF39F398F02FDF625355302D21A7B283A2D64FF2BB342B9AE1DA7118274D1211C1F23359B77
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i4nn4/y1/l/en_GB/khfw_V4kOlp.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometSeeMoreExpandingUtils",[],(function(a,b,c,d,e,f){"use strict";function g(a,b){var c=b;while(c>=0){if(a.charAt(c)===" "\|\|a.charAt(c)==="\n")break;c-=1}a.charAt(b)!=="\n"?c+=1:c=b+1;b=a.substring(c);a=/\s/;b=b.search(a)+c-1;return{truncatedEntityEndIndex:b,truncatedEntityOffset:c}}function h(a,b,c){var d=[];b=g(b,c);c=b.truncatedEntityEndIndex;b=b.truncatedEntityOffset;b=b;var e=!1;for(var a=a,f=Array.isArray(a),h=0,a=f?a:a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var i;if(f){if(h>=a.length)break;i=a[h++]}else{h=a.next();if(h.done)break;i=h.value}i=i;var j=i.entity,k=i.entity_type,l=i.length;i=i.offset;i!=null&&l!=null&&j!=null&&j.__typename!=null&&(d.push({entity:j,entity_type:k,length:l,offset:i}),!e&&i+l>=c&&b>=i&&(b=i,e=!0))}e\|\|d.push({entity:{__typename:"SeeMoreTruncation"},entity_type:"SEE_MORE_ANCHOR",length:0,offset:b});return{newEntityRanges:d,newTruncatedEntityOffset:b}}function i(a,b){var c=[],d=[];if(b!=null)for(var a=a,e=Arra

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (881)
Category:	downloaded
Size (bytes):	77221
Entropy (8bit):	5.655968066265703
Encrypted:	false
SSDEEP:	768:ddKW29gdw0AjMq3mDUjQXTE8kCqz6qtTs92lo3ULS+SaLV3c9wZjyasx+Xsu19sZ:iW29l3mgjQXTbm/Ts92lo3ULSzOFz1Yf
MD5:	0D683BDF35D89F985A1029ABA278A5D9
SHA1:	97BC8BA038325C26B258E59BAEBB62D55498B1B3
SHA-256:	3F549D3829F1C3139F3B9803AEE55F74EE3A9A38C53A816B5344BC20C3168208
SHA-512:	35FC5175D3AA798F5ED75338CA533E53170D5062F97FCC811C3A4FBF3E8EFC7563AE67A6320501F30600314F9383358736D1E61C6BA2430AF2DEA812E80D3701
Malicious:	false
Reputation:	low
URL:	https://c.adsco.re/
Preview:	/<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adscore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.location.hostname+"/",!0);a.onreadystatechange=function(){if(2==a.readyState\|\|4==a.readyState)window.parent.postMessage(document.location.hash+"\r\n"+a.getAllResponseHeaders(),""),a.onreadystatechange=null};a.onerror=function(){window.parent.postMessage(-2,"")};a.send()}catch(b){window.parent.postMessage(-3,"")}};</script></body></html>. //. pako 2.1.0 https://github.com/nodeca/pako @license (MIT AND Zlib) */."function"!==typeof AdscoreInit&&(AdscoreInit=function(ta,F){function bb(e,b){var d=e[0],g=e[1],h=e[2],l=e[3];d=V(d,g,h,l,b[0],7,-680876936);l=V(l,d,g,h,b[1],12,-389564586);h=V(h,l,d,g,b[2],17,606105819);g=V(g,h,l,d,b[3],22,-104452

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	98416
Entropy (8bit):	4.941820830478357
Encrypted:	false
SSDEEP:	384:zGfg9RjT2j6FnWf9QmaBqMzSuIEV4jgseYKswtfmVJuRaQKo:zGfg9RjzFWCzGfwtfuo
MD5:	EA651014A2F8ED13A01EDD9DADABAFB6
SHA1:	D72D6B87F9464812A59E2AD04766DDA5B428B66A
SHA-256:	682265E0696484FE03751B21088411969413C23874BB46FD8273B358D9348C4F
SHA-512:	78AF33F006C2432720614ECC283480E5B9642F801ED013607255DF509E77A15ECC6AED9A27C05D9C81C482029785D78EB612BFAAD8A37DCEE6E8FF49D57196A9
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/css/style.min.css?ver=4.4.4
Preview:	.swp_social_panel.swp_default_full_color a,html body .swp_social_panel.swp_individual_full_color .nc_tweetContainer:hover a,body .swp_social_panel.swp_other_full_color:hover a{color:#fff}.swp_social_panel.swp_flat_fresh.swp_default_full_color .swp_blogger,html body .swp_social_panel.swp_flat_fresh.swp_individual_full_color .swp_blogger:hover,body .swp_social_panel.swp_flat_fresh.swp_other_full_color:hover .swp_blogger:not(:hover){border:1px solid #ff5722}.swp_social_panel.swp_default_full_color .swp_blogger,html body .swp_social_panel.swp_individual_full_color .swp_blogger:hover,body .swp_social_panel.swp_other_full_color:hover .swp_blogger{background:#ff5722;border:1px solid #ee3900}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_blogger,html body .swp_social_panel.swp_three_dee.swp_individual_full_color .swp_blogger:hover,body .swp_social_panel.swp_three_dee.swp_other_full_color:hover .swp_blogger{border-bottom:3px solid #ee3900}.swp_social_panel.swp_default_color_outline

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://dsp-trk.eskimi.com/cap?id=9_-2849980608223908841&dc=12&tz=-04:00&sgid=35481785357&pid=2216806189&cid=206591&crid=1322050
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4660)
Category:	downloaded
Size (bytes):	4883
Entropy (8bit):	5.5118212309751895
Encrypted:	false
SSDEEP:	96:mylSx/SJUUql/FyDK3Yc4Nw11T4Q4PskY6a6HBltwZMOq2wKJKjqS9mlWtBEWKjz:da/SGUE9ye3Y3NM1QNTpTUMRLjD9sABY
MD5:	A481F649D4823206054E446EFE9F6790
SHA1:	7FA2786C4A666303F4C4D6E1729032BF469A14C2
SHA-256:	993590652D6691F760C3374B01706F4647A7F41C68F20AF7EE5A36B160F8A5C8
SHA-512:	D0BDEFDCBB6B1E75281F2A8BF22472EC4FCECD0D2A3FF874080CCA72EB73FBB72DB20C413CE07E61F47039FF5A623ABE7112B14A0E4310A29C7DB45DEF80DE15
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.SettingsExtendedProfile~bundle.WorkHistor.9fa470fa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.SettingsExtendedProfile~bundle.WorkHistor","loader.MediaPickerWithPreview","icons/IconPhotoStroke-js"],{74211:(e,t,r)=>{r.d(t,{Z:()=>u});var n=r(2784),a=r(72016),o=r(25686),i=r(73487),d=r(73186);const l=r.p+"twemoji_sprite.5b45766a.png",c=r.p+"twemoji_sprite_high_res.8b274d9a.png";var s=r(89141);const h=d.default.create((e=>({content:{backgroundColor:e.colors.cellBackground},dimensions:{height:"400px",borderRadius:e.borderRadii.xLarge,width:10*e.spacesPx.space32,overflow:"hidden"},hidden:{display:"none"}}))),u=e=>{const{onSelect:t,partialRender:r,style:d}=e,u=a.Z.get()>1?c:l;return n.createElement(n.Fragment,null,n.createElement(o.Z,{style:[h.content,h.dimensions,d]},n.createElement(s.Z,{onSelect:t,partialRender:r,rowSize:9,spriteUrl:u})),n.createElement(i.Z,{source:u,style:h.hidden}))}},84652:(e,t,r)=>{r.d(t,{Z

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 39470
Category:	dropped
Size (bytes):	4944
Entropy (8bit):	7.953064221734207
Encrypted:	false
SSDEEP:	96:5yiVg3gflnmZZROht1yRXUzFfUPJPG6wagJ6qojufKnHaDw1Es0CuWo/:ZgbZZR0CXUBfUPBgMqkz6ob02Q
MD5:	3454E77F45FB9E0E958DD969985544DA
SHA1:	1658D53037805D4E86740909724F55742B76C0ED
SHA-256:	E1E809B4B12066EB22DD3760366D5312538A6F2496E7CBF129798B2EA227596C
SHA-512:	AB3D00C773DABFA94C599CB619CB5868C7B3861B5785AAFD7AB936B8A6919572CF8244A20C0FB6034EE3B96E0405D439574AE972203208663F3F2FB6E14A847F
Malicious:	false
Reputation:	low
Preview:	...........]kw.8..~~E..._j0.q.....;M.....$Y^.....v.=..gK......tXMm!$mik.g?.`>....z....T\|..h...P.eSCV.iA(.V..EA]6.C.x..OuL.....y.i.X&.....<.....x.............eI.Y:)Qi.^.y:FUe.u.TK..;......}.?..Q.?..$.....C.4:...%..v+/".B.j..i..../_w:UA.sE"i4....Pg...{Vd...lj...?Fi.].Ba......iU.U....2.l]CH.[1.]S.. ..r...)H..C.....Ie.BV.lE.<.T...E...EdkX....@..............g.8.p..L..l.&.d..ZV....~L.PH..3#............1...4.k.b YU.M..,..d.....%.eE&\?pJW<U1.../{..=...<^9O0...!.2...B.j0&U.u.I.....BM.;......n.VE.CZ..k.....S...&.0..>X.K..~....`..%q....>..b....5.....t.....a..T..Q.....3........4..l..$.......4.R...0Q...DV.!.z..<.....0.Ep..j...p..M}j.8..LL.....x.....#.u....<..PT...w`. M.H`....^...9...;.f...0..t..w..O..H.....=v...C8...+.....n....N.,..&..6..Q...0~..>......s.Q....n..P..J......L..or.=..ev.=~"._)....P.3..s.8E..S.o.....K.F..L..-.(K.".'.-..Y....8:...Ik.....p.$b%.q.-.p..!.&..X.e...]..MV*..E..wZ.4~.Y..[w.C29:..}...s......j.).... .f.JQ.....?.

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x720, components 3
Category:	dropped
Size (bytes):	31347
Entropy (8bit):	7.968294002281451
Encrypted:	false
SSDEEP:	768:HkGsK9B0+3vgwXXSmtdSAoQ2FV9MMro/OOsqHZOVa+cuO:Hk8Owymp2n0jsqHZKcuO
MD5:	43100BEFE6384C94AB60AF1645A1441A
SHA1:	29E24201F4D14FDFE150F71450E9103EB9E4CE44
SHA-256:	3B51065A3082C38D16DBBAE6DCEFDB3A70A4D157B8A1FA8A2D65A019FE2CB2AE
SHA-512:	1488A375BA4873108D31807467A1EFB67F3222B6F006F26103FFC9BD2A171D2109EF3DE191A586C614008AF58E7F4E59DD747282D61B464284DD16B02690E952
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1,&0"'(&...........& ..'''&&&'&&&&&&'&&&&&&&&&&&&'&&&&&&&&&''&&&&&&&&&&&&........h.."........................................V.........................!..1AQ"aq.2......#BRbr....ST.$3.....4t...5Cds......%6Dcu...................................6........................!1A..Q"a....2Rq...#...3B..$4............?....%.;...p.l..H.N..@%..-..Br,.jT.E.....H.m..9...$.zK!.r.u.d.r.!="..H....P..@...(.!D....H...P.%..),....$.y..e.Y?K!#l.'Y%..Bu...m.d...L2...L.'..................y2l9.......S... .<..t.K..>....~.....F./".:.$d........_....c.w.=..x.A.y-......%.i ..F.t....qk...Y..,...].x.Id.B....@.H....J....B......,....HBr..1.PP..*..d.P...NB...T ...T(.Y%....,.<....!9.I6.l..l...x.;.r.f.^._.;.r.Z7.\|..(..$l..W._...uG....k...P...k...u.d.....Mq....4....g&.I..k.=.sS<....R.@n......C..../...{.p..H%.....'..iB..\l..K>...p.O....g.n.i.aN...x?....p&.G.G.0h.........K'!..!9".,.8...H...."T ."T ..B..%B.4..9.@.."..%B

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	151112
Entropy (8bit):	5.436457227851175
Encrypted:	false
SSDEEP:	3072:1FiVxW5Sn9rC88Bp0bZcdctMXQgCe6rzsMVv1:1FAxWGhcwZ0rgje6rzsMP
MD5:	4CB08CE34E989E6B7799216A5077C495
SHA1:	131453E3A82E4961BF9A5A4A347703DCAF890FC1
SHA-256:	B3790AAF2C91DC30C90A8E9BC622D7DD480AEDBD56550E082F040AF9AA10CA62
SHA-512:	F6FD757B09A802EB1F790F56D901D4EA3B8C035E22D4922A7135476ABD5396271B66E1442EA36BED30CC56E54F9F7100D6EBD9CC6EAA2DB8E7983262557020D7
Malicious:	false
Reputation:	low
Preview:	....KEYF....................@......C...CUU.?...A...............................................................%.......c..........$...0...4...4...D...H...L...T.......,.............d{<......?x...H..............?...?\.....RCd.....RCl.......`...X...................`...T...H...<...0...$.......................................................\|...p...d...X...L...@...4...(........................!.=.!.=.1.=.!.>J)%>.1F>.9g>.!.>)..>J).>k..>.1.>...>.9.>..>.!.?.c.?)..?:..?J)%?[k-?k.5?\|.=?.1F?.sN?..V?..^?.9g?.{o?.w?....0_...[...X..XU..$R...N...K...H...E...B..d?..0<...8...5..T2.. /...+...(...%..."..............4...............T...\...........^.......f.......n.......v.......~.......................................................................................................................................................................&...............6.......>.......F...........................\... ...........l...0...........\|...@.................. ............. C..RC......#C..RC.......C..RC

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17218), with no line terminators
Category:	downloaded
Size (bytes):	17218
Entropy (8bit):	5.266693053762656
Encrypted:	false
SSDEEP:	384:C3cnVvrPjVbTOV28zq7xxk64qTxrqsorajY3sjGHWq+9uT3r/yhKIuFYtiFO05AU:+qrV3OcEq3N4wxrqsm+Y3KGHs9uTzyhO
MD5:	92372AB5063270A877A9EA52017C9654
SHA1:	339C26E0F34DE5497B1614704E77DC6747087301
SHA-256:	6149F1372190ECB81835FF168BA4E436940DECA497565236C3D75FD6607D0F06
SHA-512:	7035392A362BE8D0CAA7738B22501A43CA3423DC1EBA83D14919CBBB42871FA47B478C5643A4BF12DAB0E925C6B3EB741404DC68F887B578EECF77E801B610A0
Malicious:	false
Reputation:	low
URL:	https://cdn-ima.33across.com/ima.js
Preview:	var _33AcrossIdMappingsProvider;(()=>{var t={110:(t,e,n)=>{function i(t,e,n){s(t,e),e.set(t,n)}function s(t,e){if(e.has(t))throw new TypeError("Cannot initialize the same private elements twice on an object")}function o(t,e){return t.get(r(t,e))}function a(t,e,n){return t.set(r(t,e),n),n}function r(t,e,n){if("function"==typeof t?t===e:t.has(e))return arguments.length<3?e:n;throw new TypeError("Private element is not present on this object")}const{Ajax:c}=n(59),l="https://lexicon.33across.com/v1/envelope",h=1e4,u="ima",d={GDPR:t=>{let{consentString:e}=t;return{gdpr_consent:e}},CCPA:t=>{let{consentString:e}=t;return{us_privacy:e}},GPP:t=>{let{consentString:e,applicableSections:n=[]}=t;return{gpp:e,gpp_sid:encodeURIComponent(n.join(","))}}};var p=new WeakMap,g=new WeakMap,v=new WeakMap,f=new WeakMap,w=new WeakMap,m=new WeakMap,S=new WeakMap,C=new WeakMap,P=new WeakMap,M=new WeakMap,k=new WeakSet;function D(t){const e=JSON.parse(t);return e.succeeded?{idEnvelope:e.data.envelope\|\|"",fpId:e.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	515
Entropy (8bit):	3.7079048680061124
Encrypted:	false
SSDEEP:	12:emfrmwtm7AXyUkHHyKsfNf0MLq6p3HHgsfNf0MLq6poHHu:emfBAKiMfRLLFVFfRLLFWu
MD5:	78B73ED4B5ECE35CD6424B56864206DB
SHA1:	6D3C492C0376BD33D010FBBF91CE7586A4131CB2
SHA-256:	59A3FB93AB04312D58A8D0F4E0E9396A8A4B5D2718EB61CBDAADFD8AED34301C
SHA-512:	33AFD353B8313A292F0F1B7A4D23B7317595026688C88903681771355DEBE32B0D7197075E7644D8D664C8D03254824764D2215CB51EA91E9556A3E018D4279E
Malicious:	false
Reputation:	low
Preview:	[null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",0],["94166617",1]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",1],["94166617",1]]]]

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4104)
Category:	downloaded
Size (bytes):	4358
Entropy (8bit):	5.5786068547198635
Encrypted:	false
SSDEEP:	96:OJebaAyJjcYsJT4mBDt/n/oapIAHgPTY7/zvls2Oab:KAyBGJTxDtvpIALNFB
MD5:	D3CA344987DA7664156F362DAD6476D6
SHA1:	4CAD2960851FB108B486E1301EDCE504D94CA206
SHA-256:	C5D911680403EBB70E2EDADFE3D7D62E328D1C9AD4320BA990D4143E28B99734
SHA-512:	B5C17F59198837243E73F3F3B2CA445CC243897F140FDF8D932C042CE2A2ED2B9B8611E7A035FDBA0010345810E19A65A416EFCB00C0FF9ACDC7902BD308ABAB
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~ondemand.InlinePlayer~loaders.video.PlayerBase~loader.Audio.d10932da.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.ComposeMedia~ondemand.InlinePlayer~loaders.video.PlayerBase~loader.Audio"],{31460:(r,e,t)=>{var n=t(24229),o=t(70095),a=t(6358),i=o("species");r.exports=function(r){return a>=51\|\|!n((function(){var e=[];return(e.constructor={})[i]=function(){return{foo:1}},1!==e[r](Boolean).foo}))}},96038:(r,e,t)=>{var n=t(24229);r.exports=function(r,e){var t=[][r];return!!t&&n((function(){t.call(null,e\|\|function(){return 1},1)}))}},43143:(r,e,t)=>{var n=t(77111),o=t(92991),a=t(9337),i=t(39646),u=TypeError,s=function(r){return function(e,t,s,c){n(t);var f=o(e),p=a(f),l=i(f),v=r?l-1:0,d=r?-1:1;if(s<2)for(;;){if(v in p){c=p[v],v+=d;break}if(v+=d,r?v<0:l<=v)throw new u("Reduce of empty array with no initial value")}for(;r?v>=0:l>v;v+=d)v in p&&(c=t(c,p[v],v,f));return c}};r.exports={left:s(!1),right:s(!0)}},1909:(r,e,t)=>{var n=t(65968);r.exports=n([].slice)},28

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1262)
Category:	downloaded
Size (bytes):	1485
Entropy (8bit):	5.308395280382957
Encrypted:	false
SSDEEP:	24:iWGKfWGE5FSF55kVlRJqFTYlgstxjpk4H6jIyod+6oYxDuVlz1aJamwHVlKLAbRz:iIyo5ilRJ+TzoskzoKylz1Rmw1lgAPjZ
MD5:	3A0166E8E9185E184DC52BC0D3696ADD
SHA1:	E9D458C5C903A0CFBF78478AE817CC97786804EF
SHA-256:	F0DF4E5558D8E21E72FC1BB0106F69035ED145D3E581DCAFF5E1EDC26834D3A7
SHA-512:	179C7D39EAAEEE51E8B883356C6664B4BFE94DF51725F67E2B47939FC4EAC1ECDE150E64AC3BD2583AABBCBB1D7F72DF4710F84226874DB987EB0D6E443C3D82
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund.671b1f7a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bund"],{87398:(e,t,r)=>{r.d(t,{Z:()=>u});var l=r(2784),s=r(66999),n=r(25686),i=r(73186),o=r(45184);const a=r.n(o)().e5b0063d;let d=0;class c extends l.Component{constructor(){super(),this._listDomId=`accessible-list-${d}`,d+=1}render(){const{children:e,title:t}=this.props,r=a({title:t});return l.createElement(n.Z,{"aria-labelledby":this._listDomId,role:"region"},l.createElement(s.Z,{"aria-level":1,id:this._listDomId,role:"heading",style:i.default.visuallyHidden},t),l.createElement(n.Z,{"aria-label":r},e))}}const u=c},60131:(e,t,r)=>{r.d(t,{Z:()=>a});var l=r(2784),s=r(25686),n=r(73186);class i extends l.Component{shouldComponentUpdate(){return!1}render(){return l.createElement(s.Z,{style:o.root})}}const o=n.default.create((e=>({root:{height:10*e.lineHeightsPx.body}}))),a=i},36

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	15349
Entropy (8bit):	4.603935565784116
Encrypted:	false
SSDEEP:	192:1UuQo0dw880DQu+4jaOd/jXDhYieiz9cZFeKJdmJiKkj3F:hhqp+4O0LtYniZ+YKJdmC3F
MD5:	A801A94F7B6DD98E65950A9EBC5DAD3B
SHA1:	F5358F4C4B2AEE84BFE710F642DB0F60ECE4270F
SHA-256:	2175AD8124E9BCB46467B188EB1E2C04C911B791251E8354FF7D6DC344F4A2BA
SHA-512:	2B966238E4845BC056882938432DAAD383CF6252188E85453C89957F672D3FA9CA9DB5EBBF4A98CFB41E319AE5B8FAA9C9948B041E16BC8C05B7B89BE1039FC2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><symbol _="" viewBox="0 0 29 28" id="avp-icon-check-mark"><path stroke="none" d="M11.15 21.27c.26.26.64.43 1.02.43.37 0 .75-.17 1.04-.43L25.7 8.79a1.43 1.43 0 0 0 0-2.06 1.43 1.43 0 0 0-2.06 0L12.17 18.2l-5.33-5.36a1.43 1.43 0 0 0-2.05 0 1.43 1.43 0 0 0 0 2.06l6.36 6.37z" _=""></path></symbol><symbol _="" viewBox="0 0 48 48" id="avp-icon-cross"><path stroke-width="0" d="M26.7 23 43.3 6.4c1-1 1-2.7 0-3.7s-2.7-1-3.7 0L23 19.3 6.4 2.7c-1-1-2.7-1-3.7 0s-1 2.7 0 3.7L19.3 23 2.7 39.6c-1.1 1-1 2.7 0 3.7.5.5 1.2.7 1.9.7.6 0 1.3-.2 1.8-.7L23 26.7l16.6 16.6c.4.5 1.1.7 1.8.7.7.1 1.4-.2 1.9-.7 1-1 1-2.7 0-3.7L26.7 23Z" _=""></path></symbol><symbol fill="none" _="" viewBox="0 0 24 24" id="avp-icon-link"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 5H8.2c-1.1 0-1.7 0-2.1.2a2 2 0 0 0-.9.9C5 6.5 5 7 5 8.2v7.6c0 1.1 0 1.7.2 2.1.2.4.5.7.9.9.4.2 1 .2 2.1.2h7.6c1.1 0 1.7 0 2.1-.2.4-.2.7

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	363494
Entropy (8bit):	7.992009149830192
Encrypted:	true
SSDEEP:	6144:3anVnPoQODCgTvNkTdtCqjSanQCeoumncdyJ8uPOTmPN/+LxZS9PkihSTX:4Vw7Dj8FQCeoqUOUKS98ihSTX
MD5:	EC11914BB7500C8699791AD0EC9D37C4
SHA1:	51B0D705D939E351EE10F878BF393EDC3F90B4F3
SHA-256:	C4BF83580765A9811C15F2A1442DAB2EFA829561ADAA00DC6A5F35F8A959BDEF
SHA-512:	BE18FE31CD2A2B08398A4F333671E09BC6AD24A3A728777978291FD61D19C05FF390B3B93766D4A6630991D268915C69FFE309BA3F1593E16E223783CA56DB91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx..Y.%9.?.-".r.\..k.uz.3..3...f<........0.x..`.0...=U.U][.y.sN,Z.QH7..'...".............r.?.......0 ...3"0...........R..Zkf...\|f..P..@.....8..+.S..9]..9Q ...S..5.'..PJ...)...z.k....R..C.R....5.......RK).).@..............._....cD.u!.=.Q..m....Eu........vk.&x....c...2.....!pW7..i....D!xg....+c.(.."....Q....s(rQ.41........D..h\|....s[$3..4v....f......F.GD!K..Y!.0&.C.u.n.+)...P.W#.WC#.5.p..M.l..M+.,....e... J...@....JU.r...._....?.m..JM...... ...`.)-.....dL.@?.C7.....=..A0..A..6...1h...2.7.~...]zN.1h..pZ,..m/.2......if........Bz:...P...I.u.:.........G.'.K0H....8.c_.Da.6F@4.E..f.".Xg..x(g..b.....3 f`d....1"d...8.....NY..tj..."VeY-)dg.....)....I.......M.R$.Xq.{.....6......1..@..(F.P25.0...n..;.R...`.$....q."g.u.$..$.(.yf.R+.....u...Q...w.B.R.....L......9...FJ......T(..L..I.Ak...w%...&....=...r.(.-`b8.6HD.,.Zf.Z..#C .X...90p!M..e.,...$.`..Zv..e4.!.Drb...Cj.1X.B.-.u.>....9.^%.W.04O..@....1..XkH.^bL.

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	5683
Entropy (8bit):	5.2766087821055105
Encrypted:	false
SSDEEP:	96:LrSnNOuimRBEcuyKwAS0MFZn2yVhmNpnnl4fgmVXHRonA9nC3KAkhab:LrSNOuimRBE8DAGPnnGAfg083KbhQ
MD5:	E6F835EAC4F6AEDB3719C0E0B7F241FC
SHA1:	A2C6ADFE5062CAA511CB499FFE7BA350A0781043
SHA-256:	603F5A17F5A39A69BCF0835333F68F3C33EB0E4E308EF1C0146F20B8A18D4F59
SHA-512:	57FBD9DB9AAEAE6C1A417C22922ECD7544C7F1D7DE079A6D24E29E2CA5FB3D79E40C325507551ED4015CF40BF0DFA43FEFFC28F232FBE05C9604BF3969F583C1
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.826a7bba.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.Dropdown"],{666:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>y});var i=n(7896),o=n(2784),r=n(78052),a=n(25686),s=n(35193),l=n(11731),c=n(55249),d=n(20023),h=n(50829),p=n(57552),u=n(13867),m=n(74054),f=n(41425),_=n(15686),w=n(70451),v=n(54044),b=n(73186);const g=b.default.create((e=>({rootNarrow:{maxWidth:"75%"},rootWide:{maxWidth:`calc(${e.spaces.space64} * 6)`},anchor:b.default.absoluteFillObject,mask:{...b.default.absoluteFillObject,position:"fixed"},bodyRectHelper:{...b.default.absoluteFillObject,bottom:void 0},content:{borderRadius:e.borderRadii.large,position:"absolute",overflow:"hidden",backgroundColor:e.colors.navigationBackground,boxShadow:e.boxShadows.medium},contentInitialRender:{position:"fixed",opacity:0},contentFixed:{position:"fixed",overflowY:"auto",overscrollBehavior:"contain"}})));class y extends o.Component{constructor(e,t){super(e,t),this._handleAnimateComplet

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3
Category:	downloaded
Size (bytes):	30132
Entropy (8bit):	7.969483557620218
Encrypted:	false
SSDEEP:	768:p+qtAvuQaC4i5g6B1gxXta5CAPr3QoLBSVVk21agfKCSOgOA0a/QFlUKrs:p+z6C4Et1gxEEAPrAoLBSn1jf69w+
MD5:	621731B0AC9DEBFD941A1AF46D4A1541
SHA1:	BA566057A945C2E7A59774E00932A27E73CF32D4
SHA-256:	F2A96A76FAAC763DB3BE7331003E2A79F81BD564F648502FAB70619773076379
SHA-512:	D1FB287D84CF885ADA5BF58B143108AB535209AAF8227974A2D693B4C8F30935182BEF95D1E6069E73F1FEBDD61771555E8DA9060E8B339F8566289EC051F627
Malicious:	false
Reputation:	low
URL:	https://ruamupr.com/images/18710/18710-375x250.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....'..N...QT....p{....:....@.y.#.N.1..........F..(q..ns.l{..w..4...7p?DGG$.;..\.?Z{$..Q...)...2..2....Q..?.R....th.....\|.Cc.....5S..L.q.H..J...1L\|J...~5(.H.?Z.pE...z..=9..%r.....z.8..U...7..~UdG..0.....hWw..BJ.W#........r.3.t...%r1.k......G,aQ.#...t.;H.W..C2..'j..C.~...."!.`..yx..ji.{x<%%.j....g].....mA..+.@...>....4.m4...5..B`W.....I..oi.;.5..).. W...

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	45
Entropy (8bit):	3.930990186162398
Encrypted:	false
SSDEEP:	3:fuMLQJaecD1jn:2LaLdn
MD5:	B244E5087B64B137E3659C21B48E6D6D
SHA1:	B3D17CB434D8500280BE34A51AB0ECE2725E8E73
SHA-256:	F26847BEA8592279409A22D8F1446C16F02C238B701DA3FD165995917F3A69CA
SHA-512:	72F81985409461740CA705180EDCDD7EB4A4036CC0AD11CBCD851420D92EF3E097BFB1EC357CCCC8CBE826C7C5CF3206EC7080E7F43229C1F2A8E4B3FC7F2E8C
Malicious:	false
Reputation:	low
Preview:	8.46.123.175,953ee6681b10db530f0a8c8646bbc31e

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1664)
Category:	downloaded
Size (bytes):	1826
Entropy (8bit):	5.472081299427481
Encrypted:	false
SSDEEP:	48:iIKJNoKuqa8ca8Hta8e8ajBaj0tajIvSZzrbGyVUCpv2K4GWmsi:OVuv898H08edj4j00jIvSZzrbGyKgv2w
MD5:	F5E8BFF866283258563A94C5E8694344
SHA1:	1BD9579115CEF11BFC22319B7C170DEC40AAE396
SHA-256:	552C2F11CC6FC1C511E69B77463380716A96CF493AD3AF21937A6AA73E3CB622
SHA-512:	D596A59870A132781E729261D0848F8F477F94EE1B48E45FCEB0436BD88CDB440BC4BF7034860917FF1B7D521ED561EA70C8A3F581EC64D8F7F6BE615A5F6BA1
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~ondemand.ComposeScheduling.72dd7fba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~ondemand.ComposeScheduling"],{46202:(e,t,E)=>{E.d(t,{FP:()=>C,Hf:()=>r,Q$:()=>D,UD:()=>n,V2:()=>w,yD:()=>l});var s=E(3754),d=E(26853),T=E(53392),S=E(23803);const c="scheduledTweets",u={fetchStatus:S.ZP.NONE,scheduledTweets:[]},r="FETCH_SCHEDULED_TWEETS",h=Object.freeze({REQUEST:"rweb/scheduledTweets/FETCH_SCHEDULED_TWEETS_REQUEST",SUCCESS:"rweb/scheduledTweets/FETCH_SCHEDULED_TWEETS_SUCCESS",FAILURE:"rweb/scheduledTweets/FETCH_SCHEDULED_TWEETS_FAILURE"}),w="DELETE_SCHEDULED_TWEET",_=Object.freeze({REQUEST:"rweb/scheduledTweets/DELETE_SCHEDULED_TWEET_REQUEST",SUCCESS:"rweb/scheduledTweets/DELETE_SCHEDULED_TWEET_SUCCESS",FAILURE:"rweb/scheduledTweets/DELETE_SCHEDULED_TWEET_FAILURE"});function a(e=u,t){if(!t)return e;switch(t.type){case h.SUCCESS:if(t.payload)return{...e,fetchStatus:S.ZP.LOADED,scheduledTweets:t.payload};break;case h.FAILURE:return{...e,fetchS

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7503
Entropy (8bit):	7.900676253502233
Encrypted:	false
SSDEEP:	192:84crQpTpwUjagkGtNQqEiDJXoFwIEdpv0N:1tNRjaPGtauXo+IEdpMN
MD5:	45FD22B2EA2D97DB6EC2BC3820EA408C
SHA1:	7B7C0B92F54EF46D522E9DA6BB5C9CA0684B3028
SHA-256:	AE6FB599EFB2E117A2AE974B3F2FF3789B142DE8FBD504F19A595B136433E591
SHA-512:	96F690A130348E5E6DE8A38C543B767BBAD4A2AA7B9F1DA48215EA1D3A03614DCCFD6386363CBE168A9FFDF429E0FCAB40EC0FE449347FF41A7416A26F7F5CE2
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000066030000a4060000b90700007c0900007d0d000023120000a4120000dd130000a01500004f1d0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................2.h.Q....Xn.LD... B......6kG.(MY.@..l..Q[.j...!...h..#.....dR.....cNa.A.].0V8.C.i..I..+U5{Us-..<..=..._..w...Mu......I.lob..=..+..U.Z..d.rX..b../!...].,...d..b...9<...j\. zY..mG@..K..k......7wz.><.&{3\A..\....9..,.=..w.;..{.,5.s:._......Un.:..Bc.Lw..8.c.y..k~w.#.x{:.d ..C....8J..:.D,...T.K......=....*K.-.<.3..,...p..I3..N.....)..D!.M..+..]...@........a.A:..llE......4..U.@..+I..%3.<./N#.".Ps....t..5.N.FT.....Xs!.aIz......+...........................1.!2. A."#$30@..............;.J...w.L...>.=._K..4J....H.J ....\|m...eL-.[d..o...&A..j&2..)..;...<.K.1_$.v...^....^.;.......71x.i.,........

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.001874214093168
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiP8vXaMt5TsDjqQyKonfNh:8WiIUemo/HPbfCYKpY4DCVeELABIWoeX
MD5:	DE8D91758818D5586BCABE94B66C6199
SHA1:	0D35B11AB3B65EA3177C62F019682B1FAB4903B3
SHA-256:	2C60E670B405E02C4FDFF52DAE37300C644941290D78D949E77998AC7859BDC1
SHA-512:	018DC01946BCFCE4570F655248739512ADD82F8A0253B8C7B7F62E31AB5F31C5B7AD6484784A694C9475CFA7E390084D21336FDDACAE8C049F861DB2FB57917B
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&pid=bMec6YWePJIWe&cb=0&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043eec5-ae4e-47b4-b8a2-caec03297ff8&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62770)
Category:	downloaded
Size (bytes):	77114
Entropy (8bit):	5.170898107825504
Encrypted:	false
SSDEEP:	1536:WfR3KUYz6yUa1q7SV0B1SxP4nH+wrI1CuoY:I3KUYz6yUa1q7SV0B1SxgnaloY
MD5:	FE0E3DC0EEE845F997A322BE7D0B3CBD
SHA1:	D6D3F9283E25267992031094229CAAD2EA1C98A7
SHA-256:	C58B63D276ACF326A1D1EC0EF32D3C53628B36C79935E5412073A36D0E7C0B48
SHA-512:	C0E28A0C5DF510B7A0B478B6759C8BA1B7EC70A791D87DFAF4BD39C18BB1E47317140755F1811C6643284B6E22A1BED5C0DF4923DE16012434EC6E0380E26752
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yc/r/cGxo7_n9cky.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BlobFactory",["emptyFunction"],(function(a,b,c,d,e,f){var g;function h(){try{new a.Blob(),g=!0}catch(a){g=!1}}var i=a.BlobBuilder\|\|a.WebKitBlobBuilder\|\|a.MozBlobBuilder\|\|a.MSBlobBuilder;a.Blob?c={getBlob:function(b,c){b=b\|\|[];c=c\|\|{};g===void 0&&h();if(g)return new a.Blob(b,c);else{var d=new i();for(var e=0;e<b.length;e++)d.append(b[e]);return d.getBlob(c.type)}},isSupported:b("emptyFunction").thatReturnsTrue}:c={getBlob:function(){},isSupported:b("emptyFunction").thatReturnsFalse};e.exports=c}),null);.__d("CubicBezier",[],(function(a,b,c,d,e,f){var g=.005;a=function(){function a(a,b){this.cx=3a[0],this.bx=3(b[0]-a[0])-this.cx,this.ax=1-this.cx-this.bx,this.cy=3a[1],this.by=3(b[1]-a[1])-this.cy,this.ay=1-this.cy-this.by}var b=a.prototype;b.sampleCurveX=function(a){return((this.axa+this.bx)a+this.cx)a};b.solve=function(a){a=this.solveCurveX(a);return((this.aya+this.by)a+this.cy)a};b.solveCurveX=function(a){var b,c,d,e;for(d=a,c=0;c<8;c++){e=this.sampleC

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2861)
Category:	downloaded
Size (bytes):	20407
Entropy (8bit):	5.520560850208342
Encrypted:	false
SSDEEP:	384:8iYtQqMIl8b/eMlQh/94KamLn9ub+p7rm+vWjiv/UQhZjBs8SYzdcoXZYBhnMhan:TYtQqzlu/eMlE/9ayuCp7rVWjivswbtQ
MD5:	66C44C48FC854F355702E26EDD2E691E
SHA1:	2A0E54078F4E887CE40ADCD6FED97655468BE1DF
SHA-256:	D38450EBB2C0E9EC9FD1A303E255D81A290E00E1C4E2B6BEA6B81476BD713C31
SHA-512:	ABD654DD015DD474B4F3AEF3C701995B408CD87E4B9BAEBE3684B8DCF81FD69631DCC5B2C43E12AC9FA39DABCF53C1C0B275D85BDFB4EC6E0F076E4978EEB05C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var f=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(f,d);return a.apply(b,f)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,f,e){for(var h=Array(arguments.length-2),g=2;g<arguments.length;g++)h[g-2]=arguments[g];return b.prototype[f].apply(d,h

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=264441c2-0e4b-4098-920f-1c8a6b45a578/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=mgid&endpoint=us-west&gdpr=0&gdpr_consent=&us_privacy=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30
Entropy (8bit):	3.9483943455364026
Encrypted:	false
SSDEEP:	3:YH/XHfETmn:YPsS
MD5:	1C686A255150DDECFC5D91AF4B128B0B
SHA1:	A6767D4B4846B16A8A4BA9C2568E2AFFFC286992
SHA-256:	B04CD869CFD41A48C006458F71969A0EB26F33FEC12F3CFE00408F8B73BF3FF8
SHA-512:	4E0D278BC159F289FBE3BBE04D874A7120BEAF4E45F05B03A566D513C4CCC2905A4ADE05D3DD92B169F595D3DC5D03AEE982B0713970C21F9B5A65DC0B17AD6D
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/bounce
Preview:	{"bounce":{"setCookie":false}}

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (861), with no line terminators
Category:	downloaded
Size (bytes):	861
Entropy (8bit):	5.743643765936909
Encrypted:	false
SSDEEP:	24:haoDCfJ2fJfOVVF5Kpp3i2a912pmiYGnra9KdiYBhaSlYSF5G:TeORDppZaG8iYGracdiY3aSlYd
MD5:	EF3A01451DA46B6D2A6A7D89118B3E39
SHA1:	E80EA1B22CC4E79FF7AB924730F897BBDD9F5958
SHA-256:	EBBAF94033F0F9D03187BB029C3D3E53DB1BC6893B72334564F46F094823E730
SHA-512:	FA27CDB070BDF0A8235D15EE0176C5B1A1CB1923EF6217A80185A248C55A4BDE4735BA9CE3A1C7D316DE8AA2C09ECEEA9E447CE717B084F95B5B8A8D148075C2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9847014599&adk=3441210196&adf=4066527037&pi=t.ma~as.9847014599&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010328&bpp=13&bdt=2789&idt=2811&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=1925&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&btvi=2&fsb=1&dtd=2815
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CKLzsYjUpYYDFQnQuwgdYnwNYg"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-7666278362879166\\\",null,null,[[\\\"ID=88a4fc7ad7fa6545:T=1716532015:RT=1716532015:S=ALNI_MZwVbxckP0US2Xii-wE0EgIMbpr3A\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",1],[\\\"UID=00000e2babbca0b4:T=1716532015:RT=1716532015:S=ALNI_MaQvMtIoPBhS__kGZzYzShx9HwF4g\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",2]],[\\\"ID=9402f2e5c9f647ec:T=1716532015:RT=1716532015:S=AA-Afjb4bC8lUD5-gGxwsQs_WHTl\\\",1732084015,\\\"/\\\",\\\"pjnewsletter.com\\\"]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&uid=1f42063c-1e64-4491-87eb-aa2cbcbeb39f&gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	3.9483943455364026
Encrypted:	false
SSDEEP:	3:YH/XHfETmn:YPsS
MD5:	1C686A255150DDECFC5D91AF4B128B0B
SHA1:	A6767D4B4846B16A8A4BA9C2568E2AFFFC286992
SHA-256:	B04CD869CFD41A48C006458F71969A0EB26F33FEC12F3CFE00408F8B73BF3FF8
SHA-512:	4E0D278BC159F289FBE3BBE04D874A7120BEAF4E45F05B03A566D513C4CCC2905A4ADE05D3DD92B169F595D3DC5D03AEE982B0713970C21F9B5A65DC0B17AD6D
Malicious:	false
Reputation:	low
Preview:	{"bounce":{"setCookie":false}}

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	32856
Entropy (8bit):	6.370524623339198
Encrypted:	false
SSDEEP:	768:As/PNPiPQTHCiSbVESUnSTbgtK2RFozpMDWeFDZeNX7Xi:As/PNPiPraNSvgmIWoely
MD5:	939340C7A209B4CA46615C8200F6610D
SHA1:	9DEE563165182C679C2EB808966DCA25AA09B006
SHA-256:	43078647F3BD86002CC2D165F4439181AFA7D53C7B271CF5A02071CC25D6909B
SHA-512:	743AF1C6630EAC427508C015B90B86FF3AD2C900DF96EE71396955B0FB6473EFFDC8B9B01DA19019BFEC8F2C12A2D8B5B33D744099778A089EC0898B44658CFE
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............<(....4C..4Cffv@..pB........4.................4C..4C......................................................................................................................................................Adobe.d.........................................................................................................a..!Q.1A."q..#2r...$3BR...C....%Dbc............................!1QAaq..."2R......#3Bbr..............?...Z..dcI.1....D.i"F4.$...Q ..7I+..#..? .B....[<<.....ZH....i.Zt.HT....&.....\|2.D..t./..w#?.h....O..E.../.X..C....w..J.r).X..2..b.G...Z....:.iP.bwG0...tK..e-'..d.....O.....>.K..;LMg..?P..'...f. t.J...k.'i..\|.-.....u._.g.+...1...CU.p...I..p....~?.y\|.h.S..c.)..K.1....D.i"F4.#.H..$I....W...cI.1....D..q.h.....$I......{.0@z...\7...B...6...8....o.D#.........\z.i.U1Yu.w52......+..cT........@. ..@JX..).&..)G..RF.A...UH...T5....y..o....>......^d0.\....\.u...VG.'..X.U...N..4..i"F4.#.H..$I...c.r...#.."F=.D.i.g...../

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2567)
Category:	downloaded
Size (bytes):	6466
Entropy (8bit):	6.075041406165242
Encrypted:	false
SSDEEP:	96:RdvOLXOeRuxSO+aE4ko9OkOeHODGSI633ez5OegVVoBtM/fZ6n9uK5L:Rd2LeeSVJ8eEGSR3OzMeeoQZy9r5L
MD5:	5EBEE4E8456D7E729E4941F0C031E8A3
SHA1:	9A27E51114A317DABCC5C3F31A9DAA2DF9E4F6E4
SHA-256:	94217853B9E1FB14A7D0D70DB8BD299BC6D42BAA1CBE0064009CEB18900AD788
SHA-512:	977BF50F31C9E7B0B237404A24DEFA01CE45DEC3836C9F60D1024BF3082E16694D27ACEE09840E4CEADEB351DB6849DECF23448E706A35CB487772A59472CCD8
Malicious:	false
Reputation:	low
URL:	"https://servicer.mgid.com/1604063/1?cmpreason=wvz&w=300&h=795&sz=297x236&szp=1,2,3&szl=1;2;3&cols=1&sessionId=66503333-055f9&sessionPage=1&sessionNumberWeek=1&sessionNumber=1&lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532019398489248870&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0&mp4=1&ap=1&consentStrLen=0&uniqId=16514&niet=4g&nisd=false&pv=5&lct=1716458280&jsv=es6&pageView=1&dpr=1&ref=&hashCommit=428598fd&apt=2024-05-16T20%3A18%3A31%2B00%3A00&tfre=11632"
Preview:	var _mgq=_mgq\|\|[];._mgq.push(["MarketGidLoadGoods1604063_16514",[.["Gameofglam","19574287","1","15 Of The Most Inappropriate Dresses On The Red Carpet","","0","","","","iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyYzYhmwnRFTU4GOhSVcCXGjw7uJOs",{"i":"https://s-img.mgid.com/g/19574287/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwczovL2ltZ2hvc3RzLmNvbS90LzIwMjQtMDUvODI1Mjk4LzBlMzNmNTcyZjI2NzU3MWQ3ZWVhNjJkMjhlYzlkYmZiLnBuZw.webp?v=1716532022-QkteOGqeVaRcUJ02RxM5pJXViDpBNmbZFN-ozX0Ytaw","l":"https://clck.mgid.com/ghits/19574287/i/57935209/0/pp/1/1?h=iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyYzYhmwnRFTU4GOhSVcCXGjw7uJOs&rid=a1c9a944-1996-11ef-9b76-c84bd68370c0&ts=actengage&tt=Referral&att=4&cpm=1&abd=1&iv=11&ct=1&gdprApplies=0&muid=o4n2DX9tTBrn&st=-240&mp4=1&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=7cd9d7c7c13ff36&sync_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7512
Entropy (8bit):	7.892125316058073
Encrypted:	false
SSDEEP:	192:RdfZuPQB9HwymPSf4rqGEmY4fDCGfThrj:RdxtHwywbrDlY4+q5
MD5:	DD2ED676F249B0A5AD9D4DE32DCA36B8
SHA1:	40EEBC25D0C6416ED6E9CCDB988DABE5FA5BBF36
SHA-256:	972BEBB79DAB4ED30EF6B488C44511129C76C7272448F361CD7865F8566784EA
SHA-512:	826E9E8B09C46FE1095EBD9915D642DAB911AAC727282424DE602FAC988DEBD9CDFC270BB9217E1F9872CEB16D9A89348E14360ED126FCA81A79EDAD0EE0357D
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/277550235_3222348701419545_6776281629751101018_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=no5e9F1-9ZYQ7kNvgEer8Os&_nc_ht=scontent-hou1-1.xx&oh=00_AYCZ1gULVxmhqf6dX8JVdno6pqsc4idREvNaoPBFoQ0IAA&oe=665620B5
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000077030000b4060000d7070000ac0900003a0e0000ab1200002b1300008a1400006b160000581d0000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".....................................................................................O....f....4.Q..3..e.....(e...s.$.z.w.........)%b...1...hz....L..u.R.o....D.Ow..z.q..X,.....;..p.[3.(k.....\..$1M...G.,V.......`...'..\|~.\.O}.....-....hw.:.o.m.../.h...doX......qc..m.y.k7hx......X...-........5....@>7<;r.a{....n.....9jF.....=.]'..wQ..;V.E...ih..D.R.0....W....)..,Eb.;.<..m..FXV.....dh...Y.....T.I.td...h;.-.KF.$Y .............z...L..I.H.!K.B^..+'n...+.j..i-.U.'.`...s..Sx......=o.)...I.{t).s.G..m...LTt.T.....b.......+........................... 5.!1.."0#2A34...........x...W.+.s8...$.abJ...h.6...O..x..c..a..1..h+..9[9...4.1..yV?...2.3..O....<.ry....2..v..q}B..q>3-.

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	4.724649190606844
Encrypted:	false
SSDEEP:	3:YRMZXKOLz59ifHtKfnS3uWwMLjSnBMB3RYAs2HJHdLUfNVJpPdFH/JJVrmV:Y+T98NruW3LunAYlGdLUfNVJpPDfJJVU
MD5:	72EE6B03CD3D70450D566B2E66E8992F
SHA1:	9AF52020A954D60319878A881B741BAE8A3B93C5
SHA-256:	71F0C958E33905CB028DFD76FF7FCFFA9D57A260845594E84D116530E3F80A36
SHA-512:	D21327FED8735C7C1A636A1784A19A07F40E0F155C58483147745B2D2936D000C4F5CCD0B8E6E7B5298C362508102235343B0A7D9D927BF4A88F012D714636F8
Malicious:	false
Reputation:	low
URL:	https://proc.ad.cpe.dotomi.com/cvx/client/direct/launcher?version=1.1.1&lid=681
Preview:	{"tid":681,"solution":[{"name":"publink","src":"https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js","configName":"publink_options","config":{"pubcid":{},"loadAts":false}}]}

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	515
Entropy (8bit):	3.7079048680061124
Encrypted:	false
SSDEEP:	12:emfrmwtm7AXyUkHHyKsfNf0MLq6p3HHgsfNf0MLq6poHHu:emfBAKiMfRLLFVFfRLLFWu
MD5:	78B73ED4B5ECE35CD6424B56864206DB
SHA1:	6D3C492C0376BD33D010FBBF91CE7586A4131CB2
SHA-256:	59A3FB93AB04312D58A8D0F4E0E9396A8A4B5D2718EB61CBDAADFD8AED34301C
SHA-512:	33AFD353B8313A292F0F1B7A4D23B7317595026688C88903681771355DEBE32B0D7197075E7644D8D664C8D03254824764D2215CB51EA91E9556A3E018D4279E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F
Preview:	[null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",0],["94166617",1]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",1],["94166617",1]]]]

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	26797
Entropy (8bit):	5.4831411322430625
Encrypted:	false
SSDEEP:	384:4ibOLD2OX4OP9HBQtOX/dOYeIb/UCzf/lxrpxU0NOoubaEALgu:bO2W4qhBeIkIT1Vxlx7aatsu
MD5:	CE5BAD7B0E4908499844519FA639ADC7
SHA1:	7106747BDE3DA37B5A01ED141556B10F18B2BE55
SHA-256:	3602DF1184669810F97B1FA4DE87A62B9D33840C258536DCD3DC4E5EC2DA0F9D
SHA-512:	EBB479365106058B7C66BBE77EA6C7C5E05AE461B6BC877C9107C32492BF223E91439D9663DC88DEA4693374C25BE154C545B453765AC207A1A9AC107C8960A2
Malicious:	false
Reputation:	low
URL:	https://go1.aniview.com/api/adserver/tag/5/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532023417&wfc=1
Preview:	{"data": {"trackers": [{"url":"https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east", "e": "sync", "pr": "5", "t":3},{"url":"https://ads.stickyadstv.com/user-matching?id=3655&_fw_gdpr=0&_fw_gdpr_consent=&gpp=&gpp_sid=", "e": "sync", "pr": "9", "t":3},{"url":"https://ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=", "e": "sync", "pr": "9", "t":3},{"url":"https://ssp.disqus.com/redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D52%26key%3DBUYERUID", "e": "sync", "pr": "52", "t":3},{"url":"https://u.openx.net/w/1.0/cm?id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D", "e": "sync", "pr": "23", "t":3},{"url":"https://pixel-sync.sitescout.com/dmp/pixelSync?nid=136&gdpr=0&gdpr_consen

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/rub_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&rub=LWKAUNHL-D-BFYD&gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40023
Entropy (8bit):	5.670652509899909
Encrypted:	false
SSDEEP:	768:7JVxG8bM8p8nXAm7eCh8XJTJCJN8p8x8Y808uJgJOJvJcJzJgJTJiJ5JOJP8mJ9f:FSLmWhMtIN8ahvBecBSNetozcPL9iU
MD5:	C58D77AE24292C3A41001849F865AD93
SHA1:	419F04A9711FE3F7D2DEE41CC94FE7ED074C6510
SHA-256:	6E1ED4D69BCA3D0689F91EF998097999F32AEAF2E6BC8557712491E6052774B6
SHA-512:	00B971E3FEBFFBE90BE41AE70493F4C5D50ACCB5320CBA1D5B8B797B51BAD6C8DA8E74896B8394211EBDA6E14214DC343004B69B7FC92EC792BE44FAEF4B9FFC
Malicious:	false
Reputation:	low
Preview:	{"id": "244578ccbebd41e3744959cc05d9b210","bidid": "cf7488e3cceb8e17a3d891be9382373d","cur": "USD","seatbid": [{"seat": "","bid": [{"id": "cf7488e3cceb8e17a3d891be9382373d_adsservngs2s7fbd5b64h8hm2_6791540_[AVC_WFCYCLE]","impid": "cf7488e3cceb8e17a3d891be9382373d","adomain": ["nike.com"],"price": 2,"lurl": "https://track1.aniview.com/track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=20251&t=1716532060&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=cf7488e3cceb8e17a3d891be9382373d&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=11124732648&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d37=realtime&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a1

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3
Category:	dropped
Size (bytes):	32922
Entropy (8bit):	7.922408828174519
Encrypted:	false
SSDEEP:	384:Rb2l5BNFl3fuvAQ/U070W9AJUy7+hf0ArzdQ3vogrJ9suRBGG9KQRMGIgFGRe2Mz:p2l5H3eAQiwVndQbrJ9DRwG9XdFZqVqF
MD5:	AABD29CBB99AC440DF8E025146CB93A1
SHA1:	D7CD2AFE88464B9FEEC90A0685B60516268DCBF2
SHA-256:	613B424C90A4DCC359915FCE202FCE2CD1BFEF94770F0B2E380FE9EC121C5814
SHA-512:	7E9C31AB82246C08A8B1E745A6FC3A224F9E8F05C001A5857B8B5EFE546F893E81F4A210D3BAF44D28BBC732DE3DFD6F329C619FF5267F4DC9049D0B31444742
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...?...........a......fu........I..~.......mx.J..............x.....u....`.S.....3ZE.........$.......'...4pO........S[........._..?.......o...C.@x......>4x....E...F`.]..B...'.......?.x..?...x..7..k.C...y...m.s.q..s^._.K..$......puuJ.h.O.]...+..h2...\|<?.WM..F.....A'..../Rt...5...Y0X(.@..............3.g..kN..7.gI.p.].......$u#.._..s.\|.Q.,...?2.....Z~..

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2184), with no line terminators
Category:	downloaded
Size (bytes):	2184
Entropy (8bit):	4.943667397921607
Encrypted:	false
SSDEEP:	24:RuqNOVaW9+xzWLXWpLQ4zDTQ4b4547g0eJ47G14au54jgbwsfV/4jx4j9+m4f4jv:EnaY+xz8XOR3e8GXew8MG95cNPILKda1
MD5:	2A4BCCF6AB14A68FEC426A23B92A5C17
SHA1:	A72DCC2009FD9295F177E62FD6578F7175107AD5
SHA-256:	BFF66C17527E0A87B16B7BAA285D8C958ABE5C4432CA8DB8B98B0266D69CF43A
SHA-512:	91DE22191EE59E75D801EBCDB67581C2388F4FDF1CA8D7117C80174C4493E5129E5972AA666374FC076DB5F3CA95DAA533DC159D42BCA973A826E6C50521189D
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=6.4.4
Preview:	.social-warfare-admin-block{font-family:sf pro text,helvetica,sans-serif;font-size:13px}.social-warfare-admin-block .head{width:100%;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-align:center;align-items:center;-ms-flex-pack:justify;justify-content:space-between}.social-warfare-admin-block .head p{font-weight:700}.social-warfare-admin-block .swp-block-icon{margin:0 28px 0 14px;font-size:18px;width:32px;height:32px}.social-warfare-block-wrap input,.social-warfare-block-wrap select{width:100%}.swp-active-block{height:100%}.swp-active-block input,.swp-active-block select,.swp-active-block textarea{display:block;width:100%;padding:5px;height:42px;border:1px solid #e2e4e7}.swp-active-block textarea{height:64px}.swp-active-block .swp-inner-block-50{width:50%;display:inline-block;padding:0 1px}.swp-active-block .head>div{display:-ms-flexbox;display:flex;-ms-flex-flow:row no-wrap;flex-flow:row no-wrap;-ms-flex-pack:center;justify-content:center;-ms-fle

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10665)
Category:	downloaded
Size (bytes):	10888
Entropy (8bit):	5.467931744654611
Encrypted:	false
SSDEEP:	192:woBTV8ERERjKJKKHnkWrVDbjLUxSRIn7Rw7g1i/8n62o/DIWEvz5fhpy:wo92vKJKKZFviRwk1i0n5o/kWuz5fhpy
MD5:	5CB6DE0167AF607F6A3064F1BB7AA1AC
SHA1:	B5989A6686C4652197069E9DDC51D507B5177D37
SHA-256:	26960EBD2A76D1FF65BBD7B9DEFF294B6605000ED99353D59DEC23BD0833847D
SHA-512:	A7D314C37976FB0C7CB73183378D631F272DC8B55876DA640B9C1C0F8DFAB796EB1636AB97CF6E454EF9F2F3437A1CFF52FF2B120635B1D0407CC54B7BB7631F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun.d0ff2e6a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.Account~bun"],{3613:(e,t,n)=>{n.d(t,{Z:()=>s});n(36728);var o=n(2784),i=n(25686),r=n(91300),a=n(73186);const s=({children:e,color:t="gray700",size:n,style:a})=>{const s=[];return o.Children.forEach(e,(e=>{const i=s.length;e&&(i>0&&s.push(o.createElement(r.Z,{color:t,key:`middot-${i}`,size:n})),s.push(e))})),s.length?o.createElement(i.Z,{style:[l.middotGroup,a]},s):null},l=a.default.create((e=>({middotGroup:{alignItems:"baseline",flexDirection:"row",flexShrink:1}})))},32070:(e,t,n)=>{n.d(t,{Z:()=>z});var o=n(7896),i=(n(6886),n(2784)),r=n(14983),a=n.n(r),s=n(28316),l=n(31461),d=n(80753),u=n(81665),h=!!document.documentElement.currentStyle,c={"min-height":"0","max-height":"none",height:"0",visibility:"hidden",overflow:"hidden",position:"absolute","z-index":"-1000",top:"0",right:"0"},p=

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2623393
Entropy (8bit):	5.224829485322373
Encrypted:	false
SSDEEP:	49152:ujRy8oEAJLLPRoGW3GdSw1a3PPqnmxt/MAZoflPFF4loQhzkJOzlL4LxjUpAX7Y2:g+
MD5:	36597D41E331CF57FAFDCDF4A2BB9C34
SHA1:	CDE1C242944AD35FC4CD551550A28547959B0508
SHA-256:	5242151A3CB46B7308D0A63200207BDAE403F8310AA3A0203327A2793074DC85
SHA-512:	207B48BF23C614F4616BB9E3EDCBA1293B7D115CA62AD1F0B942D875FCA280DF46B92FB1638684426D1859D00C9410B7A85C8C69234D22403B97503A7C19D78F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/main.8bf92a8a.js
Preview:	window.__SCRIPTS_LOADED__.vendor&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["main"],{26738:(e,d,n)=>{var a=n(79404);a.loadLanguage.registerChunkLoader((function(e){return n(31893)(`./${e}`)}),["en","ar","ar-x-fm","bg","bn","ca","cs","da","de","el","en-GB","en-ss","en-xx","es","eu","fa","fi","fil","fr","ga","gl","gu","ha","he","hi","hr","hu","id","ig","it","ja","kn","ko","mr","ms","nb","nl","pl","pt","ro","ru","sk","sr","sv","ta","th","tr","uk","ur","vi","yo","zh","zh-Hant"]),e.exports=a},31893:(e,d,n)=>{var a={"./ar":[40421,"vendor","i18n/ar"],"./ar-x-fm":[97180,"vendor","i18n/ar-x-fm"],"./ar-x-fm.js":[97180,"vendor","i18n/ar-x-fm"],"./ar.js":[40421,"vendor","i18n/ar"],"./bg":[16664,"vendor","i18n/bg"],"./bg.js":[16664,"vendor","i18n/bg"],"./bn":[93458,"vendor","i18n/bn"],"./bn.js":[93458,"vendor","i18n/bn"],"./ca":[45949,"vendor","i18n/ca"],"./ca.js":[45949,"vendor","i18n/ca"],"./cs":[90186,"vendor","i18n/cs"],"./cs.js":[90186,"ven

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=7F542745-2D60-41EB-9A96-52B90C82DF34
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73081
Entropy (8bit):	5.518483041163519
Encrypted:	false
SSDEEP:	768:HtLhYFNAIwJm5XmevRJj4bvS6Q/E3C6EBlq2R4SV0ClzNTKcjq1nSwII:lSFeQNJIqv/OslqQV0CxNTKfSpI
MD5:	6D789BE78A1DF3EE3E4D40CA25D45005
SHA1:	7CB79DAB4B5859FEF2D9B00B6669169044510EA9
SHA-256:	6EDC07CAC2192C4E4E179E8466AB805E728444AD00EE4F72E51425020DA1D78F
SHA-512:	4112C5B4BF7597C5A68BB4BE79CC2E4EEC82CFFD4266F9F578363F29E3E545A98507CCA59F9C75B68E41D3C74BBC3B8E976B2145A2E226CEEF00CF61827AC7AE
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/ab5/libs/prebid/avpb8.48.0a4.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[233],{2017:function(e,r,t){t.r(r),t.d(r,{BB_RENDERER_URL:function(){return U},ENDPOINT:function(){return D},GlobalExchange:function(){return x},ORTB_VIDEO_PARAMS:function(){return j},adagioScriptFromLocalStorageCb:function(){return k},getAdagioScript:function(){return L},internal:function(){return z},setExtraParam:function(){return W},spec:function(){return Q},storage:function(){return w}});var i=t(4942),a=t(2623),n=t(5644),o=t(3802),s=t(265),d=t(4030),p=t(4953),u=t(5774),c=t(1582),l=t(6064),m=t(4171),_=t(5740),f=t(8528),v=t(9398),g=t(5992),h=t(4125),y=t(460);function b(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);r&&(i=i.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,i)}return t}function T(e){for(var r=1;r<arguments.length;r++){var t=null!=argu

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51023)
Category:	downloaded
Size (bytes):	52305
Entropy (8bit):	5.731929742698319
Encrypted:	false
SSDEEP:	768:jUYNvtJUCOi9u+CTTDl6hXuGnSaFZYN/5jkWKxBtJtBws3daee76hks7texd:jUYNvtJUCfh1XuWa23BwsY76Ji
MD5:	5BF5189B73A6D378DE9D611FB962D907
SHA1:	16BAE3739C5977C80050D8D5EDE4DC2578938E9E
SHA-256:	2986D2069E8A62755A6D550AFC85140E20760A774CC1C05ED278A111FB84526A
SHA-512:	2625CB216D01D7522A9DE21AD2168162F70D367D6C5684CF43D59793BE5972039761AD331BD05F6A950F34905AE26C2CD1083019B9D64CA844B67F7D8FB30CB3
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/KYbSBp6KYnVabVUK_IUUDiB2CndMwcBe0nihEfuEUmo.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function A(S){return S}var O=function(S,Y,R,l,z,W,v,e,q,y,k,x){for(y=(k=l,36);;)try{if(16==k)break;else if(k==Y)k=q&&q.createPolicy?41:R;else if(85==k)G.console[W](x.message),k=51;else if(k==S)y=36,k=99;else if(99==k)k=G.console?85:51;else if(41==k)y=17,e=q.createPolicy(v,{createHTML:J,createScript:J,createScriptURL:J}),k=51;else if(k==l)q=G.trustedTypes,e=z,k=Y;else{if(51==k)return y=36,e;if(k==R)return e}}catch(a){if(36==y)throw a;17==y&&(x=a,k=S)}},G=this\|\|self,J=function(S){return A.call(this,S)};(0,eval)(function(S,Y){return(Y=O(63,66,8,0,null,"error","bg"))&&1===S.eval(Y.createScript("1"))?function(R){return Y.createScript(R)}:function(R){return""+R}}(G)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applica

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://a.mgid.com/1x1.gif?id=825298&type=c&tg=d67dc17da8918b77c2d9121386e379a0&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=006f8
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	4562
Entropy (8bit):	7.886750321197365
Encrypted:	false
SSDEEP:	96:lcw71Hocx6j6wWcrUW002NUd8scQQp8lSnj9xyxjjkX:2O1Hocx6msJh2NUd8scQ8vhoFj8
MD5:	DAF44C724B00BC1062469ABD57C13374
SHA1:	5609550E4744EF21D87C4B21E0D05C68E40ED28D
SHA-256:	E6BDDF0A8DD1FB2ED8301AE85F1E761D0B742F0F721D4FFE734D177C3B6B8643
SHA-512:	B38B6EF91AD7062ADA61CAE4EAB5EC2BB824CDF7FAB7E038BE1C2A13CAC5BA5CB6AB150C265DA4BE43BAA8C96C2129BDE5E114D29AECEE93F9DB7F1B27BF2807
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/mick-pic-150x150.jpg
Preview:	......JFIF.....`.`...........................................!........'.."#%%%..),($+!$%$...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."..........4..................................................................,.f...N.......8.w[.!x\|.Bd\|wp.hAp.H..8.P.. .T.J...ej....4.!5........}.....AD@...(B#ILUl,.O....jS .+hf..~.e..u....(......rH(..a0...-.K.......H....1.:.,.f.+..'.....t<W]...P$X.@..n..R....&...bU_Dg..Q....U.........m..KYVnY.S.`.....<..Y...{.,.bou..U...%...=A7..y...-.C...CjVE4.....,.nX...y......4..o..L.8..).1ky.zV7q...).!(Y4..\6...3E/-V.QS}.%P...f.p..D..R....s..{v.{..V......N.j.....KI..\|.h......GJ..4..:#B../....%A..9...-p.z.HTn...I4@....;........lRX..r.w+.<..D........=.........................!..1AQ"#2aq..BR.. ....3r...Tbcs...........?.........(.J%..i?~.....}......Z[_+N..i..oi.oE.Dsx....(..S.'.uu....D..M.r........E.S.].v..8....4>F.9.~....<.4..o...)nW...,PJrHu....J%..W.F.#.[...x..i.*.......r.q.T.}...c]...6.N..ps....U......

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
URL:	https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22059416475%2C22652678936%2C187271864%2Fpjnewsletter.com_AV_DFP_MCM&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2539233591150969&cust_params=ps_floor%3D1.5&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=2337637776&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dlt=1716532081489&idt=7744&dt=1716532089537&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=3529591305351942&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td9_tt1_pd9_la9000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7103%2C22652678936%2C187271864%2FSMG_Aniview%2Fpreroll%2Fsyndication_2&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&tfcd=0&npa=0&sz=640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2699763576227964&vpa=auto&vpmute=1&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1343627374&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44776495%2C44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dt=1716532112701&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=1335971620672287&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td32_tt24_pd32_la32000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts11_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2898)
Category:	downloaded
Size (bytes):	15964
Entropy (8bit):	5.356338279687982
Encrypted:	false
SSDEEP:	192:spa4Oo9opxjopc3JtuQnNA/qy/ewi5aF2gp:sjt92N2c3OWNA/qy/ewigFf
MD5:	A6DE110CE9975FD476904D5CDF2E87EB
SHA1:	26FB91F0613000D031DBCA07F11780331685425E
SHA-256:	6D01DE326003320637524CD445AB862B6923CDFD78BE8E11EA524AAA07056548
SHA-512:	D5D51219D508590EC5515A9B2C79C36EC5A2D7D28AC2DE1B1124DAB4CDFD891F4151CBEBBC397DA8E2E0DC72B90666A0E3F64B3952EA96D5A6AC60C046E8A664
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y0/r/lkJgXifRthX.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseResponsiveGrid.react",["BaseAspectRatioContainer.react","BaseContainerQueryElement.react","CometSuspenseList.react","react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react"),k={container:{display:"x78zum5",flexDirection:"x1q0g3np",flexWrap:"x1a02dak",$$css:!0},fixedHeightContainer:{end:"xds687c",left:null,right:null,position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",$$css:!0},sizer:{display:"x1rg5ohu",$$css:!0}};function a(a){var b=a.children,d=a.horizontalGap,e=a.verticalGap,f=e===void 0?d:e,g=a.lastRowFiller;e=a.revealOrder;var i=a.minWidth,l=j.Children.toArray(b).map(function(a,b){return j.jsx("div",{className:"x9f619 x1r8uery x1iyjqo2 x6ikm8r x10wlt62 x1n2onr6",style:{minWidth:i+d,padding:f/2+"px "+d/2+"px"},children:a},b)});e=j.jsxs("div",{className:(h\|\|(h=c("stylex")))(k.container,a.maxRows!=null&&k.fixedHeightContainer),style:{margin:-f/2+"px "+-d/2+"px"},children:[e!=null?j.jsx(c("CometSuspenseList.react"),{revealOrder:e,childr

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60691)
Category:	downloaded
Size (bytes):	86914
Entropy (8bit):	5.457426836307969
Encrypted:	false
SSDEEP:	1536:5PeOhV5kgUGInt44PHFbHAVJ2WLWwLLGmpMX1CDj:t0m0bgVJ2UW6WXY
MD5:	1387853871982D1DBADD1610A89637CC
SHA1:	D9BE8DB6246358682D61D0B58A4418C3FD221554
SHA-256:	DB87F09595B3FB77F84EFA728915F141C6EACBC8AA41F1654D7BC6E03E52D601
SHA-512:	4673D007A3BCEF8EFAB41E36A764A924EA78633023262368094DA6F12417AA221829191092261E2B636BE813208B34DD658AC478F66A9088CED44FDCAAC0A273
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/lidar.js?fcd=true
Preview:	(function(window,document){var l;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function n(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}n("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.prebid.144.js
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	6878
Entropy (8bit):	7.874188667650157
Encrypted:	false
SSDEEP:	192:gMhHhFzBaF7aoYd6KDIrCGTHuCidVNL1e:zhBFzBO7aoQIrCI1idV51e
MD5:	32FB25904BEFE49D10E8E87B6BAFC4E2
SHA1:	9AB7353E010C7545A022EB6F976F0DC399A73D19
SHA-256:	66D05B12AD66AD5004A4501C207E01B9D6D3C32E41DBE445CFA98CAF5B0621E6
SHA-512:	1CCCFF12743A67371B6B0867B1ADF4F92A733E5198B81556BD92219504369BEDEC0479F1CB6EF2697ED50D2DED743FD2C3DBDE885E214115E47852134F0DFB56
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000064030000b3060000ec070000c6080000730c0000e110000061110000b612000089130000de1a0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................),.O.$../...a..&...6@.:..u..h...U60..Z...^?W."..}?....O.M....).U....).._.}eCW9U.q..O..b._\.Lb..W..+7.+Ri.!.^.MN+i.l$...6....bPY.`}...S.........)..Wk.cT;Z...m.a!..`.......J....C........L.k...z..y.3.$.t1.tCV..X.mR.O..zm..Wu3U.(.\|.O!j../......d\.....2.m.O...?E....g.....<.....R....^.)...z....X'O.l.....J.K...r.t...W..F.]..d.6. I I I I I I I I M9..tj)R.....1.....G6...?..wfH...hXNZ.M.xDu..j..W....8F.3Bu{....(E.....J...m.Ig..............................!.1"#234..5A.$0@CP.................u.uFu.>..m`!mb.....2c.m.F...q.......Z.a...3..V.3..\|.l..yd.....\|.-..z.Ud97jE.3.44.zA...}.f........l..b..S.

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.813607894428283
Encrypted:	false
SSDEEP:	3:OXMLQHJ/A6MBQCMDRDSr1XTDHJzDASO5n:OXFJHMBQpRDSr1DbGln
MD5:	9A041939D0821F70E69A74BB68FE765F
SHA1:	CCB7FA51258A3E2B1ADBA36037CFA6339772087B
SHA-256:	5424561FA3A1AB13A3EAC4166D498EE96453D876DD3C519088243747978952F1
SHA-512:	752A0E916B152BB805109141AF40CCD0AFFA519FFA9F9B9B6F69799BCA3CD0C5A934A4D16CF447A0491B8AB8B1FF1C691619CDD96953597FD47805BC5CAF8A50
Malicious:	false
Reputation:	low
Preview:	{. "addr": "8.46.123.175",. "base_id": "da68ea0929191655133f70d9fd73526f",. "domain": "pjnewsletter.com".}

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5919)
Category:	downloaded
Size (bytes):	6142
Entropy (8bit):	5.375151602088564
Encrypted:	false
SSDEEP:	96:mB7dXbrp/a9CrfCAkF18nwSG+GC0A/6jJ7YbiPDjKrbV9rbOD2qKFVzheCBd:eXXp/1CAQ18w2GC0A/697YbiPDwwSq61
MD5:	B66D7924924F573F24D78C672507D575
SHA1:	28EE158603DB29EBFF3B126F74C88998F70056F4
SHA-256:	6D59F166DD56BD405E3B379F2F3B0A935D35D350F8FF927180DEFD84F2A0C342
SHA-512:	2C26EDDE059CB1971362C0D3E71D837C4E8F50508852B7D13081E87FE6CB7FBEA3E3EF2483DEEF79F522A9CD22A708BC9DC9C94D4266F2695DF9138B42D242FE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~b.f500c52a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.DirectMessages~bundle.DMRichTextCompose~b"],{86348:(e,t,n)=>{n.d(t,{Z:()=>S});var i=n(2784),s=n(76648),r=n(44487),a=n(82392),o=n(11839),l=n(73487),c=n(73186),d=n(45184),p=n.n(d),u=n(50941),m=(n(6886),n(40080)),g=n(73206),h=n(29496);const f=p().cfd2f35e;class _ extends i.Component{constructor(...e){super(...e),this._handleOnFocus=e=>{e.currentTarget.select()}}render(){const{cancelButtonLabel:e,description:t,headerText:n,link:s,onCancel:r}=this.props,o=(0,m.Z)("input",{autoFocus:!0,onFocus:this._handleOnFocus,readOnly:!0,style:y.linkInput,value:s});return i.createElement(g.Z,{onMaskClick:r,style:y.container,type:"center",withMask:!0},n&&i.createElement(a.ZP,{align:"center",style:y.headerText,weight:"bold"},n),t&&i.createElement(a.ZP,{align:"center",color:"gray700",style:y.labelText},t),o,i.createElement(h.ZP,{onPr

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (3386)
Category:	downloaded
Size (bytes):	9139
Entropy (8bit):	5.520843752274848
Encrypted:	false
SSDEEP:	192:Nl2s0yrpk1Eri7SkBFBWDfVeF4nqCkWO6fU0P2iG+Mfl:D2szrW1Eri7SUFBKQ+qCkWBfUU2B+Wl
MD5:	F2454552E0DDFA5EE5D983BE2A0C6ECF
SHA1:	6BD76C93838A3D6335C9D25A811CC78F4B321978
SHA-256:	1C6258F276A2B35AE4A0BAB73C6C33DC1F6559A17C31CF49464561A966BDBC53
SHA-512:	57686B48EEE84AC0DB1BDDA8681E07DE4D00405358AC52F7C1F6B67860D69D94E4F5D81BF4D220EEA20A2A8BD6F7253671066D53D31E1C031507877E5C9CE42C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],null==z){v=null;break a}v=z}var da=v&&v[610401301];n=null!=da?da:!1;function ea(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var B;const fa=k.navigator;B=fa?fa.userAgentData\|\|null:null;function C(a){return n?B?B.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function E(a){return-1!=ea().indexOf(a)};function F(){return n?!!B&&0<B.brands.length:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLowerCase().indexOf("webkit")&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?C("Microsoft Ed

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	95268
Entropy (8bit):	5.282555697039335
Encrypted:	false
SSDEEP:	1536:NgsIZI3lDao90l8Rnci+xaHdO/TkukBXrbzldU7LGOKJgH:8mao90lYncRaHx3zldcGlm
MD5:	975872BEEA6FA436507D8A74321584B7
SHA1:	22F1994461D3BF79CFEC0E2CF2D219F8C8B7532A
SHA-256:	6D830A998066B3E15644D716280D1E6BDCEF4DCB2C463DA234743B7ACB8416ED
SHA-512:	4F686F47A05FD2001D7DA0B4008140E4D0056E3B8EC8B06D93C4D0B7365CDE4FA4CB813DA1AD332C0022FC8C60F2C7944009AB5D4986C906B36C7D38A321FEC9
Malicious:	false
Reputation:	low
URL:	https://cdn.id5-sync.com/api/1.0/id5-api.js
Preview:	/*. @id5io/id5-api.js. * @version v1.0.65. * @link https://id5.io/. * @license Apache-2.0. */.!function(){"use strict";function r(t,e){var i,r=Object.keys(t);return Object.getOwnPropertySymbols&&(i=Object.getOwnPropertySymbols(t),e&&(i=i.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),r.push.apply(r,i)),r}function d(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{};e%2?r(Object(i),!0).forEach(function(e){l(t,e,i[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(i)):r(Object(i)).forEach(function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(i,e))})}return t}function c(e,t,i,r,s,n,o){try{var a=e[n](o),c=a.value}catch(e){return void i(e)}a.done?t(c):Promise.resolve(c).then(r,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,i){var r=a.apply(e,o);function s(e){c(r,t,i,s,n,"next",e)}function n(e){c(r,t,i,s,n,"throw",e)}s(void 0)})

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25383)
Category:	downloaded
Size (bytes):	25606
Entropy (8bit):	5.471286944554183
Encrypted:	false
SSDEEP:	768:vZSJFFQnTmkNtaF19MYU2Lipkby/I/ez/MpUOJO1R2x+0:vsXdewaq
MD5:	5BE189666D663597DB4F26165C03345D
SHA1:	D8B3890C20AD2DE77BACD1237B1BB63B25446D8F
SHA-256:	EABD7C1AC16D27DF1D7585C87322B97E467344CB93E7FB56DAFB9ABCF108B960
SHA-512:	5070B1489C5CE63F19E07894E4463D3D18168772A1BAD6BF4623C7550A9B759B85B4EDDF751451D7208DB4F947F4C60E14A0F8A906D227FD9D5994FE03CAA6CA
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~b.210a2cfa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~b"],{43346:(e,t,n)=>{n.d(t,{Z:()=>i,l:()=>r});var s=n(34562),a=n(42938);const r=(e,t)=>{var n,a;const r=null==(n=e.data)\|\|null==(n=n.labels)\|\|null==(n=n.find((e=>e.label_type===s.w1.PINNED)))?void 0:n.timestamp,i=null==(a=t.data)\|\|null==(a=a.labels)\|\|null==(a=a.find((e=>e.label_type===s.w1.PINNED)))?void 0:a.timestamp;return r?i?r-i:-1:1},i=({sort_event_id:e},{sort_event_id:t})=>e?t?(0,a.ZP)(t,e):1:-1},18397:(e,t,n)=>{n.d(t,{$S:()=>Me,Ae:()=>be,Ap:()=>Ze,BW:()=>xe,Be:()=>Ae,Ek:()=>Be,FI:()=>Fe,FS:()=>te,GP:()=>Oe,Ke:()=>je,OF:()=>ie,OW:()=>Ie,PZ:()=>Le,Pr:()=>J,Qe:()=>Je,S9:()=>Re,SF:()=>fe,UA:()=>ce,Um:()=>ue,W:()=>de,X5:()=>Xe,Xw:()=>ke,ZP:()=>K,Zg:()=>se,_D:()=>He,aG:()=>oe,ax:()=>ne,ck:()=>_e,d0:()=>De,dq:()=>ge,gQ:()=>$,gq:()=>ae,jT:()=>re,lT:()=>Ve,nI:()=>Ke,qH:()=>N

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1522), with CRLF line terminators
Category:	dropped
Size (bytes):	15515
Entropy (8bit):	5.337140256977335
Encrypted:	false
SSDEEP:	192:OVNIl1oXl8vheVfOREByWcOOjhBW4YJQfpAg2hnzqsIInrW:al8Z4fOREByWcO64QfOhrW
MD5:	E70F63800F5791DE66EAFADAD9D672FD
SHA1:	580C4C0B8A32B3809139FD0247C672659E080E7D
SHA-256:	006CBA1A0176D07F6934353C3C0BFAA9EC29F37C7AD3C4283FC1CFC0AD8B792F
SHA-512:	D3C7E2B23C77C4DFB9CB7089DD6AFBF13AC798AA9CA5BA227C273EB16E64743F65890F4CCA1A7D41A4A1D3DAEAEFE8AD81EE96AD81C952B86F903AB52935491A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html>....<head>...<meta charset='utf-8'>...<meta name='viewport' content='width=device-width, initial-scale=1'>...<style>....html {.....font-family: 'Helvetica Neue', Arial, Helvetica, Sans-serif;.....height: 100%;....}......body {.....margin: 0;.....padding: 0;.....border: 0;.....background-color: white;.....height: 100%;....}.......truncate {.....white-space: nowrap;.....overflow: hidden;.....text-overflow: ellipsis;....}.......title-container {.....min-width: 0;...../* for the text truncation in a parent flex block /....}....../ template /.....template {.....color: black;.....text-decoration: none;.....overflow: hidden;.....height: 100%;.....display: flex;.....flex-direction: row;.....flex-wrap: no-wrap;....}.......template-vertical {.....flex-direction: column;....}....../ image */.....image-container {.....width: 30%;.....height: auto;.....overflow: hidden;....}........image-container .label {......display: none;.....}........image-container .title-container

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	402
Entropy (8bit):	4.850637469300643
Encrypted:	false
SSDEEP:	6:YAdiZL+WRSafY5X5gMfAA4m3jvKAmE1bG4CaPtt3PRAD3PUJxaPRU:YqiYWRSafoJfAAJ3jvKAF1bG4vRSUypU
MD5:	39EB042F92CE61B99D9FE1ADE98B4626
SHA1:	8B0F3540FF18572E2000C3176B1AE1193EFCFE65
SHA-256:	1A614BDE5E0314ED82957C65A6B0BC9E3B1C5AB17B9817B40D0FA3884D3748AF
SHA-512:	06C41EC974693AC0897874366885033F050E7B4D58504FD63EE06FC67F1D6DD8B4C63F842BA86EB54D8C72B66FC5DD315F033AEDD6413D277F0E2BB0FA93BA78
Malicious:	false
Reputation:	low
Preview:	{"error":{"code":"request_format_invalid","message":"Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.multiplexFetchV3(io.id5.fetch.request.web.multiplexing.MultiplexingFetchRequestBody,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)","type":"invalid_request_error"}}

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=aGRuRFE4cmQxU2Fvb0w1&google_gid=CAESEI1JWtOXZ7Q71qIOLTXTQeM&google_cver=1&google_push=AXcoOmS-bjHKOardqulypP2UYiTzmKB3L116tStwzstCOUMb3Q2UpAxYzoAiWCRouRNePTIBoHneCMjUNeROQ4NecDAUcTxJeVTgf6c
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	405810
Entropy (8bit):	5.419503978236341
Encrypted:	false
SSDEEP:	6144:sJPVOqfLImh+YfKZ6huhbDicHywkIJkMHs32cZBYkoVvpltjPSeyl:sffLImyggpJpi
MD5:	2138F5E5C2BF22167CA9E4AAE0B97E17
SHA1:	65553D79068ACD33BBC90BAB8DAD817D3854967E
SHA-256:	E9097D6A2724B1AECA7EFD35191617FA5982CC5F6F08AE96B6018EC810E63266
SHA-512:	05D3A0A0C849446E0ED4EE95F78008A24C4E705A6332C97428039886751E09D2AF3502421A85CC314F46941840837FDA7B884F69E5F8B524E2A51D359E2F2534
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode.14f1bd9a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~loader.AppModules~loader.DMDrawer~bundle.MultiAccount~bundle.ReaderMode"],{93128:e=>{e.exports={queryId:"QjN8ZdavFDqxUjNn3r9cig",operationName:"AuthenticatedUserTFLists",operationType:"query",metadata:{featureSwitches:[],fieldToggles:[]}}},18561:e=>{e.exports={queryId:"9KUFz7JwBZ1kYd6c9tBetQ",operationName:"CommunitiesExploreTimeline",operationType:"query",metadata:{featureSwitches:["rweb_tipjar_consumption_enabled","responsive_web_graphql_exclude_directive_enabled","verified_phone_label_enabled","creator_subscriptions_tweet_preview_api_enabled","responsive_web_graphql_timeline_navigation_enabled","responsive_web_graphql_skip_user_profile_image_extensions_enabled","communities_web_enable_tweet_community_results_fetch","c9s_tweet_anatomy_moderator_badge_enabled","articles_preview_enabled","tweetypie_unmention_optimization_enabled","responsive_web_edit_twe

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	34560
Entropy (8bit):	5.785748593472812
Encrypted:	false
SSDEEP:	768:J2J8FpAuYBhoLE5P9FAO3N9KQeZKnGEialbUSRfllktGj7KeQbyni:J2J7uYBhoLgP/AgaJ8nMavllQGj73QbD
MD5:	0ADC0D9564D090ABE498AE8DC3746E4F
SHA1:	3FEB317473619F73E41FDDF5F2D56767D59CD308
SHA-256:	61B7EC0CD4189F4BD47025C9776BD50871B7E62DC5C9F7BFD96EC34DD9CBC4BE
SHA-512:	CE240344B67388CAAA6FC6B774D8ADEFBA324B9C52903ED46CEB38F1E143A9E12DDCCF95985E8689558A2E3CB28D934633259353B9E69EF1BD6953CF31A4EA83
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYBW4kAHZuZt0p14c97m3AwoJklkQWcpl80KkxX9u0CJzA&oe=66779F30&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C33.@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12444)
Category:	downloaded
Size (bytes):	12667
Entropy (8bit):	5.527937688704685
Encrypted:	false
SSDEEP:	384:dFHLaTwyxbwyRTbvXT3Trj7TSIHIFQMTj+WF0M/uI7NCD9Sy:dsxxbwyRTbvXTTrj7TSdFQCD0M/u4a9h
MD5:	359B1F08ED29D3F733C265B03B6B9C73
SHA1:	2024D2E441B4D7D86AA7D5235D740CCD0E3D87BE
SHA-256:	A331F8B5182857DFE5C0D2A215F6DB5ECB6BB66813C5657A277FAA8C5154EE8E
SHA-512:	B0FBD21534743C7C9B0295AF73511D76DBF138C7D36813C83B58063F1D416186D86B61DABD97AEACF55B19F740FACB059C613CBBDF4FAEB1EA6F56459237995C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird.e8ad580a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.AppModules~loader.DMDrawer~bundle.ReaderMode~bundle.AudioSpacePeek~bundle.Bird"],{63143:(e,t,o)=>{o.d(t,{BH:()=>I,Qj:()=>R,Wc:()=>z,sI:()=>D});var i=o(2784),n=o(82392),s=o(73186),r=o(45184),a=o.n(r),l=o(63014),c=o(90649),p=o(7307),h=o(81921),d=o(33330),u=o(40271),m=o(80166),_=o(62295),w=o(21783);const g=a().a17a75da,b=a().e7342ed4,S=a().b6a43e78,f=a().b469e406,y=a().b8505290,A=({userFullName:e})=>e?i.createElement(a().I18NFormatMessage,{$i18n:"e1a49407"},i.createElement(n.ZP,null,e)):void 0,x=a().ae8b0564,v=({userFullName:e})=>e?i.createElement(a().I18NFormatMessage,{$i18n:"be54ed41"},i.createElement(n.ZP,null,e)):void 0,T=a().f2adab0e,L=({userFullName:e})=>e?i.createElement(a().I18NFormatMessage,{$i18n:"jb19eb17"},i.createElement(n.ZP,null,e)):void 0,P=({userFullName:e})=>e?i.createElement(a().I18NFormatMessage,{$i18n:"bbfee611"},i.createElement(n

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2523)
Category:	downloaded
Size (bytes):	222635
Entropy (8bit):	5.554134791760826
Encrypted:	false
SSDEEP:	3072:ZsZc0IardJOdsXbS8TqCIqjysCBgJ7dQWqzGmRmY4xKQIAz47tN:Z0bJOdsL9Z1LRdQWqzGanf
MD5:	0166CF8A0A12658B8FA0E7238F706B30
SHA1:	1DA5B8A75F0D6D077B765D29086E18117FAE5849
SHA-256:	DE0AD82AF56F9EE6D004616A0B3E1639A47E50DF2CF2C9C02B11857359995F6E
SHA-512:	288ACD8D205C5C85AA486412B1AB6919FA21BE86033623469A06F050D2AE7C20DEC5193E97E1EA2B7745529CAE91FA23ACCED684551C47F76012C24E507B808A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TX6FSMK
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"19",. . "macros":[{"function":"__e"},{"function":"__d","convert_undefined_to":"null","vtp_elementId":"publish-date","vtp_attributeName":"post-id","vtp_selectorType":"ID"},{"function":"__d","vtp_elementId":"publish-date","vtp_attributeName":"publish-date","vtp_selectorType":"ID"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-71705037-13","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__c","vtp_value":"154908708357560"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_ena

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	515
Entropy (8bit):	3.7079048680061124
Encrypted:	false
SSDEEP:	12:emfrmwtm7AXyUkHHyKsfNf0MLq6p3HHgsfNf0MLq6poHHu:emfBAKiMfRLLFVFfRLLFWu
MD5:	78B73ED4B5ECE35CD6424B56864206DB
SHA1:	6D3C492C0376BD33D010FBBF91CE7586A4131CB2
SHA-256:	59A3FB93AB04312D58A8D0F4E0E9396A8A4B5D2718EB61CBDAADFD8AED34301C
SHA-512:	33AFD353B8313A292F0F1B7A4D23B7317595026688C88903681771355DEBE32B0D7197075E7644D8D664C8D03254824764D2215CB51EA91E9556A3E018D4279E
Malicious:	false
Reputation:	low
Preview:	[null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",0],["94166617",1]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",1],["94166617",1]]]]

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2595)
Category:	downloaded
Size (bytes):	2818
Entropy (8bit):	5.391743048798541
Encrypted:	false
SSDEEP:	48:iIy2H5f67wWo/OOL330pV+CDCbb+DGfUySr5p3704Js0Y7Fx8WmE2H5u:m2N67033jCOboG8Tr5VYDOC24
MD5:	ED3B78A8FE41CF546836967DA6FFBB5A
SHA1:	0DD6319F10DBDFBA3E6594F05086DD4E85DE0B00
SHA-256:	9173E6D3DFD61609C0099BBE227FC284C8F82B3352AD577B202F31A29FCAC503
SHA-512:	2F3E17EA7F2E802F0A6CFD70C243DE7F88B9BBC9FBF49E44C610CDE0E3F8CB63EDA34D399BF5BCEBACCB172655B630C6BC36984BADB9728329F8B22C2AFD836F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~.8ed665ea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AccountAnalytics~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.BookmarkFolders~"],{10364:(e,t,n)=>{n.d(t,{Z:()=>d});var i=n(2784),a=n(25686),l=n(77920),r=n(33363),o=n(82392),s=n(74062),c=n(73186);const d=e=>{const{description:t,disabled:n=!1,isActive:d=!1,label:m,link:p,onPress:h,paddingHorizontal:b,renderRightContent:g,role:w="tab",styleOverride:f,testID:y="pivot",thumbnail:v,thumbnailSize:C,withoutArrow:Z=!1}=e,k=[u.thumbnailContainer,"medium"===C&&u.thumbnailContainerMedium],E="string"==typeof m?i.createElement(o.ZP,null,m):m,D="object"==typeof p&&p.external&&!p.openInSameFrame,x=t?"string"==typeof t?i.createElement(o.ZP,{color:"gray700",size:"subtext2",testID:`${y}-description`},t):t:null,z=i.useMemo((()=>"space0"===b?{paddingHorizontal:0}:{paddingHorizontal:b?c.default.theme.spaces[b]:c.default.theme.componentDimensions.gutterHorizontal}),[b]);

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	32856
Entropy (8bit):	6.370524623339198
Encrypted:	false
SSDEEP:	768:As/PNPiPQTHCiSbVESUnSTbgtK2RFozpMDWeFDZeNX7Xi:As/PNPiPraNSvgmIWoely
MD5:	939340C7A209B4CA46615C8200F6610D
SHA1:	9DEE563165182C679C2EB808966DCA25AA09B006
SHA-256:	43078647F3BD86002CC2D165F4439181AFA7D53C7B271CF5A02071CC25D6909B
SHA-512:	743AF1C6630EAC427508C015B90B86FF3AD2C900DF96EE71396955B0FB6473EFFDC8B9B01DA19019BFEC8F2C12A2D8B5B33D744099778A089EC0898B44658CFE
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYDv7YRIXDooJbKQalT67UxoSdHsjh9B0e39Se4ilpXhow&oe=6677BC17&_nc_sid=7da55a
Preview:	...KEYF....$................. .............<(....4C..4Cffv@..pB........4.................4C..4C......................................................................................................................................................Adobe.d.........................................................................................................a..!Q.1A."q..#2r...$3BR...C....%Dbc............................!1QAaq..."2R......#3Bbr..............?...Z..dcI.1....D.i"F4.$...Q ..7I+..#..? .B....[<<.....ZH....i.Zt.HT....&.....\|2.D..t./..w#?.h....O..E.../.X..C....w..J.r).X..2..b.G...Z....:.iP.bwG0...tK..e-'..d.....O.....>.K..;LMg..?P..'...f. t.J...k.'i..\|.-.....u._.g.+...1...CU.p...I..p....~?.y\|.h.S..c.)..K.1....D.i"F4.#.H..$I....W...cI.1....D..q.h.....$I......{.0@z...\7...B...6...8....o.D#.........\z.i.U1Yu.w52......+..cT........@. ..@JX..).&..)G..RF.A...UH...T5....y..o....>......^d0.\....\.u...VG.'..X.U...N..4..i"F4.#.H..$I...c.r...#.."F=.D.i.g...../

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=67342843&p=156077&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNY
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17166
Entropy (8bit):	6.015937512957279
Encrypted:	false
SSDEEP:	384:fIBiCTiuk223IIU0wRmJDVH3Sa7OYou+w2csO6TPAoy6:fIBKuaUncPX7+RzA4
MD5:	C70C80906854A9F49211592FFC0D6EC4
SHA1:	ED2CAE6E6CE3C0BF9327A71E4DB08654E8396286
SHA-256:	D61CD8745D78D534D98CF93A8AC9E8D5353D92C70647B3336E2E566AF7952B4D
SHA-512:	9F49E96151A62A71A82A082F07D4871B227D4D2F2E77F25848B3CD013FE95F1D3597D65F059ED252BA5BAFB693313C821E825FBC2DD6709C60F8B01D89597594
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240522&st=env
Preview:	{"sodar_query_id":"jDNQZvHVMLXFmLAP-sGgmA4","injector_basename":"sodar2","bg_hash_basename":"KYbSBp6KYnVabVUK_IUUDiB2CndMwcBe0nihEfuEUmo","bg_binary":"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

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 375x250, components 3
Category:	downloaded
Size (bytes):	32319
Entropy (8bit):	7.966319952763892
Encrypted:	false
SSDEEP:	768:BCAXwwFgFhw2yufneNQSfVZaHF9Y8DjxFUd0:BHgwFgDw2yLZOF+qFi0
MD5:	9ACB0928AF07E2FE0B32DBC328967E9F
SHA1:	B24071C3D38CA07F07E0ABB6CDE05E4973973895
SHA-256:	61543A32057568F7E4BDF80C48E53D5B1ADB118085015165A3B81B3697A41E0B
SHA-512:	607D1A7958B2698A428A2F31E1178CFADD3F3BF81E1CBD95321A63B867FE9D21A892845966CAA15445D3C7EF73146F5CAEE79AE8843DB136077A8662BE376918
Malicious:	false
Reputation:	low
URL:	https://widget.adcovery.com/images/18529/18529-375x250.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..............O.;o.7[.o.<.$[.......6..n....G q!..s]>...bi7g.Oz.........Ih.#n..>....+C\|..6...i.q.....Z..:.......e..s)..i.x..bF./<..._..{.${..\|9...[.z.=.+_.7W...x<...!Z.'......Q.y.b.(.r.....a.:T9..g...(.{.......a.....-.Z...V.....x..\.......U[..[..l\|..j..........3T..]_............P[.~...\|;h.......;..1.....

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37041), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	498640
Entropy (8bit):	5.384745368799251
Encrypted:	false
SSDEEP:	12288:psa0eRZz5+qgr5trxzheN0LWn69ZMlObRgf3WaA:zt5+Xr5zzsN0inuZMlObRgf3WaA
MD5:	080A6C7DFDE3AE3CFDA711E4D86D1EB2
SHA1:	1FC457681650C01FCF9DD30C8D4044300E6FFD1C
SHA-256:	8046432983A705B6D3BB66416B37E2BC2ACBE8E0B0EF9B738F2ED316BB365D0A
SHA-512:	4762C6B38CEAECBCBC4A8A67B6DE62B507E8B39DBB4FAA680BE9E029DFAC480DB8431330DCD9180ECE8A62F38E1536590A68E4D7D1A332EBE14600B2E3135847
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/AVmanager.js?v=1.0&type=s&pid=64db4ddc8904509d8303ce64
Preview:	/!. Aniview Ad Player v6.2.212. * Build time: 2024-05-17T15:40:56.092Z. * All rights reserved to ANIVIEW LTD 2024. /./! License information is available at LICENSE.txt */!function(){var t,e,i={4221:function(t,e,i){"use strict";var n=i(888);e.Z=n},5568:function(t,e,i){"use strict";i.d(e,{F:function(){return n},Z:function(){return r}});var n={topWnd:void 0,topDoc:void 0,vitab:void 0,sf:void 0,atsWindow:void 0,frameElement:void 0};function r(t){if(void 0===t&&(t=window),n.topWnd)return n.topWnd;var e=t\|\|window;n.sf=window.$sf;try{for(;e.frameElement;){n.frameElement=e.frameElement;try{e.frameElement.getBoundingClientRect()&&((e=e.frameElement.ownerDocument.defaultView\|\|e.frameElement.ownerDocument.parentWindow).$sf&&(n.sf=e.$sf),e.ats&&e.ats.retrieveEnvelope&&(n.atsWindow=e))}catch(t){break}}}catch(t){}return n.topWnd=e\|\|t\|\|window,n.topWnd}},4798:function(t,e,i){"use strict";i.d(e,{Z:function(){return l}});var n=i(1929);t=i.hmd(t);var r="object"==typeof exports&&null!==exports&&!expo

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x261, components 3
Category:	dropped
Size (bytes):	26016
Entropy (8bit):	7.978422784816855
Encrypted:	false
SSDEEP:	768:cWHM98jku/ippc9q+rYsJhNKoGuoU6/fU:cWsl69xYs9pGPUwU
MD5:	1629A657E0DF579827E1522116BAF87A
SHA1:	0CAA2A64BBF2C211B6AEADB6D711FA3D04842B6C
SHA-256:	0F49B69849B8CA06B86DB586DE0280CB3B3477AFC6A9309BAFA4B7CDEC8EF905
SHA-512:	5ED4F92DFBDF591E2B0AFEB9311F7D4E5C50A370BD4D816411542BF3DC38B82697EE054D961956ED9505011E3D222A372FB7DED8783687F1B2A40DDCBA9CFB2C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000b70a000084180000501d0000ec1f0000b52d0000eb3e0000bd4000003645000049480000a0650000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."................................................................................q..J).....0".b..d.7..ld1.HJi3.i..q..A.u4..D.B\|............:...2t.B.....j)...dDH;..N.....;.........I2.U...1VLW.IK..=....S@..L..`.c..K.ZH#.@...........#.A.)....NU.2..n..1....#.@.>..<..Mx...y...u..>....zSY.>...[.I.<.....V.....n].MA.l..3...c ,......)&...c.U`..Y...AM.......hAa%.{..Q.r#..S..T.SRP].py&..0*.AM...&\a..Z![..v.jK.a.\D.k3..N....CE......tm..q..BJa\|YQ.Z...;...n=y.6.].:Y:R.>..0L..U..ro......'."2.."#.uS..t.}.f.....p...r./.........~..m.c.z..gw.G..W....k.0...U....\|'sC..4.$3....<.....\|a1.\.tIE.=c..By...7....G>....4Y...7.c.h..4}?..U.y...Y./7...]<.;r...8my.D...\|^j..V@.....R.y..z

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x156, components 3
Category:	dropped
Size (bytes):	4902
Entropy (8bit):	7.781128149169606
Encrypted:	false
SSDEEP:	96:41B9WWXukuqdu+FNsUbi1yC4fPggPsxvWgRSpm0:4TouO+FNsUOY2U0Sw0
MD5:	706A31547C3901D9D8A53F598D3B6FA3
SHA1:	A0715BAB170858AAE8A1213AACEF7F76F35075CC
SHA-256:	7FEF482E1E3022F28BAFCA3FE08D1F5F4F59BA2639050D3C745C8DED9982DE45
SHA-512:	BAE5CADF669BA4D43B89A3C1A71F5DE3A5997CA6D63606FA0C5A5CC9333C0744919AE5D127764F2B401674A6791CE845CE74E061AD91638CEF2F1F58041183D5
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100003b030000de05000079060000ed06000015080000550b0000cf0b0000840c0000290d000026130000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................Q......m..6..R8.U,z...%..&e..e>g.......O...l.r7.n...^.F..\..c.Z.....A..W.g.e..=...vX.2(....U8.N.:$..../.]...p...d.^`M.. f[p.t.tc..$.U...+3l.T9...:Q..I6...l.....Yh...I.c........e..Q.fP.Sr...9...9..Km...lv.......9.m..Q...~}..;.9.....af..K.h....T.q..N.>.x..q.n{D..B.s...Q..'...g.t.IF..&.6...%....:B.~d.o.Y:m{.<y.2F\C.....Zyj.b..2z.HY.O.....h..cV..W.Bc>/...B...zQU.c.2...Ry.O.?.nx^..........(........................!..1.."A #2.34............>c.+n..>....Cg...8....;..&..b..2s...a3.m..R\|..D....kE..(BEfU....%..y++0.q,..,..SxxG5e]....j-.cE..i..).4.G^p".s..tz..G`../.v.%.n>C..V.5...O.ek..xh."'......s

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27287
Entropy (8bit):	5.583650052006646
Encrypted:	false
SSDEEP:	192:ocbwXTbdhGo+7y0zhY7UVbqGIwDqwK2qiHd4HwwsIw6h5oxQ1fohjQ/VbqGIw4ND:a3eVqS2LWuqlaHqbqk5
MD5:	459D681BBF8F2689E8796788AE3828C0
SHA1:	AEB76292A545C15DC02CB805A48535F746F327AE
SHA-256:	55A4782A1653BC289FB4F9D635F2C915C3C42F39C0D13BAA3CF8A1EA9F623F53
SHA-512:	492B5DA8882DF8AFAA189B0F58BDA63A08D9A9353A5EA18B3C70288CCD2A7AF4AD971B5FFB327CFD6968ABD444FD1AD54D01076EE49F6259576E7AF6DA3C5A35
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500%2C600
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	115602
Entropy (8bit):	5.388052730032942
Encrypted:	false
SSDEEP:	1536:BPvcYcvR3VCT37Ha7EmarRhIHARkCDy08otU6myJXXxMZyYk0AjrzCqlKDjcYh6L:WY8Ha12x+UELKkq62diL
MD5:	33901DDA7B8FF9A3E8BF2A7747EDAE1F
SHA1:	9B34E74784C09F573DAD5E75855710AD8C69097D
SHA-256:	92FB4E6060F5FB7E6C800C5E22C52C2768D9078DD5A556C1D4903702BA687165
SHA-512:	30E2AB1B7E8F44622037102D5A92A1D2294CB824A21C6A84F51263767646D4F7362645C90196D4F5C9ED5F7DE1AEDB6FCCD1F41C7E5B27D09E628CF0D68C8C7C
Malicious:	false
Reputation:	low
URL:	https://widget.adcovery.com/script/US/1/13376
Preview:	document.getElementsByTagName=HTMLDocument.prototype.getElementsByTagName;(function(e,t){"use strict";function n(e){var t=e.length,n=st.type(e);return st.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=Tt[e]={};return st.each(e.match(lt)\|\|[],function(e,n){t[n]=!0}),t}function i(e,n,r,i){if(st.acceptData(e)){var o,a,s=st.expando,u="string"==typeof n,l=e.nodeType,c=l?st.cache:e,f=l?e[s]:e[s]&&s;if(f&&c[f]&&(i\|\|c[f].data)\|\|!u\|\|r!==t)return f\|\|(l?e[s]=f=K.pop()\|\|st.guid++:f=s),c[f]\|\|(c[f]={},l\|\|(c[f].toJSON=st.noop)),("object"==typeof n\|\|"function"==typeof n)&&(i?c[f]=st.extend(c[f],n):c[f].data=st.extend(c[f].data,n)),o=c[f],i\|\|(o.data\|\|(o.data={}),o=o.data),r!==t&&(o[st.camelCase(n)]=r),u?(a=o[n],null==a&&(a=o[st.camelCase(n)])):a=o,a}}function o(e,t,n){if(st.acceptData(e)){var r,i,o,a=e.nodeType,u=a?st.cache:e,l=a?e[st.expando]:st.expando;if(u[l]){if(t&&(r=n?u[l]:u[l].data)){st.isArray(t)?t=t.concat(st.map(t

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=tpm4omv&uid=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19306), with no line terminators
Category:	downloaded
Size (bytes):	19306
Entropy (8bit):	5.260983617372494
Encrypted:	false
SSDEEP:	384:64mRaljHMZBdhMt20MN1h2e9IIft7autN72MGo:MCKBTH/7aC0MGo
MD5:	4068F6AB9E6AE017E04B8684692D202A
SHA1:	7414DB6531D4C56DBA6D8654520FCB0F09D53770
SHA-256:	F9EB189676A78D42D7A8487EEF683702ADA6C5C866399EEFBC0DF319D5F7C6D7
SHA-512:	B03217D2497CE6FD42979B6EE1618B642A47FDD57D3876C0E1894A0AE0A2326390224E1BBB3A180D94858FE4EF0BBD663812E1F020C2FD1120134197D3171B8C
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vef91dfe02fce4ee0ad053f6de4f175db1715022073587
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var i=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),i[t]=e>>>((3&t)<<3)&255;return i}}},508:function(e,t,n){"use strict";var i=n(944),r=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|i)();if(

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	164531
Entropy (8bit):	7.99066337722782
Encrypted:	true
SSDEEP:	3072:Ydn6VMxRowD3ZsknUHI/hz1FgZ7rGbRWmwuSatgeXOkqAByotl:y6YRoKJsE8ChrS7rG14u5ge0y
MD5:	E02397AC31B74D6A945E1E2A82846E03
SHA1:	1AD0E195B5334E714AD3921E0469945E5A7E6ECC
SHA-256:	35C869C62116147DDF7EC2E0D7EFC005A9896A9E411A039FD91A5DFE2A1CE1CB
SHA-512:	23F95F9E24A85ABD8250D579691819EDC3E907C8942DE9F6BF1C9007CF35B5FAAF499E63A0D5343682C9381B63046F14F82468FD84578DC7C56FD7A5FBB2F8D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.x....PLTE.......................................................................................................................................................................................................................................................................................................................ut.............~z.tr...}...cd.\|x....pmr...{z.`_.okmy.~sq.`\.NPnu}qsq.`[rkj.b^.MK]m.kjijec.OJ.:?]emhb^.OI.-5h\Y.;9M_.a\Y.,3N[k[XU.<7.,4.!).$)iMI.'-ZQLOUT.<6..#..$TMG..$.$&9Oy.)&BMY...:Lh.........GII.$.....' P@<......r0...c52...................%....=??3@R......%=m.........t#....38>%9ZO,&......a"....~..701u.."2Lf...4e.3j....X"-?.0_.-d]...+[.'m.)H.)VQ...#k%$#.%0.#d.&?@...$T."].$Q.$L..d.$I.#C..V.!5.!G. L..\..U. 9..A..O..G..+..A...)....6..'.........l...nIDATx...$.y/...{Dfe..U.w.3.."..R2-..HQ..mA......~..........m.^..W4I.w.P.Hq..2.f.......r.....}............8.o_B}2.D!.i.gQ.P[:...J..}9..(...m......$e..0."2MLDM...M..Ae..

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	213930
Entropy (8bit):	7.987575265471599
Encrypted:	false
SSDEEP:	6144:2ylNoeFO3P0UR9vYn9K6H+whQN/6YXjco:2yYeI3P0UbvYgtj96EjZ
MD5:	9DB69FB7D4ABF775754EF3FA1C52D695
SHA1:	F2197298DCC9FF42D0D37F02ABAA3DC964A8C8DD
SHA-256:	33760E901B743A73DFE1C47BFB5393EEDBDA05FCD6BD686247E601AC813FBD0D
SHA-512:	78896B1F5910B920AE3FFABC5A63BE3C09FE0B6B830A160B14454CB0880D63E53BA6003CC20160CFE4AEF0EB9F9EE5705BE07CA1F72788F13F59C35D75CF07CC
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/05/biden-podium-1024x538.png
Preview:	RIFF.C..WEBPVP8L.C../.C.......'....o.;.,u.{#). ..I...$;V.1.h_gffF.,A.m;.r.M^...(z...4..!.{.?.t.B..9(%.......4iZ5.QW.M.5.0........e.....6...@...(/.5...=.z..j,$..ld2.P ........H4...T...7f...\... F84..h.._..~....#....:".d..}..h........Q}\|.+\|....J.4u....hd..~..Dmj.N.!...7k...Z2I..Z.w./f..zA,"3.1v,P.g.:H^. ..8..)..0. "1... "..`@E1..%.L.E..H._...&..8.Ma!..d.&(9C.Q_DBn...<.B'0......G.=.b>...I...9Nc.YH....sc....i...d..Lj....8....h.."z..H.\|..OGU9..0....c..+...Ze..qV.......~......=.Y.:.'..$f..$ 1"..3....`D.j..........k..}...h.....H.Sx......Z.[.d....Z.lO..T.......zCj......?...z....../........W....m.0....n....n.qG...rq+..#......@...$>.9o.D..6i.Y.4..%qO".`'......3...Y2.....@....V....P.D(..L6....43/^8i..........Y(PA.!$.%..XZ+.%...r~h...3Z;s.m.`....r.Z._=..m..h....DT......p..V...:k[.l.....x...o......".O... .e..H4.b........ni{......]"S%.{C:.t.........d.[.1.@F..W.d[.^z....9q.....d...S..........R..cl..}.w....0..y....Xs.9..?5.`...I.....G..?.....

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	22168
Entropy (8bit):	5.93483918073825
Encrypted:	false
SSDEEP:	384:U62J824pAKFNW2Vr4/r33n4gU9kFcvyO6iH/ug3sOoWEt4bK8ArCi:N2J8FpAuY2VrGn4gU9kFeyO6iH/XsOoD
MD5:	07DF54DF91480FBFE2906765452C6FBF
SHA1:	A52E8A49117192C1EF95BC076DC156B1C64597EF
SHA-256:	27FBF1CC76894C289357A1601105392F1DBAAFABA15DAA258C954487B507718D
SHA-512:	6AC0F00ABD894BBC17C8440F1EFE6AC67E5167D91412B318013A5898713E2DD1AFC9413B2F9E5D93B3A70C61B3FEBC4F5911C471C3016311363D89F147393F78
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYAWFebO6s-woVyyhdl_6va3_d757GU5aHiiuG4QXkLgaA&oe=6677AF98&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTcxNjUzMjA1NC1WV1JPRVhEVC1EMUNL
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	114769
Entropy (8bit):	5.387798564110316
Encrypted:	false
SSDEEP:	1536:BPvcYcvR3VCT37Ha7EmarRhIHARkCDy08otU6myJXXxMZyYk0AjrzCqlKDjcYh6g:WY8Ha12x+UELKkq62dig
MD5:	54F7E0826AF013FFFE50317B139D488D
SHA1:	CFD11F24B188467716FA20C05CE9A19117BA0690
SHA-256:	FBD50EDCAC78EE54F391B7DBD3950543F816195D5E33429C52C0EB0278342831
SHA-512:	DD521805BD38B815FB1A96CE30D0808807820420184294C0BCCD8967E21AACD60927054575FC29E816EFB75AFFCDAE68DC29F58BED712E74D4AF628B357E51F7
Malicious:	false
Reputation:	low
URL:	https://ruamupr.com/script/US/1/13376
Preview:	document.getElementsByTagName=HTMLDocument.prototype.getElementsByTagName;(function(e,t){"use strict";function n(e){var t=e.length,n=st.type(e);return st.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=Tt[e]={};return st.each(e.match(lt)\|\|[],function(e,n){t[n]=!0}),t}function i(e,n,r,i){if(st.acceptData(e)){var o,a,s=st.expando,u="string"==typeof n,l=e.nodeType,c=l?st.cache:e,f=l?e[s]:e[s]&&s;if(f&&c[f]&&(i\|\|c[f].data)\|\|!u\|\|r!==t)return f\|\|(l?e[s]=f=K.pop()\|\|st.guid++:f=s),c[f]\|\|(c[f]={},l\|\|(c[f].toJSON=st.noop)),("object"==typeof n\|\|"function"==typeof n)&&(i?c[f]=st.extend(c[f],n):c[f].data=st.extend(c[f].data,n)),o=c[f],i\|\|(o.data\|\|(o.data={}),o=o.data),r!==t&&(o[st.camelCase(n)]=r),u?(a=o[n],null==a&&(a=o[st.camelCase(n)])):a=o,a}}function o(e,t,n){if(st.acceptData(e)){var r,i,o,a=e.nodeType,u=a?st.cache:e,l=a?e[st.expando]:st.expando;if(u[l]){if(t&&(r=n?u[l]:u[l].data)){st.isArray(t)?t=t.concat(st.map(t

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	7950
Entropy (8bit):	7.979362721369481
Encrypted:	false
SSDEEP:	192:1EqI8pJlQQ41Mqj9m9YJkKA0/jd/th2BOYu6eOD4bL2f:1kYlr41MqM9YJkKvj21PD4u
MD5:	B3A3D88269DBAFDD0CED943512AB5DA6
SHA1:	6369FFE8FDB4894C42B1E2E13039D75ADD33196A
SHA-256:	F74E6E43D8875C94199C2A3DD2D18419ACF4B900026A200939BA6A042DF8EB2E
SHA-512:	2C11E70A856ADEE2E3DF40CA8721B2E6B18456DA90D38DFB650E940099F44F19866364FE9CBF7E68846AAB5BE76E82E78EB97A384C8179E0A20E01C429CE5DB4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .............>.@.I.....q.iP..gl6P....x....b!WF..-?.E.d.O......._~......8...)........y.v.W..........g..j,.`&.y.j.yr.!w...!.#..'P\|.........$.I...i.s..N.t.\|.b..d.{g.{....BE...O.V..s.'...{.5..\| .....!2.....9...v.f.../...X...X.0#..?6.ap/&.w. ...Y.....2.]7.)=du..{."9.<..r.}.'....T...$......j.pd.2...1.%=..\.km.F..MLy..H....NM...q....x(...]..._`n>J.....I}b`?.GL..6a...Bd'...U[C.J...&.aN&<Y.\|...<=0..N..r..bq\|..xL.WG3. kpf.(\Y..N..4..2.h..B.7...LJ.......q.f..k.Q..P.;....&.x-....N.d1........EUSy...V...Y7..c.......}i.e....tn..b.3...Cl1U...$.WV....u..........$..TT6..s.HK.-...v...h.../w......B......q.9H.... ..0.3.9......2........O.H.........3..)^m.>...JQ..1..'"2O........a.T.Y.KHe.4...@..R..=j.V.....c...1....(#...,.&..FtX-.].>V...kt./ql<..f....9...."..Y.g.S..<..Zd?!.....e.V&wu.=....R...=.)...+.-.p..c..7...(.D....0_...A..<m.H"..<0..J..A.R..!2..,$.N...;....@IO.QK{.s.c....f..X.Ra..L.O....n... }9.0>.....`V.......[W...8(.....q

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	515
Entropy (8bit):	3.7079048680061124
Encrypted:	false
SSDEEP:	12:emfrmwtm7AXyUkHHyKsfNf0MLq6p3HHgsfNf0MLq6poHHu:emfBAKiMfRLLFVFfRLLFWu
MD5:	78B73ED4B5ECE35CD6424B56864206DB
SHA1:	6D3C492C0376BD33D010FBBF91CE7586A4131CB2
SHA-256:	59A3FB93AB04312D58A8D0F4E0E9396A8A4B5D2718EB61CBDAADFD8AED34301C
SHA-512:	33AFD353B8313A292F0F1B7A4D23B7317595026688C88903681771355DEBE32B0D7197075E7644D8D664C8D03254824764D2215CB51EA91E9556A3E018D4279E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette
Preview:	[null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",0],["94166617",1]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239661",1],["22059416475",1],["22466671215",1],["7047",1],["7103",1],["94166617",1]]]]

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YVMC34Y:YrV
MD5:	0C06477580392D85427ADFA66409696D
SHA1:	4E921332D8E7D31A08D804570A2A11863D4BCFCE
SHA-256:	243FB9953E49B6005F6AE1772F507BB789A8893960A495850AFE43FE34030311
SHA-512:	009E4CEB38B1BA670E30E607A74B8B88459F4548B9007B5B5F20460BC566E37F1C851ACCFCEE5E6F0C053E87F8A71E6CA72F323CA5977B37610CADA9EAE98074
Malicious:	false
Reputation:	low
URL:	https://dsp-ap.eskimi.com/v2/gtr?&t=1716532084052
Preview:	{"pixels":[]}

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	37946
Entropy (8bit):	7.976752982706769
Encrypted:	false
SSDEEP:	768:YJ7kVDM+lwIJjdsy3/2wbYS86F/RTD76IS15lecXvuxEvv/5mvZCRr:u7k5M+KqdsCuqvS15llM0/5mvQ5
MD5:	9F09B089C281F153DD8ECF0E7B211FDA
SHA1:	8DF87C83089946A94569F18321048551E8291961
SHA-256:	9F36BB2791C2335F8412ED87D0B9F819948F9F62AFECC67ED04B888B96A20AD9
SHA-512:	F7CF95DF4993895B7E1461810EA3A60307AFAF952A13CF163D9865C906DA79EEB0249E85617953D30C0EEE7A80CF8F45BE37C6B8786C761384C28A1FF670CA1B
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2020/03/trumpbidenspec-768x403.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress.................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr..............".................................................H.f..a."A.6......R.n.K35.Z.... A)A."I%.$.HE<"v.B ....4r.x:...iI6.(....jR...Z.((.$...$.A.JL.BP..H.-..'_(....[..R....N+;....rs...W2.!.d.......:.L.....H.N..WXD.BR.c.$......;.5.[..S.].....LvVrf..%t8..N.K7.Y..d..t......zn..-T..0..1..0@......;.3P[..qo[.3..iQ.j..:,eLy.DZ....W+.fd......1IP..B...#I....%..V.F.8..Z..^.4.8u.[.Z[....2...x. %...x.8..J...._RI1#..lp.z."5...'...r.f..Z....e......)...4X.....!.E.....%.`...}.y..4.<...Q.p.....,.u7.f....K5l...LE..<..1..5.i...-...v.<...Q....G[4._5...............]Ik.5.F`..P.!..-Y..f0...i..%..\.p...f....<.rK.-..1j.t4..........enLP. Fj...6..y..kqZ.>v.#.B.I.(m..h.......^....g:T.6..T..W..6..- ....`Z.).!..no+....P..hH...]..d.CI7.hB...L.f..w9.@dN.a..a...;....3 ..0;+.J..e.f.Z..'..BP..H....v.h...(

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	13996
Entropy (8bit):	6.4808029254950394
Encrypted:	false
SSDEEP:	384:wDR0LU1BkpRxm0umWLUUWg/Oj3uBcUb6i:wDRy+BERx/WnOj+BcM6i
MD5:	45F16F38355B24F1F6E0503656B43BC7
SHA1:	09915E39E188CC8F66B1287F6D32F68E3CB0C195
SHA-256:	7901D70D2E03B2564F43FE21E60721AF0284B0D1E1305E8CDDE646CF6180E0A9
SHA-512:	74F242C6C9339AA49BE6A730DEBBCD7F99801448CBB6E79FFE60A96F8C92A5564D3F9E31AF7F600BA3FACE36DE402F0F4DE2E253D1D32A5C6C97BB97CC7A5FF8
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............\.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d........................................................................................................!a.1Q..Aq."2R....B..#br.S..3C..........................!1AaqQ"............?..g..y.\|..2....@.).8.t.2...f...1....)..DL...x."i..F....m_.3.....d..?.......>=a.\|z.GU...N......Y^8.."..G3....J.P.h.....%K=.^.'..0..0.....ix....*..eI....,'..\....g?.?.....Z.v.5M.r.#.....m.0....o..t.q...e:..N..S.q...e:....7 .+..>\|FA.S..?.`...L...$....N.%_nG..L....r.......L..$....S<....<..D~:."?.c.K..M....T.f.C...>...(F..oDF.,oE)...)Z,......,..Q.W...).b.....x.:.".o.....o......Q:.{.:8z.[..~...5.3.~.L(2...A.S..?.`...L.....)^.t...e)...S..r.......V.&ej...Z..'.%..px3....qE...+..TF..L.i<...9.g2e.J.,.^4U.UO.e.!.-....tv.......R.n.V......Z.

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10347)
Category:	downloaded
Size (bytes):	10570
Entropy (8bit):	5.276212732714066
Encrypted:	false
SSDEEP:	192:XMySGVvoroLTCBeLw9rliIFLFNTA6mZeekeiCBnrxVzVCH2qpVgX0eh3+RVXBS3S:XIroLTCBeLw9rliKLLU6mRWCBrxVzV6X
MD5:	D50DA82FEB3A9F80A9095D41B3874477
SHA1:	1FF10A02BA44EA03DCDD3E722C5C541FD1600561
SHA-256:	C0DADF3A78859EDF2307ECD03BE57BFD5840DD15136824BDB7B8BEFF9739AE4C
SHA-512:	AEDBADD17F0BE5245FB3D5C54F2D74A1DB7F318ACE86515BB950CE60C5B61BD41092E916DB44249438FC2CC5011CEE7E92688E4E1E77BEF59A72405DF6A54FDE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.Compose~bundle.SettingsExtendedProfile~bundle.WorkHistory~bundle.DMRichT.23087fba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.Compose~bundle.SettingsExtendedProfile~bundle.WorkHistory~bundle.DMRichT"],{85341:(e,t,n)=>{n.d(t,{Z:()=>d});n(6886),n(71372),n(36728);var s=n(2784),o=n(1503),r=n(93983),i=n(88027),a=n(32941),l=n(15236),h=n(80524);class c extends s.Component{constructor(...e){super(...e),this.state={queryContext:void 0,canShowTypeahead:!1},this._genericWrapperRef=s.createRef(),this.render=()=>{const{children:e,composeCommunityId:t,contextText:n,isInline:o,isInlineReply:a,onTypeaheadStateChange:l,source:h}=this.props,{canShowTypeahead:c,queryContext:d}=this.state,p=c&&d?{word:d.word,resultType:d.resultType}:void 0;return s.createElement(r.H1,{composeCommunityId:t,contextText:n,isInline:o,isInlineReply:a,isRichText:!0,onDismiss:this._handleDismiss,onSelectItem:this._handleSelectItem,onTypeaheadStateChange:l,query:p,ref:this._genericWrapperRef,source:h\|\|i._4.Com

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64283), with no line terminators
Category:	downloaded
Size (bytes):	64283
Entropy (8bit):	5.33514081380239
Encrypted:	false
SSDEEP:	768:SlCdNChV2BLD5EGJS96tchRLchL/OQ4nPmc7L6L7ZtOt968uzRD9Di9+Si1p24R+:skJIAIp7LY7ZU96/zhti9+3lAioFU9c
MD5:	E149D286D66D32847D66DF6496775509
SHA1:	EAC53FEBC473BD73DCA6741BED78C22E19DFE7FD
SHA-256:	EA1B384073507BC46287E0D51F0775A8DE186F88E18F222F5EC113455E6FC051
SHA-512:	124BF1595E808E5CA2D69AB383B099DDF59B51AC04E7EE2D7C1167052B348CF2C5A6554C28EF8CD0F1E0DB1C007B972E4871D9A540191904A85F1EF00296A6EC
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/ab5/libs/prebid/avpb8.48.0a2.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[828],{3852:function(e,t,r){r.r(t),r.d(t,{spec:function(){return c}});var n=r(4942),i=r(2623),a=r(4953),o=r(5740),s=r(4030);function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}var c={code:"adhese",gvlid:553,supportedMediaTypes:[o.Mk,o.pX],isBidRequestValid:function(e){return!(!e.params.account\|\|!e.params.location\|\|!e.params.format&&!e.mediaTypes.banner.sizes)},buildRequests:function(e,t){if(0===e.length)return null;var r,i=t.gdprConsent,a=t.refererInfo,o=s.vc.getConfig("adhese"),c=i&&i.consentString?{xt:[i.consentString]}:{},f=a&&a.page?{xf:[(r=a.page,btoa(r).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,""))]}:{},v=function(e){for(var t=1;t<arguments.length;t++){var r=n

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2970
Entropy (8bit):	7.8870340540410435
Encrypted:	false
SSDEEP:	48:XNOS7S+COsz8ZDCqOhk0LRemDrFBps6l6DVRi1qZEPoEEKW/rfm0NP8fnRqo:XNk+Yr5a0Nvps6Yi15PoE/W/zmuP8fRT
MD5:	F413F3EF35AD1680C946AA928672E340
SHA1:	F599398136D194DBE5F26BF204F886671DE2B66E
SHA-256:	E0CF122AA6414202DC7D64CA814375DF8F799F933C0AF7DC99829E119E9D09F9
SHA-512:	F2A9912E532765005C68963DC7B6E45CA350A8AAEAF44BCAD03DFC03BC65D13A5446FD12C2C5CB00E3BBB180ED427AAF2B943A3FA29FEEA296253D82478F8BFD
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/339734211_524326886570625_7568592290991451198_n.png?stp=cp0_dst-png_p40x40&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=csVMzTkAE-sQ7kNvgGFF5hx&_nc_ht=scontent-hou1-1.xx&oh=00_AYCZzCn6-bbBQACqkC2oUIl7AHaxbTeLelslDnS3WuXbKw&oe=6655FEC0
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....TzTXtRaw profile type iptc.........0.....Ic;..B%~<._...~+J1VV;s.h@...7...K.{..m......m...Y....IDATX..yp.U.....{.Lf.!.d..1.c&.I.Ab.T..tA..].,.Y.u..E.WqQ..].E.....A.X]...!.2@.2.L.H ..1gw.....$....j..z........k.93....C...'.....B.!@.RQ...$c..p......(......"0.4\......Y...a...%...........uc.Mq..).cS.R....tG..V....V:G..a..E.....P.I4.dCtn..(.<>355!f....Y.W] ......B.R.... ....u.)F...P....f.....U^...U\h(....uTX.g.3q.e...xx...&..G5..0B......tS\~ZR~FrfrB.>._.................\|w.x...(.1aG?....\|.....Ei.... .........w..%.1......."!4.:.}...OC...BS.-..I.....iF..2.....w..w....){.......?.....D... ......R.Pk..._N..1.5%.t:].:GY..V".....c.9Om..0....8"...#...}Dx~J.....Qd....R..*NV...<U.^hljm..^...c...=m...B.%...[....%....g..,.x......f....oomO...B...........ZV.y.(...4.X.ilrBAFJQVjb.N..P...-..G.}e....`....!......)......h....c{..3.o..PJ).E".......o...........u:.......w.......-...a.V.T..`...&.........-..g......dS.)n.}S

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26072)
Category:	downloaded
Size (bytes):	946559
Entropy (8bit):	5.229696364177314
Encrypted:	false
SSDEEP:	6144:Cr5gXr/VkM59BQRFh0vZvfKKpkUG3xzV/Nox:CrOOELV
MD5:	E01CDC548FDB9A8FF2C6752C3532B5CB
SHA1:	9F86EFB91F30AA246B49104763886D230B813452
SHA-256:	B4F65A41D7AFE3E79BCBBC9C07D137F40E1556A85ADED5D84ADD2A098B6A1446
SHA-512:	5214BE93D4D3DFCBF6B112A2DDB1ED56C4D57F041B66ACF65978B07BDAEE9C7F8A1A66B8C877AF825D2434482ACB181560B12CC0D34A5363F6545DC366ED9FA5
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iMSf4/yS/l/en_GB/yBXOsimGcZKLsi-rwUHCTl9YgrH-m4a6jZ0Ta9E4kz0K_s-WrgVtL_OGB5ZoB1cLpch5bjod9Ki8-f0RvFaDRltmkNkYY8jZuVHuwwDateX8xhNBFZ41W3g_g8nScjVqE0xbaPP6WhMS7bc_HmQ2JWvIJ2r9mkoV0ZzHknm8734VNtKL.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedAggregatedStoriesContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({hasAggregateParent:!1});g["default"]=b}),98);.__d("CometFeedFocusMedia.react",["react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react"),k={media:{bottom:"x1ey2m1c",end:"xds687c",left:null,right:null,height:"x5yr21d",position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",width:"xh8yej3",$$css:!0},root:{height:"xqtp20y",overflowX:"x6ikm8r",overflowY:"x10wlt62",position:"x1n2onr6",$$css:!0}};function a(a){var b,d=a.children,e=a.mediaHeight,f=a.mediaWidth,g=a.viewportAspectRatio,i=a.xstyle;b=(b=a.focusX)!=null?b:.5;a=(a=a.focusY)!=null?a:.5;var l=f/e,m,n,o,p;l<g?(a=a,m=g/l,o="calc(("+g+"/("+f+"/"+e+"))100%)",p="100%",n="top"):(a=b,o="100%",m=l/g,p="calc((("+f+"/"+e+")/"+g+")100%)",n="left");b=Math.max(Math.min(.5-m*a,0),1-m);return j.jsx("div",{className:(h\|\|(h=c("stylex")))(k.root,i),style:{paddingTop:100/g+"%"},children:

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 154x154, components 3
Category:	downloaded
Size (bytes):	6324
Entropy (8bit):	7.86158994645444
Encrypted:	false
SSDEEP:	192:jNo/dari+2Bn7TveDObSg2liXpw5DT/mfyT:jSVar8Bn7yzBliXC5OfyT
MD5:	1655B98F08A6A6A7407816FEFC51DE78
SHA1:	03C1C5DA6CCEF1C9FB1F6DFB87295FDA17661EC2
SHA-256:	0449E674FA56B02E544D59973DFB58464B52A4F305C27994BA557DBFC4F1F234
SHA-512:	D764DE4BE20884C5DDD283E9553555963D8A8AE72762DC4D05311D94AF1675098D1B06A20B5977B4DFA2ACE37354D475FC9D9F1FAF3FD4CE5E5AC7464498FCE6
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/400288975_646718864316228_2056689419099837771_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1K7WoL-HHJgQ7kNvgGnGb5p&_nc_ht=scontent-hou1-1.xx&oh=00_AYCWg4P8vLeWnqwlvnqSnXlE2hiUEDS7x2gKKA41wMJ2rQ&oe=66560755
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7101000075030000a5060000fb070000db080000400c000039100000b3100000b01100008a120000b4180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................2.i..P'...........{.p.kr.LV.@8X.....h.0..:......P....T..lrvn.....^....1....4\.a...../..&.../.3..n.Q......H........5w...e.D.O...r..K....fj..+.....&E...H... ......\W......+....'o*..t."+s.]..J....[..H.X...b.=.f..gJ.&K..Z.vx....L.q......=9D4.;6..$.k..................-"...j...H.g.:mf....^C...{.ED..^2..%..AL..5...:l...).h=.._3....hZ.U.....Zi9J.... .A.+... Ez1Sp.X.....u.$.U..8......q.0......D.0..i".(..b.f"..w<.S>~..8@c.w.=..D80.D..../............................!1.3"#045.2@. $6B..........b.7...e..[.R..?...D>v...V.v.c.......&..p......=.l.."a.s....{..u^..^.......i.n....$..U}.}....o[...'..

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	101993
Entropy (8bit):	7.9776996525343264
Encrypted:	false
SSDEEP:	1536:TsTiabMWf2u319Dvmfd3yJ7zsf4InxI6KtI0ba6TfiYF7Kxr5qaei9qvFoG:ATiaQWf2ulY8xAggG6Kvbrbf7Kxs+qvL
MD5:	FC3E932499D32E98E0FA2244F93BFEB8
SHA1:	B21A8EE0F17E9890B066B893E55D881B24ACFDF6
SHA-256:	3194CAA270A2B2B7E7BA508AF24FF1C10334020BBE13B0B042B7D8903B5FA0BB
SHA-512:	F59930700F135FD82CF10DC4FC238EEAD1B931AE78900197CC469C81051D8DD7F33567E26A14F37E5CBFA9B0F9B045405E09426BA51BCB7800A01DFA32AE477C
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...''''&'&&&&&'''''&&&&&'&&&&&&''&&&&&&&&&'''''''''&'......t.............................................W........................!1..AQ.."aq.2.....BR...#Tbr......35Sst.....$%4Cc..D.....E................................./......................!.1AQ.."2a.Bq.......3R.............?...P..G4.f.s.......Z.b31S.j.a..Q.h..!<r...\U.Z....>...v.DBR..i....wZy.t.aK.64.&I[".Sa..d.........gOw+.b..kL....T.:Qw..\|....E/d-...r.].6j@....=.}........8.u...^).<.ZFu..0.~...5..?...{g.\W.y.4...DaT......%x.8...u.......Z.....irz-.s...2....H..oiNWQx...g.{O"..y7...A."e.:Tc....+.$..s....]..-8L4......B...5...].b......[m...\|7p.J.w..`.Y.k../..1.r$.%.8...s..`2.@..g..x....X....E.d...X.S.`..k.W'.....l~UXH....?OC..d..7.kH..,...8.ET.J3S..ek.SI\...\|.....Zm.<.ozK. b.v>....g.aE..........~i9.W.4..@>Ij..8..;.tO..]..p#..6J.K..<......0M...)..l6#...z.......}..Z..k_Ur.,>^.>....c...F..i...r..Q.V...1U..o

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2867)
Category:	downloaded
Size (bytes):	149119
Entropy (8bit):	5.597619049495285
Encrypted:	false
SSDEEP:	3072:MvcT/mR+Ae6bHkPnUa3c6L3Xoj5abJ0ykxYq4BDO8+CLrxvc9iQZ0kk0Fg:MvlR+Ae67kcc3Xoj5aGykxYtDO8+2Vvn
MD5:	152043C5D11FB931DFF35AD09E8B2876
SHA1:	D6EEC75A57D5A850520363910F7B9758C2DB7211
SHA-256:	C6C3ADA0E8A2A190CBC18CD730AD01D0D7734533C83F2C7EC57BBB793ED75634
SHA-512:	99845D4AA8D2BC220F4D92FE5B7572B5CB2B542B0DC4C579A5AAAA20587369CEF001893D3341C2C2B2889A3C39D36449605384CBF4C3C93AFDF20720CDCD8CA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/152043c5d11fb931dff35ad09e8b2876.js?tag=video_mra/web_interstitial_raspberry_ms_cta_adjustment
Preview:	(function(){'use strict';var n;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa=aa\|\|{},p=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a,b){a=a.split(".");b=b\|\|p;for(var c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}function ea(a){var b=da(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length}function fa(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}.function ha(a){null!==a&&"removeAttribute"in a&&a.removeAttribute(ia);try{delete a[ia]}catch(b){}}var ia="closure_uid_"+(1E9*Math.random()>>>0),ja=0;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function la(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}retu

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	289770
Entropy (8bit):	7.96154741223642
Encrypted:	false
SSDEEP:	6144:bkQF7yuTqAiJAj3h3++qXTGwRe41PAFmAbxokM1k15ArQT+L:bkQF2z2jR++cKwk8AFmP1k1qrQaL
MD5:	AB209E013C1F394FAB921773B0159A05
SHA1:	5EEFD493258DA264C9C8A330AACEEB16B225E29E
SHA-256:	414F7BF4BAC5E43DEF295FA7BC7AF577C063E60D3A0991B7B9327AD4B266CEE5
SHA-512:	06A76F64EE3B3B7C9B1A94CB68C436A615230D58728C4F6557DE91E7AC1555D348764676E5B8FE6FD8909CEC1B5444ACE4EADCD53B2DD298A5AEA90C11779C42
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2019/10/spectrumptex-1-768x403.png
Preview:	RIFF.k..WEBPVP8L.k../..d..Hl.H.$..U.n}...........N..................{.QI$.X..9]IUU..[....?..F....Z.r....\|..".I..z.#......jrTU.s....&+.uw."...K{KA.....n....7......l_ ..e..........c.n...>p.c...m_.Z..../.l@.)..dX+!.:.SI.....W.... /.kd. H.....H..H......@....^..(P...Nb..m..$..a...2....#]K.....F#.^...G..m../r1...D^e...G.......A.......$.v.@..(.AB5...\......=32..T.e.qt...$..31U......Q..7...I...&.+./....L...rl.Ju'.~..]{.#)..I..r9.Q..<Rt:{...d...Se.y.Q}...x..m.....".J.......)..a..%=..H.A....#~...j..Um[$I.$H...'i....$....\.\...p..I.$hIh+......_w...x....}.{..b..f2.........z.h.@.t..W.O.(Q...K....-t....5....h.#xt.VZt.(.C....3\|..............h.Qh..E..h_h_h...".\|#...K_.h.h..D...C?U...idS.N'_...........A..1E4jq.E.(.."..;:..}.f.. I..H.......@P..._...WC.T.....R.k.B...........N.P.<....F..h.{.....T....:..........s..1.........!.B@!..[`..^K...[\|.2..........U)!DF.C..a...p... ...}..k..9.nY...9vM.'`.h.yL.=..h...4..p.w..'...y....>..>jw...4.:.[.....:.Gp....

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6516
Entropy (8bit):	7.914424878022746
Encrypted:	false
SSDEEP:	192:ql70i+TltB2uxihqcAxYSxTA7M2fNe/AE36Fie/:ql7oB9eyCv1e4E36Fr
MD5:	6091D84E7CC2A960466917C9B83D2AB3
SHA1:	888B5032011435E5B1A99FDCC6220C2288051B3E
SHA-256:	319FB519CEE81AFDD22340D1BE7DD7DC69C9420482CE0E342735634CB13FEDAE
SHA-512:	5E3FE9B4AC43AB61C0A03883B0336D630169B357ECFD9B673AD1DFC2FEF553A9BCAF6DAAE1E90083163A1736B53075CB174A6F5A673304FF8244B78E46DC3EE4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X.....;IDATx..{.$G}.?YU..GO.C..V.ZX.z...m..[A..wB...C.....e....,.90..:...\|...0.-.c..pF..!..Xo.V.....G...]Uy.T.<...gg.{fv....b....2.[....UJ_.F...^.....*.J. A. <........g".&%...p...HD ...z.[K."..L..D."..<.ZsK.".-..'...g..-...p.qZ...D8.Y......VV.@....>..D8.1.D."...].<.]..@-P......m....f=.+.....=.....<.5...q..]....zru.....W......@.t.."4..)....z.....">....F.y_.R...wM.\|.e......Q~.@:.:G.....[j.m....A.....th..^Z.....?W.o.X..........E....9...(.{.<W.w../....3..d/...;...MZ$.\|.Qn=....v..@....U.D......F.i")U._.[.MC..`\|.........U.......U.P.......x..brw.!...jO.5?.d..>..^..../....U...=..;f.........>6..f2..f...#._{:....a....&........./..'[......#..G.....>...7...8:..\|.l..$.\|.Q~c...t&.o...o.'...+.=s............'..........I.3.m.$...p.....%.";>Gg.X..mX.\v..LrZ>I..X..#.3....L.Hq3.t.7:....!_)....,(>vv.......6.;4.....D.[.n,qtXp...s..Z.5.52..=.b<(...X..l.G.gAj...HC#..h...J.2..A.0...SH.b.wg!..q.n..D.6....".A0 ....".A0.w.:4.O.U@

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56582)
Category:	downloaded
Size (bytes):	548611
Entropy (8bit):	5.3807474314667765
Encrypted:	false
SSDEEP:	12288:eD1wurT217MIkUIiksnEoeyL484VMYrfMubKVK3SwQWxN9:ehhT217mUIiksnEoeyL484VMYXbKVKnL
MD5:	D812F2490911F303AEAE35B8ADCAD237
SHA1:	E43EF93190A9741B4928286AFA42EBF9001461AB
SHA-256:	35D2E15C09A0FCACB63F8FBCE898DC170FE6FEFAC6902E76763D639E2DDD4886
SHA-512:	2BE5FE39E213916578010E7307F57EB991DECCD0F2B3990EB96A3AA0348D917E69ACFC4D57C3E1FE1669BEBC700BB38B176A462FE9F3BC3004976AEA02365656
Malicious:	false
Reputation:	low
URL:	https://player.avplayer.com/script/8.3/v/avcplayer.js
Preview:	/!. Aniview Content Player v8.5.6. * Build time: 2024-05-22T07:09:28.235Z. * All rights reserved to ANIVIEW LTD 2024. /./! License information is available at LICENSE.txt */!function(){var t,e,n,r,i,o={67266:function(t,e,n){"use strict";n.d(e,{G:function(){return a}});var r,i=n(8571),o=n.n(i),a=(0,n(33325).j)(o()(r=[]).call(r,["AdUserClose"],["PlacementSizeChange","PlacementShow","PlacementHide","PlacementDestroy","Inventory","InventoryRequest","WaterfallPause","AdRender","AdShow","AdHide","AdMinViewTimePassed","AdMinRenderTimePassed","AdCanRefresh","AdLoaded","AdStarted","AdStopped","AdSizeChange","AdLinearChange","AdImpression","AdClickThru","AdError"]))},50103:function(t,e,n){"use strict";n.d(e,{x:function(){return y}});var r=n(53706),i=n.n(r),o=n(67552),a=n.n(o),s=n(51791),u=n.n(s),c=n(8571),l=n.n(c),f={topWnd:void 0,topDoc:void 0,vitab:void 0,sf:void 0,atsWindow:void 0,frameElement:void 0};var d=n(60539);function h(t){var e;if((0,d.Z)(t)){var n=function(t){if(void 0===t&&(t=w

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	57686
Entropy (8bit):	7.9966293881746715
Encrypted:	true
SSDEEP:	1536:sUc71b2RNuhRnqWfHviXI1zznPfRTqcl5ba80vV2V0:nmbaNuhRqyH6OT5l5TnV0
MD5:	3480490B1B9DAFA252B83A425006A20D
SHA1:	A9518229E175DDCA6B12230A307DBBF8126AA98A
SHA-256:	790303C9AB945C4907268F0460D99BCC56EB192335A09D2D857E84FBF038C4BB
SHA-512:	7B10B7BD4034E486C888D420BF3135855032834B8EEE2407DB4BA5DFFD90A2ABDBF9FDC3B84DC8000E9BF6BB8682842E66D0C57EAD900A67180D3B9626F19A81
Malicious:	false
Reputation:	low
URL:	https://de9a11s35xj3d.cloudfront.net/16afc0b29e2a47c4091aea1e77b64c9d.webp
Preview:	RIFFN...WEBPVP8 B...0......s.>m2.G.#&.'..q ..gn)..uI.I..vU.+Ljw._.{{..?@..~ks..I...O....}{...8n..........p......[}{....z{1.,......#.;......Q..........G.<}..?..S).....?.? '.)......-..h:}.g...]Hg....c....._p.0[RZ..,..}.YVu..w..O.........e..u...F..[TI=.t.t.Z.'!..y...).....'\.r..{..........Mk.LP.RN.K.m...?.(...c...H........X.\|.,./....tS.5.{f..%...0.......P._....w:IqbB:...b.!.jm.[...@..%...9.x.k..}...7W.....s........r....t..8..hf.I..u.m.,.....U..!..M/....~X..........*.=...PF..x.}.....P.I.C....2BnC....<.+U.......~.D....t.......t.%Z.3:..R.H......(....u.T.a.?/....2-h..f....P...I,cT..T..8..keR.....pC...V., BK'.H..}...7....e5M..6&M..#.Q<h2.C1Ihf.u...ZF=uSa7.~.i.}2r.....1>H.S.{...eW....g..t..Xn.{u...^2..17 .#g...:5`j._.9.....}.{..\.Jp....-@..$TpY..."z....#..N.....?n33.6<.s7.....)R..7....J6.ooh.._..v.x.:._V1...B.W..xk..".'3...X7...&..@y......E...=..HQ...M.0.).;^.`.n...C.^..`.8..h..6......n...}.:.(...}.........+...1....#..An.......Hd

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	101993
Entropy (8bit):	7.9776996525343264
Encrypted:	false
SSDEEP:	1536:TsTiabMWf2u319Dvmfd3yJ7zsf4InxI6KtI0ba6TfiYF7Kxr5qaei9qvFoG:ATiaQWf2ulY8xAggG6Kvbrbf7Kxs+qvL
MD5:	FC3E932499D32E98E0FA2244F93BFEB8
SHA1:	B21A8EE0F17E9890B066B893E55D881B24ACFDF6
SHA-256:	3194CAA270A2B2B7E7BA508AF24FF1C10334020BBE13B0B042B7D8903B5FA0BB
SHA-512:	F59930700F135FD82CF10DC4FC238EEAD1B931AE78900197CC469C81051D8DD7F33567E26A14F37E5CBFA9B0F9B045405E09426BA51BCB7800A01DFA32AE477C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/5539079280424306237/14763004658117789537
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...''''&'&&&&&'''''&&&&&'&&&&&&''&&&&&&&&&'''''''''&'......t.............................................W........................!1..AQ.."aq.2.....BR...#Tbr......35Sst.....$%4Cc..D.....E................................./......................!.1AQ.."2a.Bq.......3R.............?...P..G4.f.s.......Z.b31S.j.a..Q.h..!<r...\U.Z....>...v.DBR..i....wZy.t.aK.64.&I[".Sa..d.........gOw+.b..kL....T.:Qw..\|....E/d-...r.].6j@....=.}........8.u...^).<.ZFu..0.~...5..?...{g.\W.y.4...DaT......%x.8...u.......Z.....irz-.s...2....H..oiNWQx...g.{O"..y7...A."e.:Tc....+.$..s....]..-8L4......B...5...].b......[m...\|7p.J.w..`.Y.k../..1.r$.%.8...s..`2.@..g..x....X....E.d...X.S.`..k.W'.....l~UXH....?OC..d..7.kH..,...8.ET.J3S..ek.SI\...\|.....Zm.<.ozK. b.v>....g.aE..........~i9.W.4..@>Ij..8..;.tO..]..p#..6J.K..<......0M...)..l6#...z.......}..Z..k_Ur.,>^.>....c...F..i...r..Q.V...1U..o

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64283), with no line terminators
Category:	downloaded
Size (bytes):	64283
Entropy (8bit):	5.33514081380239
Encrypted:	false
SSDEEP:	768:SlCdNChV2BLD5EGJS96tchRLchL/OQ4nPmc7L6L7ZtOt968uzRD9Di9+Si1p24R+:skJIAIp7LY7ZU96/zhti9+3lAioFU9c
MD5:	E149D286D66D32847D66DF6496775509
SHA1:	EAC53FEBC473BD73DCA6741BED78C22E19DFE7FD
SHA-256:	EA1B384073507BC46287E0D51F0775A8DE186F88E18F222F5EC113455E6FC051
SHA-512:	124BF1595E808E5CA2D69AB383B099DDF59B51AC04E7EE2D7C1167052B348CF2C5A6554C28EF8CD0F1E0DB1C007B972E4871D9A540191904A85F1EF00296A6EC
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/libs/prebid/avpb8.48.0a2.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[828],{3852:function(e,t,r){r.r(t),r.d(t,{spec:function(){return c}});var n=r(4942),i=r(2623),a=r(4953),o=r(5740),s=r(4030);function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}var c={code:"adhese",gvlid:553,supportedMediaTypes:[o.Mk,o.pX],isBidRequestValid:function(e){return!(!e.params.account\|\|!e.params.location\|\|!e.params.format&&!e.mediaTypes.banner.sizes)},buildRequests:function(e,t){if(0===e.length)return null;var r,i=t.gdprConsent,a=t.refererInfo,o=s.vc.getConfig("adhese"),c=i&&i.consentString?{xt:[i.consentString]}:{},f=a&&a.page?{xf:[(r=a.page,btoa(r).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,""))]}:{},v=function(e){for(var t=1;t<arguments.length;t++){var r=n

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=4426393169609033625/gdpr=0/rand=721000938
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7103%2C22652678936%2C187271864%2FSMG_Aniview%2Fpreroll%2Fsyndication_2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2358304131382113&vpa=auto&vpmute=1&sdkv=h.3.642.0&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=951069744&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776494%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&dt=1716532065452&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=1726289072020730&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td46_tt29_pd46_la46000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16619
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	190
Entropy (8bit):	4.724649190606844
Encrypted:	false
SSDEEP:	3:YRMZXKOLz59ifHtKfnS3uWwMLjSnBMB3RYAs2HJHdLUfNVJpPdFH/JJVrmV:Y+T98NruW3LunAYlGdLUfNVJpPDfJJVU
MD5:	72EE6B03CD3D70450D566B2E66E8992F
SHA1:	9AF52020A954D60319878A881B741BAE8A3B93C5
SHA-256:	71F0C958E33905CB028DFD76FF7FCFFA9D57A260845594E84D116530E3F80A36
SHA-512:	D21327FED8735C7C1A636A1784A19A07F40E0F155C58483147745B2D2936D000C4F5CCD0B8E6E7B5298C362508102235343B0A7D9D927BF4A88F012D714636F8
Malicious:	false
Reputation:	low
Preview:	{"tid":681,"solution":[{"name":"publink","src":"https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js","configName":"publink_options","config":{"pubcid":{},"loadAts":false}}]}

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18617)
Category:	downloaded
Size (bytes):	18842
Entropy (8bit):	5.6398506733849425
Encrypted:	false
SSDEEP:	384:vxCZtgN2YRyq7yS07qmJWnY7tv4zv4jTjM8Wa83/8j68bU8aR68Ub6A8ah08Zu8B:vxCZtgN2YRygL07qmJx7tv4zv4jTjVWK
MD5:	D724F26DCB601A610227A84BE1D0B38C
SHA1:	5B463035BAF3BDAEAF94297D26EE6922CD730A0E
SHA-256:	C4F9E1D67F88FC04E2222B32140B429BBB5C38B10294C4BDA894AEF1254EAD0E
SHA-512:	0A212EA016479E2A0A8763EA08C4C570E1277E876E53FF13E0A1F79A963CBF4BFC89E82AAF35B5BFBEABDF5BF2982C79E2EA79002EA588276A190DD4B494A376
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba.aaf0d01a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba"],{20545:(e,t,r)=>{r.d(t,{Z:()=>u,C:()=>v});var a=r(7896),i=r(2784),o=r(48501),n=(r(6886),r(56499)),l=r(81010);const s=(0,n.Z)({loader:()=>Promise.all([r.e("shared~loader.DashMenu~loader.directMessagesData~loader.SideNav~loader.Typeahead~loader.AppModules~loader.DMD"),r.e("shared~loader.DMDrawer~bundle.Articles~bundle.AudioSpaceDetail~bundle.AudioSpaceDiscovery~bundle.AudioSpaceba"),r.e("shared~loader.directMessagesData~loader.Typeahead~loader.DMDrawer~ondemand.DirectMessagesCrypto~bundle.Commun"),r.e("shared~loader.DMDrawer~bundle.Articles~bundle.DirectMessages~bundle.DMRichTextCompose~bundle.LiveEvent~bundle"),r.e("loader.AbsolutePower")]).then(r.bind(r,72034)),renderPlaceholder:(e,t)=>i.createElement(l.Z,{hasError:e,onRetry:t})}),c=(0,n.Z)({loader:()=>Promise.all([r.e

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7121)
Category:	downloaded
Size (bytes):	58505
Entropy (8bit):	5.397162005498734
Encrypted:	false
SSDEEP:	1536:p/zXXAiE9zrwPKauQPvl/Tm+gnp9+qsrjrqrNraVA5bRa:p/zXm9zrOiQPvInptm
MD5:	BEF97ECD733AF4AF77BD51D18E5196CC
SHA1:	DCFB06BA3A852071766D2EE543D6B0103EA78C6F
SHA-256:	35675981EA647B1C11C49661FDE434B9C4B819E0834AC1E96831129458A97E6F
SHA-512:	37D9734796C9FBDAAB8884D92AD5E8BFFEFDC474C760CC4AE6C34F7B28825C8E79D6945C4395390BAC056CDE03E8FADA1FB41C58DF86EC422FDFD99D979C5FC0
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yp/r/c3BjdoXJZL_.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("MinGapType",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({UNKNOWN:0,ORGANIC:1,ENGAGEMENT:2,FIXED_POSITION:3,PROMOTION:4,SPONSORED:5,END_OF_FEED_CONTENT:6,FB_STORIES:7,HIGH_VALUE_PROMOTION:8,FB_STORIES_ENGAGEMENT:9,PYMK:10,SHOWCASE:11,FB_SHORTS:12,TRENDING:13,IFR:14,ENGAGEMENT_QP:15,GROUPS_TAB_UNCONNECTED:16,END_OF_FEED_REELS:17,FRIEND_REQUESTS:18,FB_SHORTS_FALLBACK:19});c=a;f["default"]=c}),66);.__d("AdsExtremeGapUtils",["gkx"],(function(a,b,c,d,e,f,g){"use strict";var h=3,i=6;function a(a,b){if(b!==5)return!1;b=c("gkx")("23035");if(!b)return!1;b=j(a,0);return b>i}function j(a,b){if(a.length===0\|\|b>i)return b;var c=a.length,d=k(a);if(d===-1)return b;return c-d<=h?j(a.slice(0,d),b+1):b}function k(a){for(var b=a.length-1;b>=0;b--)if(a[b].minGapType===5)return b;return-1}g.EXTREME_GAP_DISTANCE=h;g.shouldApplyExtremeGapProtection=a;g.getLastSponsoredStoryPosition=k}),98);.__d("BrandSafetyOpportunityLossRateFalcoEvent",["FalcoLoggerInternal","getFalc

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	26469
Entropy (8bit):	5.48080981673878
Encrypted:	false
SSDEEP:	768:NIiDmIhL4bkoBycpCSUtth0RyeJHhruI6u:NHyIhUkoUcpCDbh0RyeJHtuXu
MD5:	A30615AA56F1DFDDC3DCAEB070F172F4
SHA1:	5D4BF24B179FF62648179439CD3F845AED8ACD53
SHA-256:	ED5A2E6F7721A7C5A026419DE7855AFA2B6A30BFBFB54CF7A9B02BD5535592B3
SHA-512:	79150B1CC0DD24722EA8E9C8C81DAF05C3E9D9886DAFDBA2D292DB1331E4C4575A1C72D18692CC73B40D338E74CFD2E9F64A028BB0E3C15725FE9626EC7D8253
Malicious:	false
Reputation:	low
URL:	https://go1.aniview.com/api/adserver/tag/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=83389&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=940526eb-9660-48fb-9fc3-ce624089be48&rando=91&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532083395&AV_C_USER_ID=1716532025945-172031150014-000201-002-004790&wfc=1
Preview:	{"data": {"trackers": [{"url":"https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east", "e": "sync", "pr": "5", "t":3},{"url":"https://ads.stickyadstv.com/user-matching?id=3655&_fw_gdpr=0&_fw_gdpr_consent=&gpp=&gpp_sid=", "e": "sync", "pr": "9", "t":3},{"url":"https://ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=", "e": "sync", "pr": "9", "t":3},{"url":"https://ssp.disqus.com/redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D52%26key%3DBUYERUID", "e": "sync", "pr": "52", "t":3},{"url":"https://u.openx.net/w/1.0/cm?id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D", "e": "sync", "pr": "23", "t":3},{"url":"https://pixel-sync.sitescout.com/dmp/pixelSync?nid=136&gdpr=0&gdpr_consen

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	22180
Entropy (8bit):	7.980789596516158
Encrypted:	false
SSDEEP:	384:XWdTGt5usYwb1T9Y9YsxxCT/dwpaRHqbV0EiRdxRhmEyEpWQsZ+QTNxYyHVx:GdTDA++sri6paRWijNmEts/ZNOy1x
MD5:	3669E98B2AE9734D101D572190D0C90D
SHA1:	5E36898BEBC6B11D8E985173FD8B401DC1820852
SHA-256:	7061CAA61B21E5E5C1419AE0DC8299142BA89C8169A2BD968B6DE34A564F888A
SHA-512:	0C5F0190B0DF4939C2555EC7053A24F5DAE388A0936140D68ED720A70542B40AAF65C882F43EB1878704BEA3BD18934DE4B1AAC57A92F89BBB4C67A51B983AE3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j...VkIDATx...{.\.}.....{...........Cm\....B.E.Vj.?...i.(..."BZ.JP!.D...D.....9..-....B...6...wg..........3.^l....Fw.q.......=..`Y.yO...,.<7lY.y...lP-.A.,.T.lP-.A.,.T.lP-.A.,.T.lP-...,.T.lP-...,.T.lP-...,.T.lP-.........a..n.%.J..).`.m.P8]$E.%... .r......jS.......7...kV_s...^.......3.............].~....5F.....0J...<.......E9..........q\DDH...+...\9q.@DA......(2.n"j ..F ......M. .R.$L......5E1......%$!.q....0A.`y;....4..`...h_.....4.....r<....w.e.1&T.....K.Ae.....mG...@..0'Q.........E.G.".;.r.... .u.?......37...,P" a.c#G_..].6\..u.P..D....)-......M....A.0.lPk.. ..;..e.Y..........U...aX....(X6.U..F...?...\|.o... .u......?...A=..5k..A..L>.i..g.<....m\r#.....}._......u......=.[.u......q........D...~..\|'..F@.{T.\.c.......5..z}.x.h.....1yY.H..).p..P.u$...8....`..P.h.. .G.....1..."..s...xj.. ..2.(.....0$..a.....2...B.BA.....T.H.C.1.. @2..H.D.c.!\.....J.Q.X....\..V.b)...m.:.~(J...D.Z.`.%.:.\|.

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (787), with no line terminators
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	5.196494727774105
Encrypted:	false
SSDEEP:	24:hvrIyF1b89F8Yjd9FzoHd9F8I5cXdGid04gIIt+gE0hwPPVb:NrTb8UwdcHdUJX8SrSeP5
MD5:	1B438301BC0B23A6FEEA1CA897311F89
SHA1:	63064435B03EB9473CF855C901BBA55E74F76A9F
SHA-256:	64E5BA11A4599BEDC862AC7D8730194819ACB14AC0F12DA088D9D2D79993B8E5
SHA-512:	3DADB853511A44A91106209C585EEAB60EA0F818500966721AE8DC63BA836E56D692C7F12AFC338C032E021B640AF6252BE2E04DB1BEEDAF26A364736E7602D7
Malicious:	false
Reputation:	low
URL:	https://dotsply.com/pixel/fetch
Preview:	<!DOCTYPE html><meta charset=utf-8><script>var helper={Emit:function(){var n=this.Storage.GetLocalStorage("INF_IBL"),t;n&&(t={hostname:document.location.hostname,value:n\|\|null},window.top.postMessage(t,"*"))},Storage:{GetLocalStorage:function(n){var t;return this.SupportsLocalStorage()&&(t=localStorage.getItem(n)),t\|\|(t=this.GetCookie(n)),t},SupportsLocalStorage:function(){try{return localStorage.setItem("storageSupport",1),localStorage.removeItem("storageSupport"),"localStorage"in window&&window.localStorage!==null}catch(n){return!1}},GetCookie:function(n){for(var r,u,i=document.cookie.split(";"),t=0;t<i.length;t++)if(r=i[t].substr(0,i[t].indexOf("=")),u=i[t].substr(i[t].indexOf("=")+1),r=r.replace(/^\s+\|\s+$/g,""),r==n)return unescape(u)}}};try{helper.Emit()}catch{}</script>

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1605)
Category:	downloaded
Size (bytes):	1774
Entropy (8bit):	5.4113178415568735
Encrypted:	false
SSDEEP:	48:iI9eLQg1+ZbY8re8yrt1D3jFPiIz0Pdvt4WmDeR:h2l1QbY868qtp3j37tS
MD5:	6CB5F814F796C60D7BB7F50E54427742
SHA1:	3C46987CF704FDC735B25231A65AB1101BED73DD
SHA-256:	3A98F89D3E033B83E020D27A951B378B632DEA62CC4F0CEEDE5A7AEE398D4F9A
SHA-512:	02B1720B32470424224C420B558ABFBBCF7CA76F3F5F77925A293A7C375B150ADB3D08D872BB91863BE1B825D4EEFE10945878AC063533E16E9755785BD7CAE4
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV.20677bea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.LoggedOutHome~bundle.TV"],{44337:(e,n,t)=>{t.d(n,{D0:()=>l,c$:()=>a,fD:()=>r,iB:()=>k,jk:()=>u});var o=t(60328),i=t(72599);const s=2,c=1e3,r=Object.freeze({AcceptAllCookies:"acceptAllCookies",RefuseNonEssentialCookies:"refuseNonEssentialCookies",Invalid:"invalid",NotSet:"notSet"});function l(e){const n=(0,o.bL)(e);return n?_(n)?p(n)?n[1]?r.AcceptAllCookies:n[2]?r.RefuseNonEssentialCookies:((0,i.ZP)("Invalid consent signal state"),r.Invalid):r.NotSet:r.Invalid:r.NotSet}function u(e){(0,o.kA)({consent_version:s,text_version:c,1:!0},e)}function a(e){(0,o.kA)({consent_version:s,text_version:c,2:!0},e)}function _(e){return!(e[1]&&e[2])}function p(e){return e[1]\|\|e[2]}function k(e){const n=(0,o.bL)(e);return!n\|\|(!_(n)\|\|!p(n)\|\|n.consent_version<s\|\|n.text_version<c)}},3670:(e,n,t)=>{t.d(n,{A:()=>o});const o={page:"cookie_compliance_banner"}},85665:(e,n,t)

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37041), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	498640
Entropy (8bit):	5.384745368799251
Encrypted:	false
SSDEEP:	12288:psa0eRZz5+qgr5trxzheN0LWn69ZMlObRgf3WaA:zt5+Xr5zzsN0inuZMlObRgf3WaA
MD5:	080A6C7DFDE3AE3CFDA711E4D86D1EB2
SHA1:	1FC457681650C01FCF9DD30C8D4044300E6FFD1C
SHA-256:	8046432983A705B6D3BB66416B37E2BC2ACBE8E0B0EF9B738F2ED316BB365D0A
SHA-512:	4762C6B38CEAECBCBC4A8A67B6DE62B507E8B39DBB4FAA680BE9E029DFAC480DB8431330DCD9180ECE8A62F38E1536590A68E4D7D1A332EBE14600B2E3135847
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/ab5/AVmanager.js?v=1.0&type=s&pid=64db4ddc8904509d8303ce64
Preview:	/!. Aniview Ad Player v6.2.212. * Build time: 2024-05-17T15:40:56.092Z. * All rights reserved to ANIVIEW LTD 2024. /./! License information is available at LICENSE.txt */!function(){var t,e,i={4221:function(t,e,i){"use strict";var n=i(888);e.Z=n},5568:function(t,e,i){"use strict";i.d(e,{F:function(){return n},Z:function(){return r}});var n={topWnd:void 0,topDoc:void 0,vitab:void 0,sf:void 0,atsWindow:void 0,frameElement:void 0};function r(t){if(void 0===t&&(t=window),n.topWnd)return n.topWnd;var e=t\|\|window;n.sf=window.$sf;try{for(;e.frameElement;){n.frameElement=e.frameElement;try{e.frameElement.getBoundingClientRect()&&((e=e.frameElement.ownerDocument.defaultView\|\|e.frameElement.ownerDocument.parentWindow).$sf&&(n.sf=e.$sf),e.ats&&e.ats.retrieveEnvelope&&(n.atsWindow=e))}catch(t){break}}}catch(t){}return n.topWnd=e\|\|t\|\|window,n.topWnd}},4798:function(t,e,i){"use strict";i.d(e,{Z:function(){return l}});var n=i(1929);t=i.hmd(t);var r="object"==typeof exports&&null!==exports&&!expo

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1167
Entropy (8bit):	7.78262357040959
Encrypted:	false
SSDEEP:	24:G90+Q0yzKKbQPdqfaLJZDqUGTO2MP+lpQHmB7jfDXOzmlA8QH:60+tWDQP8aLJJqXpM0HBPfSrdH
MD5:	36A8DB8E1AA041FBBDAEDF7226873BAE
SHA1:	6377785FDA18CB966D3F529E25B16AC0A64B3F11
SHA-256:	3AE372F02B5EDE6519B84DEFC520726048FB1D2CB652B5820956A0D74C732086
SHA-512:	EDCFBF13DF5EEEEA2C0800383C106B5BD11AC51D636EC098E8C301CE4CEC7FE8EA53E395429EB0A08705F7C8F252B5645319C0EE3555CA107D4C80F6AD17E9D5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....G<ef...oPLTE.......AA.ww...................WW.!!.MM.............*.aa......a.........S..Jv6p......................jj.44......b....IDATx..io.0...1.@9..r@.........l..VZ.\|..t.............., ?.4.O...._qTS....I.@..\|.1.........N..}... .....,.'^..M..B...G.#.%R0./....h@.(I.Q...........&.+?#..$..a..P [.............)....6...#bR....@I."....\.k.6M.gD..Q'..F.B...\....;"....p......[...4...%.(.^....... ...H.R ........0Nk)....9...Z.....,.P....0\[.'..,..O9.d..S.9E.i.<...(."....>1H.jU+.....\|.1+2.@......s.."....G....5_.v..`.2}...:.Vd> ..\|FJ\|Qb....L..<z.KyDN....".x.a.....Dz@...3V..L.....SQ.ye...2v..`.Y...>nf.3{.T...Rl..k...:./.=o..(.......X..2.......8)j...%..U3.zoT.F..s....h..:=.........uU~m.`..z.u..S.[..;Z.C.J4&.\m.#..E_.-...':.n9....B_K....._..r.A..[$>..O.W,.}.$~%t1.=...~x,^....[.t.(&.j..(S.......e. !QhiI~;=..1M.u...S.....\.q.:4..Q.3;..$.......]Nf.,D.7..C5!...Q......;:....W.F..hzCR.8.Q,......#N.o..t......qr.J...h.>..L.....I..)yA-

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 39478
Category:	dropped
Size (bytes):	4936
Entropy (8bit):	7.955719050838683
Encrypted:	false
SSDEEP:	96:zk9yEqhHI/W2rGkFaeQU9MQXIFkI9qwF8qj1O8Gqmn/iia:z4y5kFatU9M9hYR8GqmnZa
MD5:	4E28FA6CEE4109BFF7597CCCA41FB8AB
SHA1:	3C618756DFFF2C5EB6270A24E653D00923D2983C
SHA-256:	ED4B868B06B1BB9DE193AF4E459641B5B65B2711F222A5E0FDABE0D17C9CB902
SHA-512:	4773EE2E25D1458A5E5D953F39B0E1F99E6DCF692C87585A1E9CD3A92B774EFE49FE9DB8069931BBE6562A832662FE932552157E1C3D791568EE9B518F36FF3A
Malicious:	false
Reputation:	low
Preview:	...........].W.8..~......)6.,....8N..g.e....89.-./...N.....#9...Z...Oi".f4.......V..^o...,5.....n...T.,.....b.....uY....L.....5....bJ..!?.....%....(..\|Q........5;.aY.b..J\....A..{f.......c..7...>y.@!N.'.L.,.q.9j..9S.,i.n..".....xR.ykgU.........B.x...^........&...9..W.\|..0.(....H.E9fU..^I...8t...R.j..F.).q.X.1..k.j.R.:R5..$e..Q...j.(.......$.1GC.D.............A...$.I..........3.T..r.. .c".B...IP.B.......&...#.m...<.TUGH%2B.#..0.'.....#.......T.....G..5.....}J...$..Q.b"...}...P..U,..c..&.......eiUdcH. v]1..$pK7....&.....c#..7?.q..S0:.b....D..d.Hg..Q..{.27M..M.Z.FI.C....o..-.u.;G...v`..2.Ey[!......2..N.jFT.Hc.?#"..g.A-,lS.B....".9..1.JL5l.aj2...\|j...~d......y.`..\|?...v...h....N...=..;.......~t..w..O. H....v..~...C. .%.....nw...N.,..N.#.N.8...?$............y.[......".A.....`.E......~G..+..~G......./.l.....n.p.+.jmm..%........e...IKU.Ik..A....2..{.u..y..;8\*.y.o.p.(...l"..9..PmV.[..b.R%..P...cE..o..E.......o........BA...\|BY)....8....f9}

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	5.296654648536666
Encrypted:	false
SSDEEP:	6:6v/lhPEJl8NM9VbcAZczPKuH11GMDLCd9iDR3GsF64BIrbaTp:6v/7MHbcrKm11xYi93Gx8
MD5:	546AA6AC8DDB221B48CD6CFB6801E6AD
SHA1:	C97AA73441085438F78BC0A0094940BD1FC52F89
SHA-256:	3A5D43A25E81FA4EB76880C9EAD7E1FEBF26D6C503CD2F940CDCF11FEE779B87
SHA-512:	DA198278C036F0AFFEF00A85D4F1F0BFC0419CA4D31E8D9F946B1E72FFA362093E539A894F0BB705750787EA567993A59AC89E38E7569FFAEDCFC990CAC9C5EE
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yV/r/vUmfhJXfJ5R.png
Preview:	.PNG........IHDR..............W.?....PLTE............................................................................................................................................./...-tRNS..U.Q....GJ3).n.......~.N....r..K.!.../...5...:....IDATx.uQG..0...8v..l.....qr.......c.+K..A..E.{..L:......e..;....]...S.......#...E.]...82.pm.l...QR.j*D$..1[./U~:.0.R..v..O.mdi_x..V.......7....w.R.BzV.d=G....E.&?..&.....IEND.B`.

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5752)
Category:	downloaded
Size (bytes):	5941
Entropy (8bit):	5.475764060428489
Encrypted:	false
SSDEEP:	96:O9zRsKYxI0vs+LlASLVja6nCnuvM4MwrzuErZ7wSPK6yWS1PRSvEa9:yzRyx/HWSLVja6CukszXSSV5S1MF
MD5:	7F1DF3F447BD06397BA8B67917A464A5
SHA1:	B72EBE2A9C0D98ABBD12BC54BE0D780F9620E896
SHA-256:	EE8E66EE7624ACB6B483E8DAB6FAD4507554E3D62008BFCBB64AFBF0B05835BA
SHA-512:	FD347BCC1CEA627C2C657F8ECE3045A9817A9591D420AFF5568B87B1E8E43FD12B84298B01143A78511DE3A57650E1E475480678B879C18E91A7BC6D77C91187
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~loader.TweetCurationActionMenu~bundle.RichTextCompose.3213391a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~loader.TweetCurationActionMenu~bundle.RichTextCompose","icons/IconPersonCheckmarkStroke-js","icons/IconVerifiedStroke-js"],{58355:(e,t,i)=>{i.d(t,{Z:()=>M});var l=i(7896),o=(i(6886),i(2784)),n=i(4642),s=i(12408),a=i(25686),c=i(82392),r=i(27519),d=i(29496),m=i(73186),u=i(45184),b=i.n(u),p=i(68117),h=i(40685),v=i(64929),f=i(8501),w=i(35102),y=i(1815),g=i(48501),k=i(96014);const I=b().g6185a9e,Z=b().i00051cc,_=b().baffe39a,C=b().i9000126,E=b().dcaede8a,T=b().ad85cd2e,x=b().f19e4bfc,R=b().bf994ab2,z=b().e7b4b30a,B=b().cfd2f35e,S=m.default.create((e=>({root:{flexDirection:"column",paddingTop:e.spaces.space16,paddingBottom:e.spaces.space4,borderRadius:e.borderRadii.xLarge},popover:{maxWidth:5*e.spacesPx.space64},modal:{borderRadius:e.borderRadii.none},title:{flexDirection:"column",paddingHorizontal:e.spaces.space16,marginBottom:e.spaces.space12},menuRow:{flexDire

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39773), with no line terminators
Category:	downloaded
Size (bytes):	39773
Entropy (8bit):	5.402135522543525
Encrypted:	false
SSDEEP:	768:BdcaV/pfglt/tP5tDaSucFXX9i4sLd6clC:BWaV/M/t/h9i4sh6wC
MD5:	0F107A0E7753AA69CD07DED21852408C
SHA1:	CB933D8A2AD54DC5538C4D0C5EE4C2D3BE77484C
SHA-256:	FF15AC47504BB557006756AABA7DC0EADCF935F9633390F379405085D9F85DE8
SHA-512:	0122AD67A455A6715F3F3B874C6F2C5A509C9E8055E66EE44B296E28AAE50A3826D22F1B2D70F050A2785ACBB80A50770312B8B801585F7FBD2EFFD203ABF983
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16576/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16576_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16576_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16576_a(a)}}var sync16576_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16576_c; if("function"==typeof Object.setPrototypeOf)sync16576_c=Object.setPrototypeOf;else{var sync16576_d;a:{var sync16576_ba={Sa:!0}

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	310033
Entropy (8bit):	5.286039764424621
Encrypted:	false
SSDEEP:	6144:k8PBgjSbk4DuP90q1/HaN5ztYkm3YBDcNM:k8PaSbk4DuPx1PaN5t7Dcy
MD5:	3B8EDE3AC6FACCA086F5AB97663513EB
SHA1:	DC1C34295EFCA19FA07320A9B7A9B21BAB6D661F
SHA-256:	0513A2230781B12F01A52AA25169CB9D09BE5968F5F0AFA4D69A818B239F34DD
SHA-512:	732E47A1F9890A47525F83214E0B8AB1D87FC14DFF843608BE3246CB36BD73FB65850C0066D3EFB726ED2CDD8AAF1E66B2493EEDBCBEDA05DCA3ABAA850790EB
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.506.1519 - 2024-05-06 15:19:52 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};function e(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function o(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(o.prototype=n.prototype,new o)}var n=function(){return n=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},n.apply(this,arguments)};function o(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73754
Entropy (8bit):	5.385997270186659
Encrypted:	false
SSDEEP:	1536:ZOr55MtTl4rfO+k7PWJDm6FdNjatSKiCv4qre35hN:4LOhPdtwL5n
MD5:	F711AA74639DA74F03A06104C97BB00A
SHA1:	179CA5B4D9D4354DB50D7AF5DF7FCEF3A8464E40
SHA-256:	49B036DC94762849B92B42DC4DF02447B11DA8B8DEB9F4230E68EFA678656233
SHA-512:	657F5A9FC05807032FCE3FE911543A056445836E6A4FF3E274478B052636808D0C50CF2E127A01EEF74EDC34C4B9B155FA47775C04A737B99BE4CBAA0C258220
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/ab5/libs/prebid/avpb8.48.0a6.js
Preview:	/! License information is available at LICENSE.txt /(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[162],{7695:function(e,r,t){"use strict";t.r(r),t.d(r,{spec:function(){return d}});var n=t(2623),i=t(3802),a=t(4953),o=t(5740),s=t(5992),d={code:"bidscube",supportedMediaTypes:[o.Mk,o.pX,o.B5],isBidRequestValid:function(e){return Boolean(e.bidId&&e.params&&!isNaN(parseInt(e.params.placementId)))},buildRequests:function(e){e=(e=(0,s.lY)(e))\|\|[];var r=window;try{window.top.location.toString(),r=window.top}catch(e){}for(var t=(0,i.bM)(),n=[],a=0;a<e.length;a++){var d=e[a];n.push({placementId:d.params.placementId,bidId:d.bidId,traffic:d.params.traffic\|\|o.Mk,allParams:JSON.stringify(d)})}return{method:"POST",url:"https://supply.bidscube.com/?c=o&m=multi",data:{deviceWidth:r.screen.width,deviceHeight:r.screen.height,language:navigator&&navigator.language?navigator.language:"",secure:+("https:"===t.protocol),host:t.hostname,page:t.pathname,placements:n}}},interpr

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (907)
Category:	downloaded
Size (bytes):	1044
Entropy (8bit):	5.244793946040909
Encrypted:	false
SSDEEP:	24:iWGKfWGE2sn97fdCF6nxiW+4nNAravajwXyA4jrAYXQaWOLm:iIRs97f46cW1nNZajVLj0UWOq
MD5:	5EB9437199BA27C5421DE23FD34AB03B
SHA1:	9EA3734BE99E4D75541A60C465759681B920F9A8
SHA-256:	18A357AA70A831B85C580B5227910B330B4C736DC3D7723029208939A9685A97
SHA-512:	9015FFE6FDC86EEE4EC57EC64CC96F90901AEE8D3910360D784E27E9CBEAD5BE05B37B8CABB5086113094885C440B867EFDEC4CBC65EC92D7994E40E2F783440
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.richScribeAction.a8dd068a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.richScribeAction"],{21906:(e,i,t)=>{t.r(i),t.d(i,{richScribeAction:()=>u,richScribeFlushImmediate:()=>p});var r=t(53223),s=t(15579),c=t(76275),n=t(62854),d=t(16657);const o=[],m=Object.freeze({}),u=(e,i=m)=>(t,s,{scribe:c})=>{const n=s(),d=Array.isArray(i.items)?(0,r.Z)(i.items.map((e=>a(e,n)))):o,m={...i,items:d};c.log(e,m)},p=()=>(e,i,{scribe:t})=>{t.flushImmediate()},l=e=>{if(e.disclosure_type&&e.impression_id)return{disclosure_type:e.disclosure_type,impression_id:e.impression_id}},a=(e,i)=>{if(!e.id)return e;switch(e.item_type){case s.Z.ItemType.USER:{const t=d.ZP.select(i,e.id),r=l(e);return t?{...e,...c.Z.getUserItem(t,r)}:e}case s.Z.ItemType.TWEET:{const t=n.Z.selectHydrated(i,e.id),r=l(e);return t?{...e,...c.Z.getTweetItem(t,r,void 0,void 0,e)}:null}default:return e}}}}]);.//# sourceMappingURL=https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	355202
Entropy (8bit):	5.315909742593482
Encrypted:	false
SSDEEP:	3072:qv2nFOvROfNp0TwkbEOcljqBPTbjxkUR8mcnigXsF0E+HS1jGw/0C6y:yOgvROfgQOcljwPTPxkUR8jCFGw/wy
MD5:	713B48A4B24EB500610D523352B6EBE1
SHA1:	7F24D93065DFCA4A69EE7BEDBDEE359E1CFCE6F3
SHA-256:	AAD0200D4C7F34AA252CF62980C043B0D8C7481C940C79018ACE2A32E6F49BE1
SHA-512:	510AF5CAD30EA53704ADFF8F80226387A35F07B27D34783AC37ECA959DD6D848662206F6EB9C2BECD4D9E08DAE3AF9B9AD547E44313D67F4824840C34B3FBAC3
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/libs/prebid/avpb8.48.0.js
Preview:	/! License information is available at LICENSE.txt /(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[814],{9039:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return pd}});var r,i,o=n(885),a=n(2623),u=n(3802),c=n(265),s=n(6475),d=n(4942),f=n(7896),l=n(5992),p=n(4234),v=n(8087),g=n(5644),h=n(4030),m=n(8528),y=n(5740),b=n(9823),w=n(6283),O=(0,w.z3)("sync",(function(e){return'!function(){"use strict";window.render=function({ad:d,adUrl:i,width:n,height:e},{mkFrame:o},r){if(!d&&!i)throw{reason:"noAd",message:"Missing ad markup or URL"};{const t=r.document,s={width:n,height:e};i&&!d?s.src=i:s.srcdoc=d,t.body.appendChild(o(t,s))}}}();'})),I=(r={},function(e){var t=O(e);return r.hasOwnProperty(t)\|\|(r[t]=new b.Z((function(e){var n=(0,u.$u)();n.srcdoc="<script>".concat(t,"<\/script>"),n.onload=function(){return e(n.contentWindow.render)},document.body.appendChild(n)}))),r[t]}),S=p.FP.AD_RENDER_FAILED,E=p.FP.AD_RENDER_SUCCEEDED,A=p.FP.STALE_RENDER,C=

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (646)
Category:	downloaded
Size (bytes):	56598
Entropy (8bit):	5.387402790462572
Encrypted:	false
SSDEEP:	1536:xmJGR4muNKBZ2ZAgkem5PigoFtLlj+KguMp8+TSIKNeJdqWWWbnMNnCn0doH69:Y5tLlr+HLaz9
MD5:	09CBE8BC81A16AA97F13458C21729605
SHA1:	8DF75EE38216E4B6103B1D546214350CCA9F3D18
SHA-256:	9E3330F7150E6EE9FCDBB58E20C7037B64CB785B0D575AAA3B222CF9943BB2C1
SHA-512:	1AC2EBBFE2A4103124A23FD84D01E6B2F532B8420DBC9714BA054B68E928CCCD7BA6741F80EC9E1765EF1E8D160741458CF1C3A45115433B8F4F69829018C3EF
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/c/4575/cc_af.js
Preview:	(function(){var ccJs=function(options){var mode="BCP";var useFPC=false;var includeReferrer=false;var runOptimusOnly=false;var cmp={daisybit:null,wait:250,done:0,start:0};var baseDomain=".crwdcntrl.net";var validPrefix=["bcp","cn"];var bcpDomainPrefix="bcp",async_props={async:false,asyncBehaviors:{},asyncOpportunityIds:[],asyncOpportunities:[]},behaviors={},bcpd_callback=null,consentSetCB=null,consentGetCB=null,pv="pv\x3dy",dobcp=false,placementOpps={p:[],pt:[]};var domain=document.domain,test=false,.sep="/",delim="/",autoFire=false;var _cc_testCkeName="_cc_cc";var _cc_testCkeVal="ctst";var referrer;var _cc_idCkeName="_cc_id";var client,bcpClient;client=bcpClient=4575;var actualClient={id:4575,useFirstPartyDomain:"NEVER",domainPrefix:"",cookieDomain:"",cookieDomainIDN:""};function setCMPWait(waitMs){cmp.wait=waitMs}function setTest(testOn){if(typeof testOn!="undefined"&&(testOn==true\|\|testOn==false))test=testOn}function parseQueryStringToParameters(doc){var qs=parseQuery(running.src.rep

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/t_match?tdid=264441c2-0e4b-4098-920f-1c8a6b45a578&id=AU1D-0100-001716532054-VWROEXDT-D1CK
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1805)
Category:	downloaded
Size (bytes):	2028
Entropy (8bit):	5.232314745230827
Encrypted:	false
SSDEEP:	48:iIKf5ayl5tuYtvVMzWYdofh8uf3CP1ZmF1Wmsf5s:OHl5tuYtvVMqYdofh8uf3CtZy1a6
MD5:	9534A7CFBA9DD13671AB5CBE7CB07427
SHA1:	15BA8CAD46939440C39B0A8665AA22C3B629AE7B
SHA-256:	1BC2D5F423F2C85A79AC98B474A24094D61E19C49634F29A3438370C1B0F1A3A
SHA-512:	3373AC0461C6A64BA37D4682A1A77AE37A684119AD94D5AA47BF67C2EA36069B21F524DAEF5C7D28E3C875BF9B49FCB796A297720C241AB478ADB1728280ECA2
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundl.33886b5a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Birdwatch~bundle.BookmarkFolders~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundl"],{831:(e,t,r)=>{r.d(t,{Z:()=>b});r(6886);var o=r(2784),n=r(33991),s=r(45184),c=r.n(s),d=r(72983),a=r(36873),l=r(23335),h=r(92160);const i=(e,{module:t})=>t.selectFetchStatus(e),m=(e,{module:t})=>t.selectItems(e),u=(0,h.Z)().propsFromState((e=>({fetchStatus:i,items:m}))).propsFromActions((({module:e})=>({createLocalApiErrorHandler:(0,l.zr)("SLICES_TIMELINE"),fetch:e.fetch,fetchIfNeeded:e.fetchIfNeeded,fetchBottom:e.fetchBottom}))),p=c().i9028824,f=e=>e,E=e=>t=>e(t.item);class _ extends o.Component{constructor(...e){super(...e),this._render=()=>{const{footer:e,items:t,noItemsRenderer:r,numColumns:s,onScrollEnd:c,renderer:d,withoutHeadroom:l}=this.props;return!t\|\|s<1?null:1===s?o.createElement(a.Z,{cacheKey:"sliceTimeline",footer:e,identityFunction:f,items:t,noItemsRendere

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48645)
Category:	downloaded
Size (bytes):	798946
Entropy (8bit):	5.541714557447036
Encrypted:	false
SSDEEP:	6144:tlzowV+YIL1puU92JOMSJOwaZ91vdT7AXj1gosrzqqCuACdPw842zNWU6/Xlbgef:r41pudtSJZaT1ZegojqC+2uimA
MD5:	3DAC31B5B9EA8983DB80BD4EB5FB908C
SHA1:	A3319760B3B0B5A25FC4461048173B2D38CDE88D
SHA-256:	92E3E95C183F2B71A02A5289A069CB97DC194456B7FBE537C12FF9B7B5B06692
SHA-512:	AC4B141A148B2816205ABCD0FE3B3395E9F69B5E453827C207EC185633042844F22AA7E4D24C05E140E41D1273D0AACDD710C2A0EFE3CB33256967ABE1682B5A
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html
Preview:	<!DOCTYPE html>.<html class="ima-sdk-frame">. <head>. <title></title>. <style type="text/css">.videoAdUiActionCta{position:absolute;bottom:30px;-webkit-box-sizing:border-box;box-sizing:border-box;padding:5px;max-width:75%}.uac-android-on-3p-instream.videoAdUiActionCta,.uac-ios-on-3p-instream.videoAdUiActionCta{background:linear-gradient(to top,rgba(0,0,0,0),rgba(0,0,0,.4) 100%);bottom:unset;max-width:100%;padding:12px;top:0;width:100%}.newProgressBarVariant .videoAdUiActionCta{bottom:46px}.videoAdUiActionCtaInset{font-family:arial,sans-serif;font-weight:500;font-size:16px;background:white;display:-webkit-box;display:-moz-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-ms-flex-direction:row;-webkit-flex-direction:row;flex-direction:row;-webkit-border-radius:8px;-moz-border-radius:8px;border-radius:8px;-webkit-box-shadow:0 1px 3px rgba(60,64,67,.5);-moz-box-shadow:0 1px 3px rgba(60,64,67,.5);box-shadow:0 1px 3px rgba(60,64,67,.5);overflow:hidden;height:50px;pointer-even

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15935)
Category:	downloaded
Size (bytes):	227210
Entropy (8bit):	5.334335164381902
Encrypted:	false
SSDEEP:	3072:37CVo5X6kjnVT54GkdFxXdD4NqkMlVN561AWGagFTpw7:37CVo57VT5GdFxzZVN5Y
MD5:	5BD44E6F56BAE2B2AD81EA5A01D8FDB5
SHA1:	0EA381A5B0DA868606E6A10B90D7A36DBF4EC44B
SHA-256:	3B7B4059B01D84540D7796B06C2D0370821B256EA34C73C68D16335ABA3195F3
SHA-512:	6F9638B101661454773070D99ABD4A805B8FE46362F47FFBF59C89D9081D1AA4786898AB9B2401D4605E1DDE614C5645AA93C0818914CC7FA799BC41DF24AD92
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iQKq4/yd/l/en_GB/WQi3ReCvl_cy3pIRPu4YPhvr8ihReOCEmAW87EauwWUrP7BQ0kwbXc8xvhYhGLwC4ore_n_-6Ib1B_Sou4hbknqlurPnDHEYs9_zW39xstWYoIfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedUnitSetDebugInfoContextProvider.react",["CometFeedUnitDebugInfoState","CometFeedUnitSetDebugInfoContext","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d("react")),j=h.useCallback;function a(a){var b=a.children,e=a.location;a=j(function(a,b){return d("CometFeedUnitDebugInfoState").addFeedUnitDebugInfo(e,a,b)},[e]);return i.jsx(c("CometFeedUnitSetDebugInfoContext").Provider,{value:a,children:b})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);.__d("ProfileCometAd4AdSectionMutation_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6645181398894193"}),null);.__d("ProfileCometAd4AdSectionMutation.graphql",["ProfileCometAd4AdSectionMutation_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"profile_ad4ad_opt_out",storageKey:null}];return{fragment:{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAd4AdSectionMutation",select

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1827)
Category:	downloaded
Size (bytes):	40681
Entropy (8bit):	5.452204838848066
Encrypted:	false
SSDEEP:	768:zikT9DDFcrL9p41hsu5MoYABAra0X0J1M:z3T9/CrL8t5oABArNX8a
MD5:	A77D300172087E46CA2CC984D8ED97A9
SHA1:	E947E32666D3E94A11F63162CDBEB1B7BCF15947
SHA-256:	85C2482D46FB7F52FAF4545C1694750D5B5C56D987D3E4E34F5A45CA2C15A992
SHA-512:	2B312A56589F66C29C35A058506CB9A1B6245AB2D3D32FFB006A544E2FEA060CEDAD43E57BB4C2822FEF76657B82A90569EA83EA16FEAD6575031624961AEE19
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/vpaid_adapter.js?adtagurl=https://pubads.g.doubleclick.net/gampad/ads%3Fiu%3D/22876227373/Admixer_oRTB_VAST_T1%26description_url%3D%7Bdomain%7D%26tfcd%3D0%26npa%3D0%26sz%3D1x1%257C250x300%257C300x250%257C300x600%257C320x480%257C400x300%257C480x320%257C600x300%257C600x600%257C640x360%257C640x480%257C720x1280%257C720x1560%257C720x1600%257C729x1280%257C768x1024%257C960x540%257C970x250%257C1024x768%257C1080x1080%257C1080x2220%257C1200x628%257C1280x720%257C1920x800%26gdfp_req%3D1%26output%3Dvast%26unviewed_position_start%3D1%26env%3Dvp%26vpos%3Dpreroll%26vpmute%3D0%26vpa%3Dauto%26type%3Djs%26vad_type%3Dlinear%26url%3D%7Bdomain%7D%26channel%3Dvastadp
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},n="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),q=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&n(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,h){this.g=f;n(this,"description",{configurable:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){i

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2505816846940266&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1343627374&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053582&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=3993967163031640&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td35_tt18_pd35_la35000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts1_eb16619
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65295), with no line terminators
Category:	downloaded
Size (bytes):	438474
Entropy (8bit):	5.190656282413574
Encrypted:	false
SSDEEP:	3072:a2i1vrReF/HB6sl/qncYIBXBwzlyxkZmwUQ27ZGh3ecz8K/kHoBGqwxS2dChX8ot:y+pJvxkZm227ZGh3HSMAlcvHqZhn2Cw
MD5:	8F097EDC2A30104B828CF0579D2853B4
SHA1:	836AF53DA6297374D594A3E41D514C3D7DE766D2
SHA-256:	822E59F63F15DF5B8FA7A8C0ACEC923A597D116217FA83BEFD6986B575619DB5
SHA-512:	60AE4584072AA543AF740A027D87E697502A0F8B95552A7732DAF9141D090C14474B75DFAF84004D6DD7FFE88EB50F9ACA3136A0B0EE1616512FEAFABD6AC0FB
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/i18n/en.3567814a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["i18n/en"],{17346:(e,t,o)=>{var a=o(79404)._register("en",{get emoji(){return o.e("i18n/emoji-en").then(o.t.bind(o,20747,23))}});function n(e,t,o){return"one"==(a=e,n=!String(a).split(".")[1],1==a&&n?"one":"other")?t:o;var a,n}a("c39b0e24","X"),a("ac0d27be","Sorry, this account has been suspended."),a("bcee7444","Account update failed."),a("e0cbf77a","Add phone"),a("f377195c","X is over capacity. Please wait a few moments then try again."),a("d67f9456","You have been blocked from performing this action."),a("e0ece1b6","Cannot attach media, try re-uploading."),a("i82e8f04","To protect our users from spam and other malicious activity, this account is temporarily blocked from following additional accounts. Please make sure you understand the X Rules."),a("jf7be47a","To protect our users from spam and other malicious activity, this account is temporarily blocked from sending posts. P

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20528, version 1.0
Category:	downloaded
Size (bytes):	20528
Entropy (8bit):	7.9918762506517345
Encrypted:	true
SSDEEP:	384:wIv7Hmr4N/rKEYdZfzL9fnLOLBqVbDtoEJK4zXYjr0zZ:wIv7HmEFrKNdZfzLJQB4bDj8M40zZ
MD5:	04CA72BD569636B918E93B04F663A196
SHA1:	9E12248C8DFB7B2315FB1A856015AEBDD440E2FC
SHA-256:	7D04F2CD8792432943D7C73C9B2173B3FAEE45ECD9334AD6A9812729B88AA69A
SHA-512:	2BAB9A0BFBE1434ACE7C7BB20B523EA1B0A160E46B9F7F26B9D283715851969CE8DCBA31671E93E42FDE9503E78A519D61342B4F16EEFB1ABB44A8EA78E76926
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXQ-oA.woff2
Preview:	wOF2......P0.......$..O...........................4...2..0.`..J........j.....6.$.... ..l.........2\|.....9....`....[..JH... ....?...C...........:L...C7t...v....Ew....7#NF.....7q.DG....S.....h....I...:....&5.....?..{..BPF..PG.X..d.5FH. ..l..E`.2F.u...?........ddV.2C.m.2....s.s....x..G.`.....V..4(.............X.6>..7...F`.A.%.2K2~..`.;..P.x...2MqE. ...F........Vi...g....>4...C..%Y...R.k....O..c.=..,$......=j.Z..!.)......6..3..(H. \.R...H%....c.z..\._.{U...^m.r...^D..\|..{f....l.[......(..OF0}.'. URzr.{....k..v....TZ..j`....:...."......l./......f.....^^.u.t _. ...s...d......o..a.5s.....d.#.jO...D......._7.51.......=X.+.>...2@EsM9.im....9+..v..g8X8.!.X.-....0WL..)..T].2%p.+..e.6..Y.[.%Z.0.......V.a..OhEH.E......O.g.w.8./.../.0..m:{.I...g.@.>.......,..E..m....l..-w).o......N.;.P.mCW..7...Q..r.J.z.BWU}E.Oo6..a@U.Gd...46....2;o.^..:(G..G......:.k..l..P.=cO....'Sg.Iu..f`_B....D....p..;...;.....UuTEDTD.EE..1"....l+R.XZ'...y....~.e..A....Hl..Pl....E.\|X.

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	147018
Entropy (8bit):	7.9964070140701855
Encrypted:	true
SSDEEP:	3072:Ozv8N4o4uPIUifCBYkt3J7eNi8FhHf/MQmq0ciLgeCPLo1:Ozv8N4onBiiF7IxzH2MilCPLY
MD5:	9499C188D839CC78D43CEA91CE748A7D
SHA1:	5376688C66F3A8AB5B535F055B7C038A8EC51546
SHA-256:	8EB6D239604B4BA9E8D1C48B532515B4ADFCC439619848F69E4662E99A91335D
SHA-512:	13D3EE8A52C5962FA552EE09DBE2317D241CD78DCD5441D1CBEAD4B569C103404D142FAF5701B6BD0F0437F4D0825591E85F7487BBDBD0009227423822879D30
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/2024election-768x403.png
Preview:	RIFFB>..WEBPVP8L5>../..d...9.$ERVW.1..y..^..3...$...6O,.....t..v-.K....%.n..I2%)s...E...[..G66.......]...05....0...x.i......B..(D...`4..1...x.@.!..s..J.?...QE..@!...Q.....@..5#.`..?.2.u.t...K..,gs.,.........a..C.I.1....L<+N..4.c.v.e.$5..ha....;.pr...p.).M.i.U.......s^UZ....u...h..It.T^.. '.On..r48..u.C.3"..Zx...ps. ...Q..82S..L.1T.]...(9tq..&..L..OP.hkJ.%J.E...U..S..[a2....N.....;<....^X...b.b+.Unma....l.XY.E.......t.bA.....5.FCtT....X...g1..r..F>....KC].....m8m.I...*..c.9.@......B..C..JVa.3aa)80.X..Q..98...m.oq4.`.......w......+...T..\\.l.3.3t.......!................Nz...0sW..@.?.v.t"....N..$.`f....BB...{o .....}'3s.{#....&....7..^.........z3...1.ofVUe.{...x.9]. ....."......"Nw..MwC.9.]...W..P..FR..g$.L.(..qif6.6..i.}\S.@...9KM..-..HB.V..P.<.sx....^6.d..oP=.{........."......m..B...P.. ..\|y..Z{....&i.W...`.....DE......?v....cX......H....B....=..q........v../..9....z.k..S..&.$. ....e.r.Z..<..6..u.Lk$QM..5... .$.....3..)...[...

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.491449079242087
Encrypted:	false
SSDEEP:	12:t41Wff2P/wZ9LEEtF2NOtlx77G5TwWidgStLkBtYheF8:t414f2nUpEEtFIOtWTniy+ESht
MD5:	289673858E06DFA2E0E3A7EE610C3A30
SHA1:	8D54D46B87AB85A62CBB6CCC0E1A992D99A891D5
SHA-256:	03382AC2FD7FE0D58AE2F81964B332BD34DFC9CC5145A10E61CB5E776AEF5E2B
SHA-512:	E692D82EA26D706FF3C078D1FBBC8BE9B4045BD62A1DFC76B4FA92FD4FA37FC47309BD60E784D4B9DE82653B1F62EA8AF4196CFB2E94BF3F8654C5D33B08F63D
Malicious:	false
Reputation:	low
URL:	https://abs-0.twimg.com/emoji/v2/svg/26a0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFCC4D" d="M2.653 35C.811 35-.001 33.662.847 32.027L16.456 1.972c.849-1.635 2.238-1.635 3.087 0l15.609 30.056c.85 1.634.037 2.972-1.805 2.972H2.653z"/><path fill="#231F20" d="M15.583 28.953c0-1.333 1.085-2.418 2.419-2.418 1.333 0 2.418 1.085 2.418 2.418 0 1.334-1.086 2.419-2.418 2.419-1.334 0-2.419-1.085-2.419-2.419zm.186-18.293c0-1.302.961-2.108 2.232-2.108 1.241 0 2.233.837 2.233 2.108v11.938c0 1.271-.992 2.108-2.233 2.108-1.271 0-2.232-.807-2.232-2.108V10.66z"/></svg>

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/c/579/1129/0/9.gif?puid=Mfm5DWu5r7XL&gdpr=0&gdpr_consent=&ev=1&pid=558355
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=8792414088104974232/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	26511
Entropy (8bit):	5.4797044224330484
Encrypted:	false
SSDEEP:	384:4NROMGOBIDe4e1YeHBO/OlJaO4U0hfn1x0SIxoC/OfbrFNmgu:0amIq43AB235hdxcx/grT5u
MD5:	101D44B8696DAEC730F934AA617D1604
SHA1:	828C555894A42B11A02ABEA25A8D02AE5D07323E
SHA-256:	6FD037CB39481827EB1F0B36A88A2B0FC5F49A533C52C3D8BA25E3080766FBF2
SHA-512:	88EC668A819A32473BAA42C5AC7ABAC4DCFCC5E9FA367F31FC396DB0B8C57D35A9AE9556418CB60D9CE3C60E02854AFADADF6C5E00B780992C8B81E4EE06B405
Malicious:	false
Reputation:	low
Preview:	{"data": {"trackers": [{"url":"https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east", "e": "sync", "pr": "5", "t":3},{"url":"https://ads.stickyadstv.com/user-matching?id=3655&_fw_gdpr=0&_fw_gdpr_consent=&gpp=&gpp_sid=", "e": "sync", "pr": "9", "t":3},{"url":"https://ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=", "e": "sync", "pr": "9", "t":3},{"url":"https://ssp.disqus.com/redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D52%26key%3DBUYERUID", "e": "sync", "pr": "52", "t":3},{"url":"https://u.openx.net/w/1.0/cm?id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D", "e": "sync", "pr": "23", "t":3},{"url":"https://pixel-sync.sitescout.com/dmp/pixelSync?nid=136&gdpr=0&gdpr_consen

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.620151695116031
Encrypted:	false
SSDEEP:	3:YJH//xrvuEKSYjn:YJ//xrmhrjn
MD5:	92C06FECEC559082549182F41AD67722
SHA1:	886BAD5C843643B473FC39C9B44845074A4842D1
SHA-256:	4BC2C39798DC4F21F41A3E8652003271F85C90DE5D678F2AD73A41F09EA5C01C
SHA-512:	175BD15678AA76FAD0F88E591D39A9FAD0F14589DB48CBBA811E48799CC153723180BA9DA3D153C0F4D1C4F0E609C96280BD9A6EAE51B511F6EB517FA3EF61E1
Malicious:	false
Reputation:	low
Preview:	{"lb":"mcHCYNFlTKngJ+9EAQaD9w=="}

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2537)
Category:	downloaded
Size (bytes):	2760
Entropy (8bit):	5.2973208126731555
Encrypted:	false
SSDEEP:	48:iIy6slGK2XBx4HlMFHMG0hKjV7WkuqJmrMFAjftATEWmE6cG:m6slGK2XzQEHMBI57WFqJmgArtATEC6L
MD5:	BB566367D759CDDEC36D2755E15679ED
SHA1:	0DBF0F383C6C1C3CA830EA1B9C63146BF31781C5
SHA-256:	9C46CDFFB59760378CABB81A9766D2428AD6BC989EDC267509DA3ECEB1BFA437
SHA-512:	EB3149749F2699174D80A45E4CB60942B815FC7A274403BD83C693635D62DBA8B2FA129A989FA1D5666E629A187E9DC9F9C441DAC2413B69CB583AE62BA8538F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.AccountVerification~bundle.SettingsProfil.640c6eba.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.AccountVerification~bundle.SettingsProfil"],{25440:(e,t,r)=>{r.d(t,{Z:()=>v,h:()=>D});var a=r(7896),s=r(2784),n=r(34788),o=r(73186),c=r(45184),i=r.n(c),d=r(74581),l=r(51171),p=r(455);const h="fileInput",u=i().b9960f32,g=s.createElement(d.default,null),D=({acceptGifs:e,acceptImages:t=!0,acceptVideo:r})=>(t?l.v5:[]).concat(e?[l.Re]:[]).concat(r?p.jn:[]);class f extends s.PureComponent{render(){const{acceptGifs:e,acceptImages:t,acceptVideo:r,customMimeTypes:o,icon:c,style:i,withIcon:d,...l}=this.props,p=D({acceptGifs:e,acceptImages:t,acceptVideo:r}).concat(o).join(",");return s.createElement(n.Z,(0,a.Z)({},l,{accept:p,icon:d?c:void 0,style:[_.root,i],testID:h}))}}f.defaultProps={acceptGifs:!0,acceptImages:!0,acceptVideo:!0,customMimeTypes:[],"aria-label":u,icon:g,size:"medium",withIcon:!0};const _=o.default.create(

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4349)
Category:	downloaded
Size (bytes):	4508
Entropy (8bit):	5.333632229890744
Encrypted:	false
SSDEEP:	96:aBv2TiZ0sfmwbyKOwPuka+3E43imNGKAVeIuiypwGksItTED2z:aBv2S3L7dlGKgeNiy69/
MD5:	485CB9681DB76F0802CC42627E850ADF
SHA1:	1E04EC16795487DD7C57B9769224CC8AE6A91671
SHA-256:	3561CABCC7C35D075DB6F077A0DC9048AFB9297153B46BD23D3E2D1174762674
SHA-512:	C45B31A91AEBD5B0B444C054DA938ED6C9F0F6FFC0D4B43F6927EECC9AEB23B1CB6868584F04086EEBA38613E54FBC58A1F90337295394B3F6504290801ACC1C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~bundle.LoggedOutHome.6c85509a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~bundle.LoggedOutHome"],{7604:(e,t,n)=>{n.d(t,{Z:()=>s});n(6886);var o=n(2784),r=n(7267),a=n(54987),i=n(54882),c=n(67304);function l(e){return!["/i/flow/login"].includes(e)}const s=(0,i.Z)((function(e={hideCookieBannerPicker:!1}){const t=function(){const e=(0,r.TH)(),[t,n]=o.useState((()=>l(e.pathname)));return o.useEffect((()=>{n(l(e.pathname))}),[n,e]),t}();return!e.hideCookieBannerPicker&&t?o.createElement(a.Z,null,o.createElement(c.Z,null)):null}))},67304:(e,t,n)=>{n.d(t,{Z:()=>D});var o=n(2784),r=n(1477),a=n(39466),i=n(48501),c=(n(6886),n(25686)),l=n(69263),s=n(82392),u=n(94917),d=n(29496),m=n(73186),p=n(45184),f=n.n(p),w=n(60673),b=n(3670),g=n(85665);const h=f().d8817e36,k=f().b9288ee6,E=f().i1390ec2,C=(0,l.ju)("https://help.x.com/rules-and-policies/twitter-cookies");function x(){const e=o.createElement(f().I18NFormatMessage,{$i18n:"e4af7661"},o.cre

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1591)
Category:	downloaded
Size (bytes):	1814
Entropy (8bit):	5.339344171315533
Encrypted:	false
SSDEEP:	48:iIyfDJgEM9DxpGDEKRZ+EjvfbVG5xV1vGWmEfDJx:mf+EM/pGjiEjHbgACfX
MD5:	DB508D373CA330C7538E2250EC4141AD
SHA1:	36A0DC771AD9FC164718EC8864A3385D2B281DFD
SHA-256:	CE90A35D3BD5250EC89E7B32A327F55C8F1B39909E52BD7ACA156E0621F3DA94
SHA-512:	CD8648CD794DB388BAF02B297E32E50754F9710537B9F33F18FBF91E6E12E7D2A2B198A02DC1314FCF194007C1B89D3D3A8D69E00A216CCC9A58A12A86233EE6
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserLists~bundle..b83d24da.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Compose~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.UserLists~bundle."],{74560:(e,t,n)=>{n.d(t,{Z:()=>Z});var o=n(2784),r=n(25686),s=n(23507),a=n(73186),c=n(45184),l=n.n(c),i=n(37796),d=n(67935),u=n(16657);const p=l().aacfbe55,m=l().ga8627cd,g=l().e6d2573f,b=l().d37a3e15,Z=e=>{const{isReply:t,style:n,type:a}=e,c=(0,i.v9)(d.Lz),l=(0,i.v9)(u.ZP.selectViewerUser),Z=c?null==l?void 0:l.screen_name:void 0,v=o.useMemo((()=>[f.root,n]),[n]);let w=p({screenName:Z});return"Tweet"===a&&t?w=m({screenName:Z}):"DM"===a?w=g({screenName:Z}):"List"===a&&(w=b({screenName:Z})),Z?o.createElement(r.Z,{style:v},o.createElement(s.Z,{text:w})):null},f=a.default.create((e=>({root:{paddingHorizontal:e.componentDimensions.gutterHorizontal,paddingBottom:e.spaces.space12}})))},29006:(e,t,n)=>{n.d(t,{Z:()=>u});var o=n(7896),r=n(2784),s=n(25686),a=n(82392),c=n(79866),l=

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6756
Entropy (8bit):	4.943823679998798
Encrypted:	false
SSDEEP:	192:Gzlkq+gKr4qpYt0pSjgiJ0MwHa4o+lld/9p6:1qxKr4qSoSjgiJ0XHDhlld/j6
MD5:	AAC18EC46CDFF4E56D77EC8EE1DEC2C1
SHA1:	81F294310D14E041A3E3F58595A33306097DE207
SHA-256:	E13171DD374E3750F9CCFC1B8AFAF4D4BBAA6838C9550FD3ECC9A39D9EA128FB
SHA-512:	C23CF65449B2ADD4BF6689CE5FB7D3904D057FB008E5C5494447872EB4D7450D5A455ADFC32B64894CCC781179CD7E6BB48C8EE4C2F62C271C57ED5349948D53
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYCdD9faj3tiu8Qgg4XqfpsHxhBtrAWUylpJbs6xZuuVxw&oe=66779EE6&_nc_sid=7da55a
Preview:	....KEYF....................@.....1C..1C.."@...A......................................................0.................................................H.......$...(...,.......p.......l......?...?.......B.......B............................(...@...X...p.......0...... ..............................................(...8...<...@...P...............@....r..$....... .....+?..+?8......@@.....1?H.......D....A.A\...........................\|...@................... ...........{.>@q=.A....\.....A......?Aq=.A<........... ...........\...=..@....{.>@........\.....cAt........... .............A........q=.A=..@......?A................ .......4...q=.A..A@.....Aq=.AL...q=.A..cAl.......`.....?Aq=.A............................................ .......H...$..............>..{?.....a.?..u?.a.?...................?..?.......>...................?..?.......>............H.:?H.:?(.....@0....r.@8.......4...]..?\@'A....................$...(...,...4.......t..................c.T.......k.................

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4095)
Category:	downloaded
Size (bytes):	93102
Entropy (8bit):	5.588090693906938
Encrypted:	false
SSDEEP:	1536:y/u+fPrpK/4GUM8Vef/jNoKdHQoKl1ELz6MXEeJf9CuouIHEpZsa3pf4Rouk4xNx:y2irpG4GUPYNHdHQoiCC3ZE9pARlVN4q
MD5:	75E7D1AF380F7A8CC64507FC1DD49653
SHA1:	18D7F370CE785A58EEA320B23DBEFCB15599EB78
SHA-256:	34D25FB828419972A865ADE24E64A26D5CCE3E7666B06508419D1DAB390009CC
SHA-512:	72D246ED7B0395F6C6AA8C199AC0E6B7101DDFDAA035D10A343B5C2FFAB3EC54CC02377AA7E7582A52E464326A1186295A2483349C5632796851CDA428438A90
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202405220101/slotcar_library_fy2021.js?bust=31083940
Preview:	(function(sttc){'use strict';var ca={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var k=this\|\|self;function da(a){a:{var b=["CLOSURE_FLAGS"];for(var c=k,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ea(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function fa(a,b,c){return a.call.apply(a.bind,arguments)} .function ha(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ia(a,b,c){ia=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?fa:ha;return ia.apply(null,arguments)} .function ja(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var d=c.slice();d.push.apply(d,arguments);return a.apply(this,d)}}function n(

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	35554
Entropy (8bit):	7.993399198485169
Encrypted:	true
SSDEEP:	768:tVmSx/bOqvDd2XiIkTFS8P5YsZIpKE09wpzdnyu4CmxsdRhNUA8tq7:twStOw2SIN8YsGpuOpzmIhmHq7
MD5:	B63BCACE3731E74F6C45002DB72B2683
SHA1:	99898168473775A18170ADAD4D313082DA090976
SHA-256:	EA3A8425DCF06DBC9C9BE0CCD2EB6381507DD5AC45E2A685B3A9B1B5D289D085
SHA-512:	D62D4DDDB7EC61EF82D84F93F6303001BA78D16FD727090C9D8326A86AB270F926B338C8164C2721569485663DA88B850C3A6452CCB8B3650C6FA5CE1CE0F140
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/cookies/cookie_info_card_image_3.png
Preview:	.PNG........IHDR...8...........j.....IDATx..].\|\U.?...e&..I..M..).Z.PJ.(.M.-O+..>\|.....n.....\|."..B.+Pi.. ....t.K..I..>.....\|/.$3...LH...r.r.9..........`GJk.;..3,K.......(.tv.b..Z........Z...R.M..}...-...\...4...._n2...;.8....z...r.xi0.4...[...<...,...C...Sy.}..20...L]S}.V.\..Ms.mD%..}.mu..,....B.POw[Q..?....aV...n8.S^.T5U..3.9.4.....;(u..D.p...TY...P+..y^.,......p.E...e;K.%KNj...l....,+....bQ....M$.>..9..x.j&...NR..u..W..{..Z..s........3u.....<.gH..0.]...q.e]...`.94~...F....!.Re~.KQU .+..z...W.z.=_....k..Tii...i..,.L...v..N..X,..jk..94~.....%...z....).BG5+J..W.U.!\|...\IG..,a....Q!.._.2.ZzZ ../s...T......S..Uy.....;bAj.Jv..u..`.e.~..\...l.df.k{zBB.+qWH..!.....d..qh@.t-.N].!.....o?\U.\w..?}.GS{o.HT...1ts.....x.+....===.W.C......y......o..s,#:t.....s...v..'....8.{_.Z..N...K.$..\..~.mmmkh..Y.C......!-kH.UU............\..2hwg,j...T...r.a...4M....C...............\|.......f..9.C...;v...a....g..r5Mw.=`......Q..W.... ....&"..

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14301)
Category:	downloaded
Size (bytes):	14613
Entropy (8bit):	5.420613565921048
Encrypted:	false
SSDEEP:	384:ys9t0S/g8UoDthaNyvhCCVKTKWhKPKiX2BKIQNv+bPKlRCLJT9Kpw:t7/DLDth68X22RR8Tz
MD5:	73930812CBFE166F019D0B20B8305184
SHA1:	427964CED18BA35D1A72BD050BDBAFC449FA70AA
SHA-256:	D3C1D3DFCC906C4CA8FD8EB4C51012202F24A3579C8C61103F515937D84B7CBD
SHA-512:	4F0788561FA7FE0AD5EBD84F72C395D341EEBE4A1192EC8F44712C5F0C6A57C895FAC090DE4CDDBD39A87FAE30C3BC294512F2497CBC0B7516DFF4A45C05C58F
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?origin=publishertag&topUrl=pjnewsletter.com
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.nl3.eu.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.valu

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3
Category:	dropped
Size (bytes):	30132
Entropy (8bit):	7.969483557620218
Encrypted:	false
SSDEEP:	768:p+qtAvuQaC4i5g6B1gxXta5CAPr3QoLBSVVk21agfKCSOgOA0a/QFlUKrs:p+z6C4Et1gxEEAPrAoLBSn1jf69w+
MD5:	621731B0AC9DEBFD941A1AF46D4A1541
SHA1:	BA566057A945C2E7A59774E00932A27E73CF32D4
SHA-256:	F2A96A76FAAC763DB3BE7331003E2A79F81BD564F648502FAB70619773076379
SHA-512:	D1FB287D84CF885ADA5BF58B143108AB535209AAF8227974A2D693B4C8F30935182BEF95D1E6069E73F1FEBDD61771555E8DA9060E8B339F8566289EC051F627
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....'..N...QT....p{....:....@.y.#.N.1..........F..(q..ns.l{..w..4...7p?DGG$.;..\.?Z{$..Q...)...2..2....Q..?.R....th.....\|.Cc.....5S..L.q.H..J...1L\|J...~5(.H.?Z.pE...z..=9..%r.....z.8..U...7..~UdG..0.....hWw..BJ.W#........r.3.t...%r1.k......G,aQ.#...t.;H.W..C2..'j..C.~...."!.`..yx..ji.{x<%%.j....g].....mA..+.@...>....4.m4...5..B`W.....I..oi.;.5..).. W...

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=a9eu&endpoint=eu&gdpr=0
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	15349
Entropy (8bit):	4.603935565784116
Encrypted:	false
SSDEEP:	192:1UuQo0dw880DQu+4jaOd/jXDhYieiz9cZFeKJdmJiKkj3F:hhqp+4O0LtYniZ+YKJdmC3F
MD5:	A801A94F7B6DD98E65950A9EBC5DAD3B
SHA1:	F5358F4C4B2AEE84BFE710F642DB0F60ECE4270F
SHA-256:	2175AD8124E9BCB46467B188EB1E2C04C911B791251E8354FF7D6DC344F4A2BA
SHA-512:	2B966238E4845BC056882938432DAAD383CF6252188E85453C89957F672D3FA9CA9DB5EBBF4A98CFB41E319AE5B8FAA9C9948B041E16BC8C05B7B89BE1039FC2
Malicious:	false
Reputation:	low
URL:	https://player.avplayer.com/script/8.3/v/assets/sprite.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><symbol _="" viewBox="0 0 29 28" id="avp-icon-check-mark"><path stroke="none" d="M11.15 21.27c.26.26.64.43 1.02.43.37 0 .75-.17 1.04-.43L25.7 8.79a1.43 1.43 0 0 0 0-2.06 1.43 1.43 0 0 0-2.06 0L12.17 18.2l-5.33-5.36a1.43 1.43 0 0 0-2.05 0 1.43 1.43 0 0 0 0 2.06l6.36 6.37z" _=""></path></symbol><symbol _="" viewBox="0 0 48 48" id="avp-icon-cross"><path stroke-width="0" d="M26.7 23 43.3 6.4c1-1 1-2.7 0-3.7s-2.7-1-3.7 0L23 19.3 6.4 2.7c-1-1-2.7-1-3.7 0s-1 2.7 0 3.7L19.3 23 2.7 39.6c-1.1 1-1 2.7 0 3.7.5.5 1.2.7 1.9.7.6 0 1.3-.2 1.8-.7L23 26.7l16.6 16.6c.4.5 1.1.7 1.8.7.7.1 1.4-.2 1.9-.7 1-1 1-2.7 0-3.7L26.7 23Z" _=""></path></symbol><symbol fill="none" _="" viewBox="0 0 24 24" id="avp-icon-link"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 5H8.2c-1.1 0-1.7 0-2.1.2a2 2 0 0 0-.9.9C5 6.5 5 7 5 8.2v7.6c0 1.1 0 1.7.2 2.1.2.4.5.7.9.9.4.2 1 .2 2.1.2h7.6c1.1 0 1.7 0 2.1-.2.4-.2.7

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	34560
Entropy (8bit):	5.785748593472812
Encrypted:	false
SSDEEP:	768:J2J8FpAuYBhoLE5P9FAO3N9KQeZKnGEialbUSRfllktGj7KeQbyni:J2J7uYBhoLgP/AgaJ8nMavllQGj73QbD
MD5:	0ADC0D9564D090ABE498AE8DC3746E4F
SHA1:	3FEB317473619F73E41FDDF5F2D56767D59CD308
SHA-256:	61B7EC0CD4189F4BD47025C9776BD50871B7E62DC5C9F7BFD96EC34DD9CBC4BE
SHA-512:	CE240344B67388CAAA6FC6B774D8ADEFBA324B9C52903ED46CEB38F1E143A9E12DDCCF95985E8689558A2E3CB28D934633259353B9E69EF1BD6953CF31A4EA83
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C33.@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6894
Entropy (8bit):	7.975309105478534
Encrypted:	false
SSDEEP:	192:wRznB3D7I5GL90nfbmjE9SzqoGxStZB9u5cOaPau:GdD7I5GL9UmjE9mv/9cEPau
MD5:	0930DF1EF12B19096FF7F738E83AE08C
SHA1:	84E55ABE966DD7F25B457CA413B351251A971BCD
SHA-256:	7449BC01DB7A42D4F1438D96F48EE87E30420063B3FBF19F22260B7C73CF225A
SHA-512:	6C040F35C298FA6B6EB299647C34EF1BECB8BB1DB82B0DA23EC9D0C25FB3261F33B51C8E0DDB37A7FD85D451A8D075C5D67D2447289D642C2E60244AAE7F5710
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .............>.F.J%."..t.A...glV.&....T....r.O...G.4j^..<...Qr..M..>vf`...@y......'U.c.a.7...{._....../..c.....X._\Y..>,Q..&.:.)W...%..OC..6.T@...4............k..2l...].W.........~7.....,Cz..5.....9........a.Z...A......p:..E9P_pj..&.....f.......'LF-b...T.x?A....W........5m....\|...N.v.X.3.o.s...:\...?m..s......\|..t>. ..F....B.;.!..e.K........./...k...D.YAZ.F.....#.....XG..5b...i.b+...@..........C9.xk..#......0..F.V.w.^...o.(t....5.....&Bt...x..{.].^>44@gJ\|..k.&.rj.Z........m..G.S.....eC..TS..#..Ws....O.5bm4#.".p.]..T..'G..Kb.R......9.=.h^.a.U8..K.K.L.H....}.."..}..}.J.9..Ey/...s...}45.H.}O,...0....n...iR.D.T+....D..Mf.....u..-v.i}..y. .I5e........k..uiu.M.v.pt.+...e.,'yG..e..WS.S....&'J.eh..@.O ...z....lD....1.0v~r.7....$Hw....D.a.Z....M!.."."j..\|.....9^&.4-X..m....3....v?Y.c.).D.yA...b.X9.\QtG...Z.20.-.Q..N"..?.dF....$.{.[.Z....z..n.pzh]..-k..:..8..k.rD...d.8.\|..b.z!G.r.o.D.V8....=. ........f>.^.'..w.......{.......e.BO..\......aD.

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540), with no line terminators
Category:	dropped
Size (bytes):	540
Entropy (8bit):	4.609873607644369
Encrypted:	false
SSDEEP:	12:iWRSafoJfAAH/0HR8/JKAX8iyyyyyyyy9/yF5UFWRSy:iWSa7AH2tAvegy
MD5:	BDF58AD49D2344B4D85C7706C1B665A1
SHA1:	1EA9679198192691A541893D169E272213BCF3FB
SHA-256:	3384A801762F8C42DC495D9640CCE005B93B0F328AB34F89E85660E381913320
SHA-512:	70AA3DD34541F3F21B63C2130165818B008C432B157708FD187B83E5B5B9D523486EA1DA5447740602D02AF5F8CF9CD88B41638F4009D55DE93DB1655845F7AE
Malicious:	false
Reputation:	low
Preview:	Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.Long,java.lang.String,java.lang.String,java.util.List<java.lang.String>,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=4426393169609033625/gdpr=0/rand=78790475
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18915)
Category:	downloaded
Size (bytes):	43237
Entropy (8bit):	5.680707641754852
Encrypted:	false
SSDEEP:	768:5RWw2BBHWtPd0h3A4LWhNzrXNAtU9ArbM+AI99yNIE:5QBZWtmw4LqPXNIU9ArbMP
MD5:	A20A57297296210AE55C26306436FCE5
SHA1:	AF8363C369F8FD23868093CE0FF02C8D88C229C0
SHA-256:	2DE52103B1FEEB037AF1757A1D10CB77A335258410AFF50F3CC4B93589357FDB
SHA-512:	E0BD233E5F75ECCC4D5018E1F7A4650D13BDD84D4DDCBB1BF482CB35CC836B85CE146F0A2B41DEA578CECF05FB8E7A6C9B6F28DC79A81801A9898B700860020C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/../*. License: https://www.facebook.com/legal/license/t3hOLs8wlXy/. /.__d("bignumber-js-9.0.1",[],(function(a,b,c,d,e,f){"use strict";b={};var g={exports:b},h;function i(){(function(a){var b,c=/^-?(?:\d+(?:\.\d)?\|\.\d+)(?:e[+-]?\d+)?$/i,d=Math.ceil,e=Math.floor,f="[BigNumber Error] ",i=f+"Number primitive has more than 15 significant digits: ",j=1e14,k=14,l=9007199254740991,m=[1,10,100,1e3,1e4,1e5,1e6,1e7,1e8,1e9,1e10,1e11,1e12,1e13],n=1e7,o=1e9;function p(b){var g,h,x,y=a.prototype={constructor:a,toString:null,valueOf:null},z=new a(1),A=20,B=4,C=-7,D=21,E=-1e7,F=1e7,G=!1,H=1,I=0,J={prefix:"",groupSize:3,secondaryGroupSize:0,groupSeparator:",",decimalSeparator:".",fractionGroupSize:0,fractionGroupSeparator:"\xa0",suffix:""},K="0123456789abcdefghijklmnopqrstuvwxyz";function a(b,d){var f,g,j,m,n,o,p,q,r=this;if(!(r instanceof a))return new a(b,d);if(d==null){if(b&&b._isBigNumber===!0){r.s=b.s;!b.c\|\|b.e>F?r.c=r.e=null:b.e<E?r.c=[r.e=0]:(r.e=b.e,r.c=b.c.slice());retur

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=1734286360846131&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=738948259&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dlt=1716532081489&idt=7737&dt=1716532089519&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=92504512096011&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td9_tt1_pd9_la9000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts1_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	"https://c.mgid.com/c?v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyYzYhmwnRFTU4GOhSVcCXGjw7uJOs&v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76bFDl5xvVQU4rWzN5S_2tbuwqvfipqPw01I0PbiW_12CM-_N3sSmDR4P6wyYzYhmwh-vYa_Zsq_IqIeVGeEg4GM&fw=1&f=1&cid=1604063&cbuster=1716532023447415882264&pageImp=1&pvid=18fa947eb118598204d&pv=3&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy2WImwGwvmvL0y0Gz&rid=a1c9a944-1996-11ef-9b76-c84bd68370c0&tt=Referral&ts=actengage&iv=11&completion=2,3&muidn=o4n2DX9tTBrn"
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	25380
Entropy (8bit):	7.99229949785087
Encrypted:	true
SSDEEP:	768:sYY4yr2zWUeWqxPx244Lmf5hkfYX0fEBJTg:sYY4yr8qnyLCPkq0fEvg
MD5:	FB50423A409EA1C1248FF224111B99C8
SHA1:	7B964451B0CC9C34A2BDB970FA128AF3ED6EE23A
SHA-256:	AAE59B994DAE56CCA38D01587DDD028680AD7D2096EF30EF3E52950C3D03E0A5
SHA-512:	3AE5A065C0FE1262BC223719726AC8DBDD8CA5BEAFDF26680B08C2148C86DB8A8C874C026C364FD97E5EB3822181A90646233790DF41C7D60F9558B8329F875F
Malicious:	false
Reputation:	low
Preview:	RIFF.c..WEBPVP8 .c..Po.......>.:.H..".-......Mz.....p.}.\|$@...Y?P.w...y.r..............{.S.].1...S....................%..............d.Z...w..........^...."..r./.k..~Sz..P?1..x..k.G.O....X.m......F..N`...<.e.u..x..%.\|....Eg..no..K..f.C..l..~..K......&}2.w.......`....$k~&...NOS/.y......X...../^....}..v\|O.......M....%..."..g.`S,.+..x.....K....w.9.x....wO........l...\.2W......6...0..j.jnsG.v ..BZ...0..`.~f.t.F(v...+..h.#.....J.+.K.VHgC..?E.(.8{9..3.GU.{..FeK..U. ...,.....l.....92. .......-A2I^...4...O...8.../...2\|...im..]_...X....n.:I....>Rg.W.s....7...0H..VC..;.p........zXHoW......zm.U..'a*O.,.E.d...r.2.`.~.jJ.B..G...&.)...............X..%..A....JV.D..>..._.).cC.~.M"....kn,.......-IB......BQ.5......4Ao.+.G..0.......7...m_.....C.P.d..4.1-.oy.qf=.yL.....!0w7.>..'.L....Y.o.y".1....x....D.r.lP...............S.6,d(..o....$.}..-_.2..bn...y.iW..........z....y..4../.Xf......8..YpcY..,4...31..A.....8...M.EZ.x~3.Ge.$6...>...o....a....f.k Q..k..../.Q;b{&2......

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74049
Entropy (8bit):	5.366002698699918
Encrypted:	false
SSDEEP:	1536:6lPzfaRQHclDgVDVOm+/Ro1zHw93wnhHxf:ifaRQHcpgVDPx6y
MD5:	2A8BBAA6360BF1B733A15504E9A02222
SHA1:	0E45FB9D3F5824FBCCEE9F32FA178293AF8883E6
SHA-256:	40899035A97AF3D8DBC09A71890914C2D71D7501F74402C1C309D7F8FBA8481F
SHA-512:	768CDFA0C762DE15CE7F07DD845C31578EDE43642CA0437A49EFA85B5EB8F7968994E0D09C938870D90728E162F5D099859901FCA4D4A1F583762FA8520645F3
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/ab5/libs/prebid/avpb8.48.0a1.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[41],{2433:function(e,r,t){t.r(r),t.d(r,{BANNER_ENDPOINT:function(){return x},DEFAULT_MIMES:function(){return _},OUTSTREAM_SRC:function(){return I},SUPPORTED_USER_IDS:function(){return k},SYNC_IFRAME_ENDPOINT:function(){return O},SYNC_IMAGE_ENDPOINT:function(){return w},VIDEO_ENDPOINT:function(){return h},VIDEO_TARGETING:function(){return Z},spec:function(){return C}});var n=t(4942),i=t(885),a=t(2623),o=t(265),d=t(3802),s=t(6475),p=t(4953),c=t(8528),u=t(5740),l=t(5644);function f(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function m(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?f(Object(t),!0).forEach((function(r){(0,n.Z)(e,r,t[r])})):Object

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.580622094395224
Encrypted:	false
SSDEEP:	6:6v/lhPEuLl/bbtoyl1AViPh3QY32V65Mm+27hVp:6v/7MuLl/bbqzuQY32s9
MD5:	AE278E7804E28C2733CEE9883DA38CE9
SHA1:	09DCBA0885D6F8094617831C6D1A16AD7A1689CA
SHA-256:	D07B8B3DE27E367F307A22F81DDD52AB9BB68A47E71376B9674316910A863B4D
SHA-512:	5CD4D885BCEBCA2DBF1CAE0F88211399E7F723ED7BB95FB10DA9C92408DB637A660604C0C54E3D9F10E0DBCDDFA194269567F6F48C885C4964EB60789C33F545
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png
Preview:	.PNG........IHDR..............W.?...lPLTEGpL.........................................................................................................N......#tRNS....Q...U........../b..*.v....:9........IDATx^m.G..@...83J.bp...?. hu.....&....,..(}.AZ.S......15D.&.p..@..#.......1.R...5....p..0..9^1..L.H./........M...).v......\|..)E. j.}..>.=...?&...u..-....IEND.B`.

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1498574255&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=6530A801-8E95-4A46-AFE0-81F686DEE018&nel=1&eid=44752052%2C95322027%2C95323893%2C95331589%2C95332046&dt=1716532059227&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=3510324889256594&scor=963499215297534&ged=ve4_td0_tt0_pd0_la0_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16491
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=4426393169609033625
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6516
Entropy (8bit):	7.914424878022746
Encrypted:	false
SSDEEP:	192:ql70i+TltB2uxihqcAxYSxTA7M2fNe/AE36Fie/:ql7oB9eyCv1e4E36Fr
MD5:	6091D84E7CC2A960466917C9B83D2AB3
SHA1:	888B5032011435E5B1A99FDCC6220C2288051B3E
SHA-256:	319FB519CEE81AFDD22340D1BE7DD7DC69C9420482CE0E342735634CB13FEDAE
SHA-512:	5E3FE9B4AC43AB61C0A03883B0336D630169B357ECFD9B673AD1DFC2FEF553A9BCAF6DAAE1E90083163A1736B53075CB174A6F5A673304FF8244B78E46DC3EE4
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/841723605272191041/14763004658117789537?w=200&h=200&tw=1&q=75
Preview:	.PNG........IHDR..............X.....;IDATx..{.$G}.?YU..GO.C..V.ZX.z...m..[A..wB...C.....e....,.90..:...\|...0.-.c..pF..!..Xo.V.....G...]Uy.T.<...gg.{fv....b....2.[....UJ_.F...^.....*.J. A. <........g".&%...p...HD ...z.[K."..L..D."..<.ZsK.".-..'...g..-...p.qZ...D8.Y......VV.@....>..D8.1.D."...].<.]..@-P......m....f=.+.....=.....<.5...q..]....zru.....W......@.t.."4..)....z.....">....F.y_.R...wM.\|.e......Q~.@:.:G.....[j.m....A.....th..^Z.....?W.o.X..........E....9...(.{.<W.w../....3..d/...;...MZ$.\|.Qn=....v..@....U.D......F.i")U._.[.MC..`\|.........U.......U.P.......x..brw.!...jO.5?.d..>..^..../....U...=..;f.........>6..f2..f...#._{:....a....&........./..'[......#..G.....>...7...8:..\|.l..$.\|.Q~c...t&.o...o.'...+.=s............'..........I.3.m.$...p.....%.";>Gg.X..mX.\v..LrZ>I..X..#.3....L.Hq3.t.7:....!_)....,(>vv.......6.;4.....D.[.n,qtXp...s..Z.5.52..=.b<(...X..l.G.gAj...HC#..h...J.2..A.0...SH.b.wg!..q.n..D.6....".A0 ....".A0.w.:4.O.U@

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	134
Entropy (8bit):	4.988231661403621
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiOzt5TpmH/nM:8WiIUemo/HPbfCYKpY4DCVeELABZjmHU
MD5:	D7751D30983759C80820E17A41BEA462
SHA1:	076084757B70922F93E1B6EE663287A6B568F377
SHA-256:	C36CBF0C5FEF531A43CFA6CE4659FAF63F3FDACD3EF79D6280B88C75FC1C0A77
SHA-512:	2BF3AF2C8BCBA9D50EA6CB4E46F98FAE70026EE5E64A4B25CB47718E4F2582A85EEEC04A38B9AF8BADD74219AA24F2ADF20CAF599DCD007B63F9F1E903B32B5C
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"1"})

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c315c481-2ec0-48d6-b201-ac605ed957ab
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4246)
Category:	downloaded
Size (bytes):	171518
Entropy (8bit):	5.5039415895876065
Encrypted:	false
SSDEEP:	3072:ef9a0FS8vx8EQeC3ZRoIoM4LQRzdH3i2prDc9hmatCxCLuPsV/+jX7xuhFysRqZK:U9a0FSox8EQeC3ZRoIoM0QRzdH3i2psf
MD5:	CFFDE78C8DDA8B18334C474D23608488
SHA1:	9DCCFD5953422DE7E8D09F489FB4BC5BA1F9D2CF
SHA-256:	440409F7D73CA45CBD253C6B77246CA30B95BBF4381CF50FC26901FDDFCF0396
SHA-512:	9ED93576E3BDFDB6B971E106D0407ED8E33C746080E229EC13383CE337D22573049659FB17C8B143D4B33165555B0228DEDA0B414350A60F3CBEFF03AB99AC9E
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202405220101/reactive_library_fy2021.js?bust=31083940
Preview:	(function(sttc){'use strict';var p,aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var t=this\|\|self;function ba(a){a:{var b=["CLOSURE_FLAGS"];for(var c=t,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ca(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}function da(a){var b=ca(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length}function ea(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function w(a){return Object.prototype.hasOwnProperty.call(a,ha)&&a[ha]\|\|(a[ha]=++ia)} .var ha="closure_uid_"+(1E9Math.random()>>>0),ia=0;function ja(a,b,c){return a.call.apply(a.bind,arguments)}function ka(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	downloaded
Size (bytes):	4434
Entropy (8bit):	5.2775518735444
Encrypted:	false
SSDEEP:	96:7Cl7PAerbf1aula+7RTdFCHxytpvVBMnslLqNNGWxLYvR:s7PAuAImKp0ns0bAZ
MD5:	92456DAE552D105F287F84FA84F98F66
SHA1:	6514E3646042B3D4A8746E997D26A215C520B0F3
SHA-256:	E82F133F2E4C35FC4ED344BD2D8B0BF7CD9B4F45873462FAF5F6EB0E2DF47E2A
SHA-512:	93B30900110A263DF0F0AEB33A089F61868BFD46563429C68A23908FC62CD2CD0E310AE68F506C9B6615EC504E159C72A85EF1A3FA38ABE3D6CB721CA3DBE2B1
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.6f4f2eca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.SideNav~bundle.MultiAccount~bundle.JobSearch"],{93111:(e,t,a)=>{a.d(t,{a:()=>M});var r=a(2784),n=a(19153),s=a(85682),c=a(3188),i=a(73186),l=a(45184),o=a.n(l),d=a(31735),u=a(7066),m=a(1206),g=a(44910),p=(a(6886),a(25686)),h=a(82392),f=a(37800),b=a(55916),C=a(35131),_=a(37796),v=a(67935);const w=o().c61eea74,U=o().b7dc3885,k=o().d86bbf0f,E=o().h6beb5fb,y=({accountUsers:e,activeUser:t,handleMultiAccountSwitch:a,renderUserDecoration:s,userTestId:i,withBadges:l})=>{const o=(0,_.v9)(v.BP),[d,u]=r.useState(!1),m=r.useMemo((()=>e.filter((e=>e.user_id!==(null==t?void 0:t.id_str)))),[e,t]),g=r.useMemo((()=>m.reduce(((e,t)=>e+(t.badgeCount\|\|0)),0)),[m]),y=r.useCallback((()=>{u(!d)}),[d]),D=r.useMemo((()=>o&&o>0?r.createElement(p.Z,{onClick:y,style:I.personalAccountsLabel},r.createElement(h.ZP,{color:"gray700",weight:"bold"},w),d?r.createElement(b.default,{style:I.IconChevronU

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 375x250, components 3
Category:	dropped
Size (bytes):	27221
Entropy (8bit):	7.964045223771746
Encrypted:	false
SSDEEP:	768:BQlwhamneSowNFif83J2WICHp0WRemn8MNHy4C:BQaRnToeUsweHp0/C8z4C
MD5:	855F8225C793804453C3BBE8B667FBBB
SHA1:	408FC47E8A949E8603CAC5C1745B5DBFA6AEB100
SHA-256:	E7FD91A483A1C0955BEAE846CEBBEACF2937D43F8EDFD88DA222B924CE8EF0BE
SHA-512:	7CAAF7C049837045143F524653371A5B9F7B7EE64A6A00A12C1AA0807B22157421CB63AE31A2B57727E6B8513DBC7BF6B971A114AE002EFAFBF9E613A75F52E4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?... ...+f...v.9.U.`..i.H..jIx.u.L.Y..E\|..>.....N(.6`nf........nH.g.S...vd...rG.lE...0.p....i......q9L.<g.u......$Vf.l..i.F...#..L{.}.m#jqm.n....l.e..j..v,du...dy.n.Tz......V\.'A%..,....;c.MW.Q._........2Cy.)..b........>....5Y...........E}-...l.b.Az.N0G."..V..0@n1W...'....+.L.t+.....n..u.47...>L@...IS,.

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (41957)
Category:	downloaded
Size (bytes):	41973
Entropy (8bit):	5.299710677376654
Encrypted:	false
SSDEEP:	768:fgQ82a2qbJ/A2T1PkIagOUlDgJUmnz8QDX/0JVro1lwmXaEKDStrU2GRdOfZCV/a:0lX1UnnzBUVfS5xi+
MD5:	9FEAFB1E202E0BEC5FE57D365ADF2E05
SHA1:	020F652BC788B9B11A0B86FC1FA5B9D4F9C80CD8
SHA-256:	95FBABEDB3CDCE723A6D587747D3D7456F488F755CF4500FF01863F714D45BBF
SHA-512:	B2E69EC2733F1BC7ED78FFC439E33D443A46D2786E4702DCAAEA33ACFEAAA33612D19651D3E3AA1DA04B8257EDDF3FC5FA63CFEEF8FF5973A7E69F0B9066949D
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idw.js?ga=0&gc=&do=pjnewsletter.com&e=27&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&k=am%2Fid9528636.00000000000000000000000000000000
Preview:	void(0);/* */;.!function(){function e(e){return Object.keys(e).map((t=>{const s=e[t];return Array.isArray(s)?s.map((e=>`${v(e+"[]")}=${v(e)}`)).join("&"):`${v(t)}=${v(void 0===s?"":s)}`})).join("&")}function t(e){return new Promise(((t,s)=>{e.oncomplete=e.onsuccess=()=>t(e.result),e.onabort=e.onerror=()=>s(e.error)}))}function s(e,s){const n=indexedDB.open(e);n.onupgradeneeded=()=>n.result.createObjectStore(s);const r=t(n);return(e,t)=>r.then((n=>t(n.transaction(s,e).objectStore(s))))}function n(){return O\|\|(O=s("keyval-store","keyval")),O}function r(e){return e}function i(e){let t=null;if(z.cookiesAreEnabled()&&(t=z.getCookie(e,void 0)),z.hasLocalStorage()&&null===t){const s=z.getDataFromLocalStorage(`${e}_exp`,void 0);(""===s\|\|null===s\|\|s&&new Date(parseInt(s,10)).getTime()-Date.now()>0)&&(t=z.getDataFromLocalStorage(e,void 0))}return t}function o(e,t,s=S()+6048e5){if(e&&t){let n=new Date(s).toUTCString();z.cookiesAreEnabled()&&z.setCookie(e,t,n,"Lax",W,void 0),z.hasLocalStorage()&&(

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49298), with no line terminators
Category:	downloaded
Size (bytes):	209232
Entropy (8bit):	5.546086404810973
Encrypted:	false
SSDEEP:	1536:cShBB9AX3tRxrHoXXt/w2oolGna2d2bhr7+gkKHT5ysloT0wH:cShBB9AX3tRxLoXX1ZGa2d2xBz3oT3H
MD5:	0623767B925ABB28DFE87AA02D7A46CC
SHA1:	C1873D5CBA5A3A1EF5848D4A6436ED1399B04B76
SHA-256:	28CD85FA7D3639B43D57FBF55794F65A5B760E75A4E49996479C7BD88CFD31AF
SHA-512:	4063954762875D677EB7BE8A784010AE6B52FB3956A53A56333E71378FBFD6BD284210A52B3D43E31493743C1E4B4B5F2A4A3C80BDF1536F1E85446F80AB3502
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker.96394e7a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.EmojiPickerData~ondemand.ParticipantReaction~ondemand.EmojiPicker"],{71969:(f,k,e)=>{e.r(k),e.d(k,{default:()=>c});var a=e(45184),d=e.n(a);const c={compressed:!0,spriteSheetColumns:50,spriteSheetRows:72,categories:[{id:"people",name:d().i506b710,emojis:".. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..... .. .. .. .. .. .. .. .. .. .. .. .. .. .. ...... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	5.019887540191818
Encrypted:	false
SSDEEP:	24:hYkCn0Xi5rXW9jgFi5GtZYAWnyfdWiaM/Njv3igeHa/UfbJijCV6/MBggE4NkIM:BnSxmBAsfM/N7JZ/UfdijCY/MB53N5M
MD5:	B47E18B9602901B4442894ACF9EFA708
SHA1:	7BDC44B5C2D6ED73405A512A0D25D096C6F6068B
SHA-256:	C16A536E9381A97C5D473A2B70AA9057BCEEBE38F05BB7D90360C96BFF579033
SHA-512:	4C58D58D21E66682EF6B9DEB3821BEB89834F69EDA4CD7471AD132B698A6E11E8E6B2D04620DFDD6B6B9A06CA6DFAC36C96AD12233A359CF1F02329CDEA917DD
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html?bidder=pubmatic
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics demo</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta http-equiv="origin-trial". content="AseYc2DtZGb//W5XVWgcoP6UF3L+dzpvN5W30ZfyW0aY9GPRVT9CgZXlFz8KHt25ohltfnkuImnAY3JETFGc+AgAAABfeyJvcmlnaW4iOiJodHRwczovL2Fkcy5wdWJtYXRpYy5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY4ODA4MzE5OX0=">. <link href="favicon.ico" rel="shortcut icon">. <script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.re

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11322)
Category:	downloaded
Size (bytes):	998825
Entropy (8bit):	5.466423601714677
Encrypted:	false
SSDEEP:	6144:0hQiOD7A04AH01H0byC5NTymEEtt9cP/lp8yVex5hn5Qj40VJ1iEGtGMo1Smvz1m:RXD57yKyCv+dtduywn5Q3VJGsMo1j1m
MD5:	69B7632E68747272C6280039F08B59A2
SHA1:	27D92E064A92297767B816612B3AB10992222736
SHA-256:	72FD0A35DAEFA20419B376066DCBD7FE1736FEA7877018A485D72BA09EE4BA4E
SHA-512:	70E070760360CDEE8C81B01660526B31501E17C59EB46DB06F5E398073C63FC9989096E74E2F488D5E65FD4204F492DFF0D331D3698863765C8BC7E885E8E2F3
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iZ5G4/yu/l/en_GB/PsMWZhnzbaR.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ActiveFocusRegionUtilsContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);c=b;g["default"]=c}),98);.__d("HeroTracingCoreConfig",["cr:8907"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=b("cr:8907")}),98);.__d("HeroTracingCoreDependencies",["cr:8908"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=b("cr:8908")}),98);.__d("HeroInteractionContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=function(){};c={consumeBootload:b,hold:function(){return""},logHeroRender:b,logMetadata:b,logPageletVC:b,logReactCommit:b,logReactPostCommit:b,logReactRender:b,pageletStack:[],registerPlaceholder:b,removePlaceholder:b,suspenseCallback:b,unhold:b};e=a.createContext(c);g.DEFAULT_CONTEXT_VALUE=c;g.Context=e}),98);.__d("HeroInteractionIDContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);g["default"]=b}),98);.__d("HeroComponent.react",["HeroInte

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1312)
Category:	downloaded
Size (bytes):	4916
Entropy (8bit):	5.286375159780946
Encrypted:	false
SSDEEP:	96:fQuADQ8//Mo5k4RwQrNcNiRC5i/vMArHSUkmVj:5ANp5kqLcNi85HALxVj
MD5:	27C9DFD4444EDF1A8C22020CD816CB3E
SHA1:	243DB90F23FA378A0B23D455B73FF22A95106199
SHA-256:	A005E8ECADD30D24E86FD2C6345CB67B7F0C146B4376FEEEBD5B616C32E11033
SHA-512:	69FE0BFC903F7F6A001FE3BEB603E323848E8C486124D022C152DF4BF3C34B20197E40B9701F691190240995E9182E0496A63060947B2871A2A2E6A8B7DE5057
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/27c9dfd4444edf1a8c22020cd816cb3e.js?tag=addon/analytics_pingback
Preview:	(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self;function g(){const a=h;return a&&"visible"===a.visibilityState}function l(){const a=q;return a&&0<a.innerWidth&&0<a.innerHeight}function r(a){const c=a.g&&a.i&&a.j;if(a.h===c)return!1;a.h=c;return!0}function t(a){if(r(a))for(const c of a.l)c(a.h)}function u(a){var c=v\|\|(v=new w);a(c.h);c.l.add(a)}.var w=class{constructor(){this.l=new Set;this.i=g();this.j=l();this.h=this.g=!1;var a=f.oneAfmaInstance;this.g=a?a.visibilityState:!0;r(this);a=window.AFMA_Communicator;null==a\|\|a.addEventListener("onshow",()=>{this.g=!0;t(this)});null==a\|\|a.addEventListener("onhide",()=>{this.g=!1;t(this)});let c;null==(c=h)\|\|c.addEventListener("visibilitychange",()=>{this.i=g();t(this)});let d;null==(d=q)\|\|d.addEventListener("resize",()=>{this.j=l();t(this)})}},h=document,q=window;let v;function y(a){a.h=4;a.g&&a.setData(43,Date.now()-window.mys.pingback.getBaseTime())}var z=class{co

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=1&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1498574255&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=B09E96C0-5F2C-449D-BAAD-D3299EC6190E&nel=1&eid=44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532076356&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=199271347209203&scor=1522551574760524&ged=ve4_td5_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16424
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=aniview&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56077), with no line terminators
Category:	downloaded
Size (bytes):	56077
Entropy (8bit):	5.3966037959270485
Encrypted:	false
SSDEEP:	768:tvB5S9KiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4O:7O
MD5:	4F8D7ECCB8B77BFF110A91871EBADCC0
SHA1:	74E5D00ECB54BFCFC2CF0D8D95441CD9236C048F
SHA-256:	2DDD96839C08E8CBDD3B1F56569B6D4770021731534B98DD17DEC8526BB0D151
SHA-512:	FAF100313010634C21A7EFA0B0E8D38D532EF52497B268AADF1AAC03DA9B5D14A45CBC1CCECC508A989B28D1DEC8BAF97270C433BE5AE85CE454267B19430DF4
Malicious:	false
Reputation:	low
URL:	https://cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&_it=amazon&partner_id=405
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7503
Entropy (8bit):	7.900676253502233
Encrypted:	false
SSDEEP:	192:84crQpTpwUjagkGtNQqEiDJXoFwIEdpv0N:1tNRjaPGtauXo+IEdpMN
MD5:	45FD22B2EA2D97DB6EC2BC3820EA408C
SHA1:	7B7C0B92F54EF46D522E9DA6BB5C9CA0684B3028
SHA-256:	AE6FB599EFB2E117A2AE974B3F2FF3789B142DE8FBD504F19A595B136433E591
SHA-512:	96F690A130348E5E6DE8A38C543B767BBAD4A2AA7B9F1DA48215EA1D3A03614DCCFD6386363CBE168A9FFDF429E0FCAB40EC0FE449347FF41A7416A26F7F5CE2
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/275222063_3203106646677084_1492339985091207560_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=qbjOFP_xpZwQ7kNvgHfC6Sf&_nc_ht=scontent-hou1-1.xx&oh=00_AYCndvMO1iEMlKKzdzGc_e4BgiXezWfcze9ZyH_9RTR74A&oe=6656203E
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000066030000a4060000b90700007c0900007d0d000023120000a4120000dd130000a01500004f1d0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................2.h.Q....Xn.LD... B......6kG.(MY.@..l..Q[.j...!...h..#.....dR.....cNa.A.].0V8.C.i..I..+U5{Us-..<..=..._..w...Mu......I.lob..=..+..U.Z..d.rX..b../!...].,...d..b...9<...j\. zY..mG@..K..k......7wz.><.&{3\A..\....9..,.=..w.;..{.,5.s:._......Un.:..Bc.Lw..8.c.y..k~w.#.x{:.d ..C....8J..:.D,...T.K......=....*K.-.<.3..,...p..I3..N.....)..D!.M..+..]...@........a.A:..llE......4..U.@..+I..%3.<./N#.".Ps....t..5.N.FT.....Xs!.aIz......+...........................1.!2. A."#$30@..............;.J...w.L...>.=._K..4J....H.J ....\|m...eL-.[d..o...&A..j&2..)..;...<.K.1_$.v...^....^.;.......71x.i.,........

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	8724
Entropy (8bit):	6.79038236277243
Encrypted:	false
SSDEEP:	192:/itgWO5VcGhhnFZHjbCuTu3rNvxfzP3VyuWyshlnrlqRi:/ANeBFVKZxfMu0lMi
MD5:	2993755C7C7A44E573104124DC060F3C
SHA1:	A10CFFAA067B8FB82C5B084F08721950693474A0
SHA-256:	866248FB3F84481E21A19D0E2D4D5DF20EAADA6C5E5934B3F4FC39879A15A4BF
SHA-512:	746F07C0199702844AD7DA949D12BD8170E98A665DE7F89FC22EABCB3FD3F0DBEFDE65AB9E035F04DC861BEA186397B23548C8DB862E876E903819304CFCBAAA
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYBn2ixxgSeNdtLvABznaWA0BcbfRSykUVUIjr1GaWGB1g&oe=66779B71&_nc_sid=7da55a
Preview:	...KEYF....$................. ...................4C..4C..@@..pB..............................4C..4Cm.....................................................................................................................................................Adobe.d........................................................................................................a..!Q..1A"q.2R....#3B..CSbr............................!1.aAQ............?....$}(.....5{....pcGW.A.?...Q....h..%...8..M!...j......#.'.{S... \|....a.w..O.(....Pn..=..o....[wg.....^6p..Yi.....73OC.V.Kx..4..c.3..E[j..............$....`....&.u)b.o..L9P"....yn..eE...N..........m...Kd...Zvl.;"....S8.oD.....S...Q...-.R#...B..-.&e.lS..v=G.M5....&.....i.G.0.mD...X%.X%....../.V.V..%.b....M.....7.YO+9."......+..Y....L.Tj.K.ln..R...,C.......".#ul...e..P...Z...N.=..X.n.Q2....M.......X..$.T.......i.5!..z..+Q.p.......1BYF(K).........K.1..0..j..n....o_.h..MOE...........u..X,...M&.p.JkK.....cU..........D..>..h.5.h.]:..

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55975)
Category:	downloaded
Size (bytes):	692551
Entropy (8bit):	5.461252825427576
Encrypted:	false
SSDEEP:	6144:Nc/XtetE8gRHuJua2i6jgirWQQ1z4rr1hKNyRcS8R9EqAx8kCRytdhq344:Nc/XEthg0IaOjJPQ2rn3RR8UlyyR4
MD5:	E26A5B9A603DCA9EEB946A21FE5FCC0C
SHA1:	EEDEA52439ED7D2971899AD991D0297B0C259B69
SHA-256:	F8AE7DC80EB2C64B840255C8E28CDA0D09FFD3CC6D4C95EB0C04FFE4F7C2014B
SHA-512:	95DE65B9594D845A1DF455C0B9A524938C7F0A537733CE33045FD4B2500CF48CA7249F8BB969E86E0AA26302348AC7382896C7242B00164C85C50E599A65DB66
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/vendor.8075d18a.js
Preview:	window.__SCRIPTS_LOADED__.runtime&&((self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["vendor"],{86706:(e,t,r)=>{"use strict";r.d(t,{zt:()=>H,$j:()=>V,I0:()=>G,v9:()=>b,oR:()=>W});var n=r(43100),a=r(41110),i=r(28316);let o=function(e){e()};const u=()=>o;var s=r(2784);const l=Symbol.for("react-redux-context"),c="undefined"!=typeof globalThis?globalThis:{};function d(){var e;if(!s.createContext)return{};const t=null!=(e=c[l])?e:c[l]=new Map;let r=t.get(s.createContext);return r\|\|(r=s.createContext(null),t.set(s.createContext,r)),r}const f=d();function p(e=f){return function(){return(0,s.useContext)(e)}}const h=p(),v=()=>{throw new Error("uSES not initialized!")};let g=v;const m=(e,t)=>e===t;function y(e=f){const t=e===f?h:p(e);return function(e,r={}){const{equalityFn:n=m,stabilityCheck:a,noopCheck:i}="function"==typeof r?{equalityFn:r}:r;const{store:o,subscription:u,getServerState:l,stabilityCheck:c,noopCheck:d}=t(),f=((0,s.useRef)(!0),(0,s.us

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	174363
Entropy (8bit):	7.960530764474407
Encrypted:	false
SSDEEP:	3072:Dmz79G5YvXh9WfFQyu/lYzp0cwHdHlw/Tg1YLzSmbyAhHgIbxG:DVYvqfF06fw9Fw/Tg1YLzbyOAIbxG
MD5:	EA44CBB90BA8FA364762B38EDBE69F95
SHA1:	437A6659665D9F5F99DE06639E27AD5B6B58CCE3
SHA-256:	782A5A12B89ABD146946C28E9C37F3C54CBB3B75887554D297D2CF5EB57939A2
SHA-512:	F9156EC9A6B5199C0ED4ED9BE0C9B12B5C2CC3FE8A5BE9643413B3CB04F468E7CF0E2E7D8857C39928C0DD9AAFD2DA62F9E2BCC73B943ADA516D6B8DFF9A54E5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.x....PLTE............................................o.....d...............]....Q.m.........S..........j.....r.n..........W...................>...........l.................Z......h...T..~.................n......Y.......z..t.......].......Y.....}...{.......q.........X..W..s........i..`..Z..U..\|.W...z....w........w...M..}...}h...r..w......\|Ti...\|/......^.......P..`..R..z...~t.zio..}..s..S..w..j.Mg..K..tS.yws\|.z{zxy.Q..K...tgcy..iZnv.qv{vusex.wtjIz..iX}kimnx.b#.a=nmmcn.rkedluJp.~dV]tKpgZoedTi..[GbekHi.n`Ufb_.J_Tcs.BGtZHqXV[^_:c.bXX`ZOQ[o.L!.K=C].qOFHZudTG.flSU\VSKHUeaIDxC%pA=6Ss...HNLbD5RHE-M.7Kh=J[...6NREI;...U@5...q0 A@J...(Dv`42..$... MGa3.1@P?>4L72,>^......K4($:l......08IX(66;......820...P....?,$$2K30#(0:p..&*0(,.^..9..%$&$#.. ,. .(...................".....IDATx..Ok.G...vLJI1.Bz....zl>@.....Xh/-1..r..(.!....q.C<.2 .@.-,.R..+Y..........(..wv-....up1...I^ng.:.....'1..'..q.....`......n...X....P.......@.S.b..]D{...E.T.q...$.

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x156, components 3
Category:	downloaded
Size (bytes):	5227
Entropy (8bit):	7.809004705895549
Encrypted:	false
SSDEEP:	96:tWu3/XkH56JDDia8VopPQKyfAhK0w/7qtfV1ru/I9xaSj0eFL3:tvXIW9AoYZAc0cufO/qkS00r
MD5:	00583E38F58E2AC8E5FB0EBAE0CEF81F
SHA1:	4C8F6EF51572FFD3F797573DA465818FE572FD80
SHA-256:	DA4354F715FDBFDA7EB1AF95D2A8E3718E9E7E7379D04B09D1F5312F8A1D62C6
SHA-512:	B7DA0261014456F136FDCBA27918352BE44909F09520B5B380E7FCCFC0EB10EF734B4A9238DF17519A16B5851457C9EE27407086448434DB2E20F2233BC5A6B9
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/340512643_594035765998407_4411165701574041533_n.jpg?stp=c70.0.156.156a_dst-jpg_p296x100&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=GNQi0KfAU7UQ7kNvgHpdmA0&_nc_ht=scontent-hou1-1.xx&oh=00_AYCFLiTQq_Jfm2sEuTDoS63JA5C0M-KHQNdOJKy31wbMWA&oe=665613C7
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000046030000f6050000a00600002407000036090000af0c00002a0d0000d70d00007f0e00006b140000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."................................................................................M...Ro...d....$rgS:8......S.B:r..>...Z.X+....u[..?...G;. ..Q.2...@.T.A.....4.7+...OO.....?...h......]..M%g.... ...N..jV.....J=,..b..w3..Y.../...Qg..w..1#w..(I68.^.4y:.nF..+.p,o`..@n.7..2!..(.;...F.Z......{^ek.LyS..e..V7.XW.o.tT.C"".n...b..u#1...Ni{...p=.F..............!....zq+..,.....^..hL..j..k..\3.L._[..O&j.y.+......H.....".[....(..tl.U..#W..lG/r...e%Dx5.@EE.....0.V.....V.%...us..4..9.....)........................... !"1.A$#0234...............s...6..^...V.K......9..3K..<_...Xr..._..U8.s.M...... l..}_..^..+`0r<.....@.nl..8..b...7%../.Uku\|B....f..IecW...?.LW.~..>.D......-."E...5...

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?&google_nid=B765081F39B1F7&google_push=AXcoOmQBxYHCQQXFqqG2RfWeN1HRttmUVC1nFSiJlptxI2mqLud0pGrsUGBr9clrRAm08YNTZHN1LA3UvYrGZV4opgUXIqnwMYbUVro&google_hm=v4QH1eXLhoQHGKCl9IwBDQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1638)
Category:	downloaded
Size (bytes):	1801
Entropy (8bit):	5.576159393809031
Encrypted:	false
SSDEEP:	24:8F0nlr3DIzjxy4UuBrgAL57grQo1pvnsTzHqktA916QlA5sbJPqt/AahmBT57mBB:cgypm5vMKkyq0FJMI6mBABq1u
MD5:	FD1710F5E64AF56D0E614F83A1E512A1
SHA1:	820C9D5B0558519DD91EA04ED4933303B88894A5
SHA-256:	20EEC74C1A0406AEE56738CC291A3B83989425DE85E6E1C6160B753CF437DA8F
SHA-512:	093F18081C0A50C958567126C933F0B2C5505C6260914A86327E2AD9B82634B39A700DFED344A7469BF3C3DC4ACFD31BC8D33B031114AC0219BBB011D4808592
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/5/c=4575/rand=575306443/pv=y/int=%23OpR%2341329%23pjnewsletter.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23pjnewsletter.com%20%3A%20Site%20Section%20%3A%20jewish-americans-send-powerful/adv=%23OpR%2342598%23Referral%20Site%20%3A%20/rt=ifr
Preview:	<html>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>.<html><body><div><img src="https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP" width="1" height="1"/><img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=78790475" height="1" width="1" /><img src="https://tags.bluekai.com/site/5907?limit=0&id=5283defe8db625a5edfac58f7d0521d2" width=1 height=1><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=" width="1" height="1"/><img src="https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/72aac350df2b4a40201cac1fd18dfe1f/url/https://sync.crwdcntrl.net

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50982)
Category:	downloaded
Size (bytes):	153580
Entropy (8bit):	5.38561989592087
Encrypted:	false
SSDEEP:	3072:SVI54EpGTIim0sKymy8W2Cu20u6gCuvw4Im+gSUa:SVI5A
MD5:	23FA98ED990852FDC0FBEF578A9D743A
SHA1:	56382000DDD03D2D7F6616302BCDF74822A8C3EC
SHA-256:	C46747C8A1F57C0D819968D91920BA62B987B801EC77C22FA82871A934FACA81
SHA-512:	E6B9E46647C7AC3D4CE903F47BF7D130FAF706A06E95D879524F3EB54D9B634042EA1D457596090605A444AE9DB7EE331BD7D3ADFFF735D23453F188421620B8
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ibq64/yq/l/en_GB/jC18dWUfM5_2u2m0bPYW-ex3hM69KLNaEmM84SfiWlvqERz6pNGhHp816BNgeKisvr.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ActnSellerTagProductPillClickFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1306");b=d("FalcoLoggerInternal").create("actn_seller_tag_product_pill_click",a);e=b;g["default"]=e}),98);.__d("ComposerCancelFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743444");b=d("FalcoLoggerInternal").create("composer_cancel",a);e=b;g["default"]=e}),98);.__d("ComposerEntryFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743449");b=d("FalcoLoggerInternal").create("composer_entry",a);e=b;g["default"]=e}),98);.__d("ComposerFeatureIntentFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743450");b=d("FalcoLoggerIn

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 851x315, components 3
Category:	dropped
Size (bytes):	27303
Entropy (8bit):	7.941149932658688
Encrypted:	false
SSDEEP:	384:yvYxBk6MHGcgpaErjxeAapl1fEZzk4odR9U1ciRtamJNq0714cXDreVgeNooAgRl:/Dtaza9eWZzk4W6Z4yPey+ovCn7zOieS
MD5:	C673B394DBF536AFF3A706DD5FDF19DE
SHA1:	F3DACA450C55B90EC3AFE3E5EF4C2DE901C10A08
SHA-256:	177376F7149FFA8D4937D7F323D2EFEC5F4B2D8665A9CA64A8BE9AEE17D67AF2
SHA-512:	955A59547CB77ACDAE3E59F3DED6C810FBEC2BE4B9BD30909706A8E1E7C202F7A3BA8FBADB30A422989867665AD3039929AD7E4A22081F83A1235932814D086D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..IJ2YD4IATQc6FcuD828W..(.bFBMD01000ac20300003d100000d81d0000d020000084220000722c0000df3d000049410000e3440000ec470000a76a0000....ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................! ....#'2#%/%..+;,/35888!=A<6A2785...C...........5$.$55555555555555555555555555555555555555555555555555......;.S.."...........................................................................................................@.A.z...5...mQ.K7;&.f..

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	142240
Entropy (8bit):	5.309738874992427
Encrypted:	false
SSDEEP:	3072:5YbW8jH/zmb98840YK/3e8Y8fA3BY9kENrN5nL:4W8jH7mb988EK/O8Y8R9kETZ
MD5:	80DBBA995278BD9650FE8ABC67DA15A4
SHA1:	76B4927D58C92F46B6DF406814BD923D27F3A5A2
SHA-256:	4EC00D05E49252771CF6C42F61F84C2DCE46233039DA21F1B2BDFC6D850B5440
SHA-512:	663945E3BD8718B8DF9167EAA595515FDAC4A744D93B69AAEFCA795D88791352EAC1178E07F306E8A41000522B70A15B5DB78DC5EA2AB7117A577A854D4EB52B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.RichTextCompose.a390671a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~bundle.RichTextCompose","icons/IconAccessibilityCircle-js","icons/IconBarChartHorizontalStroke-js"],{69357:(e,t,i)=>{"use strict";i.d(t,{Z:()=>me});var n={};i.r(n),i.d(n,{anchorOffsetContextText:()=>Z,composerEditorContent:()=>F,editorStateJson:()=>I.G,editorState_2_json:()=>I.c,parseTwitterText:()=>R});var s={};i.r(s),i.d(s,{ConvertEmojiEffect:()=>O,DeveloperDebug:()=>B,InlineStyleButton:()=>G,OverflowHighlightEffect:()=>Y,PreserveUnstyledEntitiesEffect:()=>le,TextChangeEffect:()=>ue,TrackFocusView:()=>ie});var a={};i.r(a),i.d(a,{useRichEnabled:()=>re,useTransform:()=>N});var r=i(2784),o=i(35049),l=(i(6886),i(58955)),d=i(24869),c=i.n(d),u=i(15729),h=i(18717),m=i(28412),p=i(33988),_=i(1206);const g=Object.freeze({reset:{_type:"reset",type:"reset"},set:{_type:"set",type:"set"}});var f=i(41110);(0,u.GP)();const w=!0;i(71372);class b extends Error{constructor(e,t,...i){sup

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7769)
Category:	downloaded
Size (bytes):	7992
Entropy (8bit):	5.279600525297267
Encrypted:	false
SSDEEP:	192:P+5CYQY2IrexoOeyRZnwAdqRndVKe2mqM6/5dGGCoUUN:P+hLvP2mqJdGGCoUUN
MD5:	3404533FE578AE55341650275D57F421
SHA1:	6169F64F2BDAAB39AC8F40E7641F99CB7884E2DC
SHA-256:	12E3CAD5C036D2C59192431F9D904279263D7A59C7B8A4BE3D262C9461424FBE
SHA-512:	5B60B4FB44CC551E52FAB9C51D632240A82F20C2DA4CE5C0473252632CF26A9AF37FF97E73B50B8DDDA7E760782176E8D44D0080D5677193E2DD18D43E10FDBE
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye.ddde3bea.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.TwitterArticles~bundle.ComposeMedia~loaders.video.VideoPlayerDefaultUI~loaders.video.VideoPlaye"],{38250:(e,t,r)=>{r.d(t,{o:()=>h,Z:()=>g});var a=r(7896),s=(r(6886),r(2784)),n=r(28316),i=r(12934),l=r(73186),o=r(5422),c=r(31798),p=r(32307);function u(e){let t=d(e);return e=>{const r=d(e);return(0,p.Z)(t,r)\|\|(t=r),t}}function d(e){if(!e\|\|"object"!=typeof e)return e;const t=JSON.parse(JSON.stringify(e));return delete t.dataUsageBytes,t.tracks=t.tracks.map((e=>("number"==typeof e.currentTimeMs&&delete e.currentTimeMs,e))),t}function h({children:e,periodic:t}){const r=t?y.PeriodicContext.Consumer:y.Context.Consumer;return s.createElement(r,null,(t=>{const{aspectRatio:r,containerRef:a,guestsState:s,playerApi:n,playerState:i}=t;return n&&a&&i?e({aspectRatio:r,guestsState:s,playerApi:n,playerState:i,containerRef:a}):null}))}class y extends s.Component{constructor(...e){sup

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.988231661403621
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiOzt5TpmH/nM:8WiIUemo/HPbfCYKpY4DCVeELABZjmHU
MD5:	D7751D30983759C80820E17A41BEA462
SHA1:	076084757B70922F93E1B6EE663287A6B568F377
SHA-256:	C36CBF0C5FEF531A43CFA6CE4659FAF63F3FDACD3EF79D6280B88C75FC1C0A77
SHA-512:	2BF3AF2C8BCBA9D50EA6CB4E46F98FAE70026EE5E64A4B25CB47718E4F2582A85EEEC04A38B9AF8BADD74219AA24F2ADF20CAF599DCD007B63F9F1E903B32B5C
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&pid=bMec6YWePJIWe&cb=1&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043eec5-ae4e-47b4-b8a2-caec03297ff8&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%22%257B%2522id%2522%253A%257B%2522hadronId%2522%253A%25220001yum0ea99jha6clfcgeaikjhlll68igi8eiflgfabackkc2jl%2522%257D%257D%22%2C%22id5%22%3A%22ID5*GCXlQwA6TIr5I2oPS-HCzJYkNfHooxCNfIbq27tYAtGhKb7pbItrgiUEls4JuzP_%22%2C%22lotame%22%3A%222a6b5bfc26c4271a6d08d61f53e3185ca02c0303ba90d4ca8d8b1e4062883277%22%2C%22pubcommon%22%3A%22a765ec8d-6663-47cd-ab57-34873e7f277c%22%7D%7D&_c=1
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"1"})

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6499), with no line terminators
Category:	downloaded
Size (bytes):	6499
Entropy (8bit):	5.376514935078326
Encrypted:	false
SSDEEP:	96:/aMGykPl7UOPu0JEIvcXpbe64dBrJWthzCCZcUwW5JEpLuC/1SH5rqrguk5Vf:nkPl7UqBJPU566WqLwqEpqCWqw5Vf
MD5:	7E991AE388DF6D9AA684574330BDAA51
SHA1:	1FF93C22D578A3AE134EB1AC135047CF397FF39C
SHA-256:	6E17B0821E9B7E789C616BAC4EF7EA40F46B4B93A79B9746E836EFEE0E057D10
SHA-512:	60EFB60223EAFFCA879FC3C8284FC160216B80894B0276F4800768B8C1E9B69C5143DA9F357066164003AF00C6D57C049AED7C0F134F4A15A4E089795815540E
Malicious:	false
Reputation:	low
URL:	https://dsp-media.eskimi.com/assets/js/e/gtr.min.js?_=0.0.0.5
Preview:	(function(){var b64="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";window._b64dec=function(string){string=String(string).replace(/[\t\n\f\r ]+/g,"");string+="==".slice(2-(string.length&3));var bitmap,result="",r1,r2,i=0;for(;i<string.length;){bitmap=b64.indexOf(string.charAt(i++))<<18\|b64.indexOf(string.charAt(i++))<<12\|(r1=b64.indexOf(string.charAt(i++)))<<6\|(r2=b64.indexOf(string.charAt(i++)));result+=r1===64?String.fromCharCode(bitmap>>16&255):r2===64?String.fromCharCode(bitmap>>16&255,bitmap>>8&255):String.fromCharCode(bitmap>>16&255,bitmap>>8&255,bitmap&255)}return result}})();(function(){function isNotEmptyObject(obj){var name;for(name in obj){return true}return false}function isString(value){return typeof value==="string"\|\|value instanceof String}function isArray(obj){return Object.prototype.toString.call(obj)==="[object Array]"}function addCacheBuster(url,param){param=param\|\|"t";if(url.indexOf("?")===-1){url+="?"}else{url+="&"}url+=param+"="+ +new Date;retu

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47410), with no line terminators
Category:	downloaded
Size (bytes):	47410
Entropy (8bit):	6.171908231899676
Encrypted:	false
SSDEEP:	768:PABuwaU+Z6tVMXEBtsaZa2ujQS1to5blN1fThkFJdNbTPvV:POuS+Za6XEMaQtjfEhfTmFpTPt
MD5:	819E0E25E068159BA237BFB83C8A50EA
SHA1:	2ECE87233AFF0591B8ABDB039C9531ADF4C654A2
SHA-256:	222B058DE12D463EB24B8049C8FC38923769E22D6918F60D6E85E604820E4BE9
SHA-512:	BB22D83F734DCB36D66086233AF7C1377AA431569AB1291A85A7562830F3E2979E51E0D25C90ED1D3ED33292FEF3F4A5F9C4578C9E562C8274A44D72A455BEA5
Malicious:	false
Reputation:	low
URL:	https://cdn.engine.4dsply.com/Scripts/ippnotice.js?v=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2&96499716
Preview:	g367CB268B1094004A3689751E7AC568F.Notice=function(){function f(e){n&&(n.removeEventListener("click",f),n.removeEventListener("animationend",p),n.removeEventListener("animationend",f),n.removeEventListener("mouseover",v),n.removeEventListener("mouseout",y),rt(),i.body.removeChild(n),i.body.removeChild(r),u.EventObject&&u.EventObject.target.classList.contains("close-button-"+t)?(w(u.EventObject),w(e)):e.target.classList.contains("close-button-"+t)&&w(e),n=null,r=null)}function it(){n&&(s.add(n," hide-"+t),n.addEventListener("animationend",f),n.removeEventListener("mouseover",v),n.removeEventListener("mouseout",y),rt())}function rt(){n.removeEventListener("touchstart",ft);i.body.removeEventListener("touchmove",b);i.body.removeEventListener("touchend",k);n.removeEventListener("transitionend",f)}function ut(){clearTimeout(h.hideTimeoutId);h.hideTimeoutId=setTimeout(it,g)}function v(){clearTimeout(h.hideTimeoutId)}function y(){ut()}function p(){n.removeEventListener("animationend",p);n.addEv

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	17530
Entropy (8bit):	7.957463158537474
Encrypted:	false
SSDEEP:	384:7tJaLIJihF0jzuDsKwn14R5EL3z+d7jJnrhRHm2b10bKo9K/XnDN:7aLDvn011Sd7lnrhRmA4zIDN
MD5:	BF4FDB5F8DB177FCF136F44382900A8F
SHA1:	CE530F56FB142FA184CCAF26C90EDADD7F53B820
SHA-256:	0C00CF5A2656976B6E21399509FCB10006BDED0E546DC9CE7CE65BF6514EE8EF
SHA-512:	B417B5DE9233CC40CF9A3053AF6FD37EE4272D4C7599F5C14760205BDE032A4BE60D3363D667CC117537B351658FF81310A6214C77F7F6C8A866102ED922E5DB
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2019/02/CohenSwearingFI-768x403.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress.......................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn................."................................................F.`....1...M...^<.l..... @..!.Lli..c...)...@5.NwUn.m.`4..B.4..B.!..c....0.0c. ....6_N.W...2.....&.4!4."....4..5l........]..TB...t{....M....@.A..&....m..ft...6..y.G......y.]....1. B. "... .0........F@...\|=....;.9.z_5Ws0`!........ ....@.O..;.0...s.~....v~.......2. 4..B..$..!.6....ir'....0......,..u.z.]U~... ..CA.......L.C.Z.....0........2.~k...#..d....h. . . .....0%..._..d.......'M\|.y...K......4 ........1..e.s..ddf........z.F.[....5...L`..0B@...M.M...`...%....{.)....=v..Z.....+BL.. .&. ...""I.c...+e....V..I.........su.3.l.....@4... DF...0.r.h...T4.CMI%.k4u.N..O.........B......M.....X8._Q .h......w.C.m.....!.b......li.1.mo.i...........O7......os.......@..E...". .....V;.....4...0..jm....6..H... @ . ...61.6..'.....@0. iGY...:..W..

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	242313
Entropy (8bit):	5.756957471721185
Encrypted:	false
SSDEEP:	6144:cysIL6VXWX9RJm/0gXlAcKQgaRS48GeweDAJex+KmCtKi:cy6XWE0giDueQKmk
MD5:	6D55BD2DB18667256D3C1C5E0219F082
SHA1:	E73E8ABF37C28F0A7EEB28FE50E98CC1BF51AD59
SHA-256:	81A0D11833B80FAE9FBE7469B8B9888994FDF1521C6EA85FD83E3DD3FB8F79FA
SHA-512:	9D2CB223325AAC646E03B9C62FA7263388B7F2E81C8D6CD76A61A7F244D3172D73C1639AF2DD6412A41166C8A56116835DAE806B1220A5F2EDF2676932ED7B2E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1716221016&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&pra=5&wgl=1&easpi=0&aihb=0&asro=0&aslmct=0.7&asamct=0.7&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010319&bpp=6&bdt=2780&idt=2658&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8601797745957&frm=20&pv=2&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2695
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition:

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.001874214093168
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiP8vXaMt5TsDjqQyKonfNh:8WiIUemo/HPbfCYKpY4DCVeELABIWoeX
MD5:	DE8D91758818D5586BCABE94B66C6199
SHA1:	0D35B11AB3B65EA3177C62F019682B1FAB4903B3
SHA-256:	2C60E670B405E02C4FDFF52DAE37300C644941290D78D949E77998AC7859BDC1
SHA-512:	018DC01946BCFCE4570F655248739512ADD82F8A0253B8C7B7F62E31AB5F31C5B7AD6484784A694C9475CFA7E390084D21336FDDACAE8C049F861DB2FB57917B
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain","cb":"0"})

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6354)
Category:	downloaded
Size (bytes):	410643
Entropy (8bit):	5.447426205056182
Encrypted:	false
SSDEEP:	3072:cGGBvRxYxsjOogo4RSWoD3x5893QoWX3Z9pz/XV81BheHIph4K9oVmy:jlOjOoCXW5Lzt/H+4IO
MD5:	B31FF2AE16FA4310D5E733629572CA8A
SHA1:	998E43A2569E9C5DA2999BBBB09A8F2C0C5F7F28
SHA-256:	73BB339F7D76ED3D063B1E3CA405FDEF89CC2507571EE18118F8B615DF955286
SHA-512:	77B4508155B9B7A7B09AB2E4EADEF5BA3E8287C75A45ED5EBB88979D395D4E5F41F0FD8E6A36C1AAD859C359B8FFC9257217364D314D812B606D64E14CB9DAE3
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iJWr4/yX/l/en_GB/6NM1mGa6FYo.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("AppGroupsFilled16.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 16 16",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-448 -544)",children:i.jsx("path",{d:"M460.869 555c-.472 0-.41-.4-.41-.4 0-.786-.264-1.51-.708-2.1 0 0-.476-.5.033-.5 1.222 0 2.216.896 2.216 1.996 0 .554-.507 1.004-1.131 1.004zm-1.41-.094c0 .603-.514 1.094-1.146 1.094h-4.625c-.632 0-1.147-.491-1.147-1.094v-.306c0-1.434 1.22-2.6 2.722-2.6h1.474c1.501 0 2.722 1.166 2.722 2.6v.306zm-7.21-2.406a3.479 3.479 0 0 0-.708 2.1s.063.4-.41.4c-.624 0-1.13-.45-1.13-1.004 0-1.1.993-1.996 2.215-1.996.51 0 .033.5.033.5zm-.124-4c.684 0 1.125.49 1.125 1.25 0 .69-.504 1.25-1.125 1.25-.62 0-1.125-.56-1.125-1.25 0-.76.442-1.25 1.125-1.25zm3.875-1c.

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10908)
Category:	downloaded
Size (bytes):	247117
Entropy (8bit):	5.657085672604375
Encrypted:	false
SSDEEP:	3072:f52ucaeJMo4S81qQnC7nor3Nc3yCNLaH4KJY4kgORnjaj+n60rUO:13qMokZ+UJE
MD5:	F70E4D3BE599C51251ED0162FA5CA53E
SHA1:	8D559867FFB4C68CE586CCB59F734E7AE7D21B05
SHA-256:	ACCE0A1DC5C798E3DCAD74213FE1DA617D5350071210CFC4ED805ED8BDE92CEA
SHA-512:	BE5C9EA91362CCF22CEA400D2BCDC523F91CA4F807950FE62018F328EA88E0679183A6BB99B5AFDBC623B239EBF51EC7B4C97885F56BD122CF165C9C857022CC
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iFel4/yl/l/en_GB/UPrUj11DAgO2xKqezudlQSxyGxUdbmcjliUVeSsRTCk8p8hW2jn4-XVcS4F7e5MyElAZHoh1prcJsXgjxOZ-_U7a8O0FwF42MYvHidVTgbrSCilh6jit1ncqc.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ActivityLogMenuOption",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({ARCHIVE:"archive",AUTO_ACTIVITY_TIME_WINDOW:"auto_activity_time_window",AUTO_ACTIVITY_OPT_IN:"auto_activity_opt_in",AUTO_ACTIVITY_OPT_OUT:"auto_activity_opt_out",BAN_USER_FROM_PAGE:"ban_user_from_page",BLOCK_APP:"block_app",DELETE:"delete",DELETE_GROUP_CONTENT:"delete_group_content",DELETE_NEIGHBORHOOD_CONTENT:"delete_neighborhood_content",DELETE_HISTORICAL_RELATIONSHIP:"delete_historical_relationship",DELETE_POA_SURVEY:"delete_poa_survey",DELETE_PREVIOUS_CONTACTPOINT:"delete_previous_contactpoint",DELETE_SAVE:"delete_save",DELETE_USER_EVENT_CONNECTION:"delete_user_event_connection",CLEAR_SEARCH_HISTORY:"clear_search_history",EDIT_EDUCATION_WORK:"edit_education_work",EDIT_RATING_AND_REVIEW:"edit_rating_and_review",EDIT_PRIVACY:"edit_privacy",FEEDBACK_ASSISTANT_HISTORY:"feedback_assistant_history",FORGET_RECOGNIZED_DEVICE:"forget_regognized_device",HIDE_FROM_TIMELINE:"hide_from_

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745)
Category:	downloaded
Size (bytes):	1403
Entropy (8bit):	5.150059387548565
Encrypted:	false
SSDEEP:	24:2QoU4TZM2p6KaDNalKBsaA1G6PFxCOXskAvA0oIKz9YMxN5HK6cKgeyH5nK5xzue:B4TZM2plh65A0o7pNpK6qH45duMDpos
MD5:	FD02EDF106D5501F7E87D17452887750
SHA1:	500F64B65CF47E7A10B720648054C208F61F4719
SHA-256:	8E1B84265E633C043720DD0921476C16BC9F75E393E855C9116CA7C3A847B5C7
SHA-512:	82C44C65CA8242B12593D4F782E862834C0F1F958951CD97F7CB42F37A9A31DF7B834F2FAAC12EE6646FECE37B1C26F8361BE0084B28CC6B24160BC1BFC8F26F
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/ecommerce.js
Preview:	(function(){var f=window,g="items",h="prototype",l="hasOwnProperty";var m={id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",currency:"cu"},n={id:"ti",sku:"ic",name:"in",category:"iv",price:"ip",quantity:"iq",currency:"cu"},p={items:!0};var q=function(a){a.send&&(this.c=a,this.a={})};q[h].e=function(a){r(this,a.id,a)};q[h].d=function(a){var b=r(this,a.id);b[g]\|\|(b.items={});var c=b[g][""+a.sku],e=c\|\|{};b.currency&&(e.currency=b.currency);for(var d in a)a[l](d)&&a[d]&&(e[d]=a[d]);c\|\|(b[g][""+a.sku]=e)};q[h].f=function(){if(!this.c)throw"No tracker found.";for(var a in this.a)if(this.a[l](a)){var b=this.a[a];s(this,"transaction",b,m);var b=b[g],c;for(c in b)b[l](c)&&s(this,"item",b[c],n)}this.b()};q[h].b=function(){this.a={}};.var r=function(a,b,c){if(!b)throw"Transaction id is a required field.";b=""+b;var e=a.a[b];e\|\|(e={},e.id=b);for(var d in c)c[l](d)&&c[d]&&(e[d]=c[d]);a.a[b]=e;return a.a[b]},s=function(a,b,c,e){var d={},k;for(k in c)c[k]&&c[l](k)&&(e[l](k)?d["&"+e[k]]=c[

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10622)
Category:	downloaded
Size (bytes):	10845
Entropy (8bit):	5.391808874481307
Encrypted:	false
SSDEEP:	192:jmQm+ocgGeIcj5QNA22S+HeZ1a0R2opRVEHJP/U0Hm:jmZcfeIcllSD1amDVEp9G
MD5:	EF48ED1526940CE3BA94CF281F6EBD6A
SHA1:	72AA7A7E9AC9CA29D52B5BD6BC2DB0C9DCC52C85
SHA-256:	EFC0A7C46FC63EFF4D8E56AD16BB9461925550139080EB0CABDFBD178687FDC9
SHA-512:	329F00224E2048481C51ABB4FA99AED4CF800FB696853E102FDEFD440AA586E886A9B6C95BED659CACD6D5C8D087F41386D1E75BF88A28533F420C7394F5BD8C
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~bundle.AccountVerification~b.4ff8268a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~bundle.AccountVerification~b","icons/IconPaintbrushStroke-js"],{82939:(e,t,i)=>{i.d(t,{A:()=>p,Z:()=>y});i(6886);var a=i(2784),l=i(25686),r=i(8443),o=i(73487),d=i(73186),s=i(45184),n=i.n(s),c=i(99496),u=i(28213),h=i(32307);const m=n().gff1f69e,p=Object.freeze({INFINITE:"infinite",MEDIUM:"medium",NONE:"none"});class b extends a.Component{constructor(...e){super(...e),this.state={imagePreviewUrl:null},this._getImageSrc=()=>{const{enableGif:e,mediaItem:t}=this.props,{imagePreviewUrl:i}=this.state;if(t&&t.mediaFile)return t.mediaFile.isGif&&!e?i:t.mediaFile.url}}componentDidUpdate(){const{enableGif:e,mediaItem:{mediaFile:t}}=this.props,{imagePreviewUrl:i}=this.state;e\|\|i\|\|t instanceof c.ZP&&t.isGif&&(0,u.R)(t).then((e=>{this.setState({imagePreviewUrl:e})}))}shouldComponentUpdate(e,t){return!(0,h.Z)(e,th

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	27036
Entropy (8bit):	7.9927146835964145
Encrypted:	true
SSDEEP:	384:1NTsZlPNX71b5OSmAbNVJZQqdDSKknkFAzGauIjc+cNA26zbasfSY3KsmN:1NKlJzyc3ZQ1K5MGau2ACzOsflK9N
MD5:	C234633D08A7793116FE3E5CA74FF6CC
SHA1:	3D0242032CB8A1D153C2A95327CF898A7A8D669A
SHA-256:	350A31932D2C4721D10171938C16ABFA5F5197220BF39B6817DDF2E440DE0BC0
SHA-512:	4A03139079AFC74168ED928F2834EE75233DB0F8D6D1BD066F0BC38FD35007072C05BD720063598AC461176A0777334AF60FB77FAC847EFFB889CFBB3B010151
Malicious:	false
Reputation:	low
Preview:	RIFF.i..WEBPVP8 .i...V.......>.8.H%."#.x.....bm..J....\.....7....?.~[..l..w..GT...../.../Q../_.....e.b......{.........\G..R.......+...zF.....u.K......z../._..f}..{.C._..w.4>..]...'..0...............@.{...[..W....I..?...{..4...7....$.t...Y.......O.......[..._.........).....g.?..vO.....F.mo[`.dn.d..r........7d.+<[.....3>...n0..D.......3..)A.><.....^...w..n4HhWL....4...;<..C;..6...+._.].l...c3.....Rk......l..C.%+..CF.I..V<....u.."....9... ..1Y.t.8..n.^..b.L......)b.9a3.6.,.P.w.....?7.>..Ui~.O..e.(...D.".4....v..}..,#./.....@ ..f,.,...#....q.>.Z..X..,...C..j.:u..P.3..1..".;..e?.;........_.(\>?C.yu.....u..g1..S@>%.UR...>bu.....&..;..X.i/.....9.......E...Q..i...8...1...=+...}.......&.. N.;.?..'i.Y.<.J.-.g.........c.....)..t..o.E8z..bA.y..k{.[.ACV9...%.9..&.5Mg....JK.....U.}....)..........^*D.p....N.4E..K..(".U.iu_. n.1.@o1.ya..,g....} o.&..q....BQ..ks...~....)...mh.. A.Z.4\........k..n#..XN.&...?X{...<.W......!Hr..............&..a..C.

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24832)
Category:	downloaded
Size (bytes):	357469
Entropy (8bit):	5.56660683306102
Encrypted:	false
SSDEEP:	6144:FlwU/+LPEUuNeVprigViER3aSunAp+x3t:FlwU2LPEUuI/1qrnX
MD5:	59D20B8223985BF44D8353D809A3CD00
SHA1:	4DC36AA65009E5461E9382B6BAF042D896917D81
SHA-256:	CD9CFA1F9FE2B3213FA12BD25E0478B5799220CCF2B596B9489FE48A3A296294
SHA-512:	BB6F7E8FD789E40130DDF6D79085C384B8641543AFE582F0977C1D067DD1F11D13B6A75C868999EDF349D246A66B17A81D07D10483A9A43F2FD3463F81725AA5
Malicious:	false
Reputation:	low
URL:	https://jsc.mgid.com/p/j/pjnewsletter.com.1171406.es6.js
Preview:	(()=>{var ln=Object.create;var Ce=Object.defineProperty;var hn=Object.getOwnPropertyDescriptor;var dn=Object.getOwnPropertyNames;var xn=Object.getPrototypeOf,un=Object.prototype.hasOwnProperty;var $=(g,t)=>()=>(g&&(t=g(g=0)),t);var ne=(g,t)=>()=>(t\|\|g((t={exports:{}}).exports,t),t.exports),nt=(g,t)=>{for(var e in t)Ce(g,e,{get:t[e],enumerable:!0})},fn=(g,t,e,i)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let s of dn(t))!un.call(g,s)&&s!==e&&Ce(g,s,{get:()=>t[s],enumerable:!(i=hn(t,s))\|\|i.enumerable});return g};var oe=(g,t,e)=>(e=g!=null?ln(xn(g)):{},fn(t\|\|!g\|\|!g.__esModule?Ce(e,"default",{value:g,enumerable:!0}):e,g));var Z,P=$(()=>{Z={marketgid:`<div class="mgheader">..<span class="mghead">%WIDGET_TITLE%</span>..<div class="mg_addad%id mglogo">...<a href="#" style="display: flex !important; align-items: center; justify-content: center; position: static;">....<object aria-label="logo" width="58" height="26">.....<a style="position: static !important; margin-right: 3px !importa

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45939)
Category:	downloaded
Size (bytes):	133970
Entropy (8bit):	5.132873854767299
Encrypted:	false
SSDEEP:	3072:G5uEi/bA+TnJDpamoObnmodwbwnwmwowd6/yW8RNK+blic1rU6fJGnjkuC6hfME9:oblic1rU6fJGjQ6hkefClYQBJXC
MD5:	F22762C4396369C40AC104680CBEA58B
SHA1:	F8B3D6025F530531A645BDE6D982FFFBD9AA195C
SHA-256:	E55BFF6CC8009886C18F60F40B984FEE7435F0E90D286F7A306A099971B337A6
SHA-512:	22A1BA1096FEF380F3DC7C2D4EC9D5F0773648AA67308D17BD740228AA2F755CC8060F9635D73C1CC1ECC2F156B2EB93C29413CA7867B96A5F9B2AF1800BAC70
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iQbs4/yf/l/en_GB/Up1i9-OcMPc.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BanzaiLogger",["Banzai"],(function(a,b,c,d,e,f,g){function h(a){return{log:function(b,d){c("Banzai").post("logger:"+b,d,a)},create:h}}a=h();b=a;g["default"]=b}),98);.__d("BaseTextWithIcon.react",["BaseNonBreakingSpace.react","BaseView.react","react","react-strict-dom"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j={icon:{alignItems:"x6s0dn4",display:"x3nfvp2",verticalAlign:"xxymvpz",$$css:!0},iconContainer:{display:"xt0psk2",whiteSpace:"xuxw1ft",$$css:!0}};function a(a){var b=a.children,e=a.iconAfter,f=a.iconBefore,g=a.iconOverrideVerticalStyle;g=g===void 0?null:g;var h=a.observeDirectionality;h=h===void 0?!1:h;a=a.spacing;a=a===void 0?.5:a;f=i.jsxs(i.Fragment,{children:[f!=null&&i.jsxs(c("BaseView.react"),{xstyle:j.iconContainer,children:[i.jsx(c("BaseView.react"),{xstyle:babelHelpers["extends"]({},j.icon,g),children:f}),i.jsx(c("BaseNonBreakingSpace.react"),{size:a})]}),b,e!=null&&i.jsxs(c("BaseView.react"),{xstyle:j.iconContainer,children:[i.j

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2606)
Category:	downloaded
Size (bytes):	2829
Entropy (8bit):	4.960890735529486
Encrypted:	false
SSDEEP:	48:iI+N6X0Q+fpg5+ftfHXWvif/WifwWPfYWBf1feW9fiWhrGSG/yTI0fuS+gaE+fBY:mWmBtlfQi9T9dXlpM0n6hwyB+8RrCWs
MD5:	A0CEECA12CAADA9441485EB86FFE45AC
SHA1:	EB8100CC4243B4DF8D7405352607A5163B950977
SHA-256:	2AC8DB9BD5F116D8C842370B42AD64FB80EE06B5A400E6972F84F4CFF3580260
SHA-512:	688E984F5D3E86AD8557979EC302FBBC549FA2ACE46176A8597BA1181E8697BBC7A22213B7FBF4D3D42DD977E9190C21841D4112C7C2D0B090A6A11C20798282
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu.2b78896a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.Communities~ondemand.SettingsMonetization~bu"],{20871:(l,e,a)=>{a.d(e,{Z:()=>i});var n={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"UserCell_user",selections:[{alias:null,args:null,kind:"ScalarField",name:"is_blue_verified",storageKey:null},{alias:null,args:null,concreteType:"ApiUser",kind:"LinkedField",name:"legacy",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"id_str",storageKey:null},{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"profile_image_url_https",storageKey:null},action:"THROW",path:"legacy.profile_image_url_https"},{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},action:"THROW",path:"legacy.name"},{kind:"RequiredField",field:{alias:null,args:null,kind:"ScalarField",name:"screen_name",storag

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	110890
Entropy (8bit):	5.320306080861085
Encrypted:	false
SSDEEP:	3072:Mb561VWpsfwCE6pZmwspyApZGm000/qOY:Mb561VWaE6pZmwspyApZH
MD5:	532229F0D615C200A676522FFA12DEF7
SHA1:	94A8356BA2AA1D4AEA95383112562F920ADE07FC
SHA-256:	6DCF908A3B18F453C3422BA67F0CFAD206F953D2FAA747EDE782E3910254A487
SHA-512:	FB382B4ACBEB96BBA6F47B462005936B36CD4130C4ABD2AFE0B044E6D98DCD65AF8D8A376AEE0B2E892CA518096AF16AF487168F5E4D2034E8523AF1246BD26F
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage
Preview:	<!doctype html>.<html lang="en">.<head>.<script type="text/javascript">.. function detectAdBlock() {.. let adBlockEnabled = false;.. if(document.getElementById('LESfbmkdUexV')){.. if (!adBlockEnabled) {.. const elements = document.querySelectorAll('.responsive-ad');.. elements.forEach((element) => {.. element.classList.add('is-loaded');.. });.. }.. } else {.. adBlockEnabled = true;.. }.. }.. document.addEventListener("DOMContentLoaded", function () {.. detectAdBlock();.. // detect scrollbar width (for full-width ad).. document.documentElement.style.setProperty('--scrollbar-width', (window.innerWidth - document.documentElement.clientWidth) + "px");.. });.. </script>.<meta charset="utf-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<link r

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65480), with CRLF line terminators
Category:	downloaded
Size (bytes):	182949
Entropy (8bit):	5.2408062536797555
Encrypted:	false
SSDEEP:	3072:GLJEAhfEtpTxxgqpgVeD7/fXiJRncNwnyC0:GLuAhfEtpTfg8gVeD7w12
MD5:	CA3CD38ED3BC24B55A31C80BCCA77B7D
SHA1:	48192985A2D299A5F0F529B6F8E42429BE31C1C2
SHA-256:	B7E61067A212DEB6AFC647FA5E6F8B5E158232CEDC38D45F69EC5CB3F67A76D8
SHA-512:	C71E35392CB8486DA6243DF60933C562CF826487E0C5D2A7798B6D061E21779110B727154023D22CB39B5E8147675FCA31434F2C32A86041722C038BE05DCEF7
Malicious:	false
Reputation:	low
URL:	https://cdn.engine.4dsply.com/Scripts/MediaScripts/b.js?v=4
Preview:	../! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function (e, t) { function _(e) { var t = M[e] = {}; return v.each(e.split(y), function (e, n) { t[n] = !0 }), t } function H(e, n, r) { if (r === t && e.nodeType === 1) { var i = "data-" + n.replace(P, "-$1").toLowerCase(); r = e.getAttribute(i); if (typeof r == "string") { try { r = r === "true" ? !0 : r === "false" ? !1 : r === "null" ? null : +r + "" === r ? +r : D.test(r) ? v.parseJSON(r) : r } catch (s) { } v.data(e, n, r) } else r = t } return r } function B(e) { var t; for (t in e) { if (t === "data" && v.isEmptyObject(e[t])) continue; if (t !== "toJSON") return !1 } return !0 } function et() { return !1 } function tt() { return !0 } function ut(e) { return !e \|\| !e.parentNode \|\| e.parentNode.nodeType === 11 } function at(e, t) { do e = e[t]; while (e && e.nodeType !== 1); return e } function ft(e, t, n) { t = t \|\| 0; if (v.isFunction(t)) return v.grep(e, function (e, r) { var i = !!t.call(e, r, e); return i === n }); if

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZlAzfkKWIqAZa1yzHnMVbbqz
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	35497
Entropy (8bit):	7.9787137357345665
Encrypted:	false
SSDEEP:	768:YI+RUrsZBTzyhP54CDVc4Xx7HicH5hv386s/Wfc4WGJOVYNo2:h+RUrsZB3SPzxfXxGCj89/6cdchNh
MD5:	AC3AA7A8460A978C3F45791FDB319816
SHA1:	490B8D91C313A76A577832F4B50A066A6B05326B
SHA-256:	C7D98B41488A3D70B0AC2DC8178050C36FA8793E750C8ECDB8EA1C8BA62E7DC4
SHA-512:	60093C18E5ABFE2D5B65C512E1F55F158F189AD70AD0FC2081D166877B3DFB4D670BFFE68967A3F6B5128334010B01CF2C083449CC06FFBA8F8C7B5E65C65E8A
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2018/10/TransgenderPicFI-768x403.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress.................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr.............."....................................................5.....V.KR.aD...S_..T.VD...nf.6.Tu...E$s.}...'I.P.......&./..z...S.d....D..a.$.D..XZ...a.7....6.7.J........X..s.].;.d..........T...e......W...@..._^Q)IPJ..5...3Q..feL...7J.V.....%?-.\3.s...%K.:.8.....U.......r..T%m.@...P.o..Ff.(.X0..'P....].;.........C.]W_.lYDn[..W..B..........."....0..uy.$...k..X....\|......w.....^#.p.wv..I.y.Q..:t.I...2.G..........y,.}F.!.......f..-+...~`....ze..B.9..n./....^.K.....m..Uh.G....Q...@...U-..~.Kf..R.A.(..U....M(B....M+K.C.u.fu(&.....OH...4....pJ3.S....W."...G.*.X....\.%.2.B."B...S.#q..4...Z.$...sc.9...s.q..~.OG.h.C.op3w.%.%V.{.U.W..0..2!G.....D..N...G#kUL.,u!b.h..Mk...S..W.oq..+.<5.....s~.n.P......i....kP..\|`.D...%.Jezv.QB>]^........5.....x\|_E.}6.g..=......8.gE...(c......`..3..f..

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/interaction/?ai=CnAoaLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKgCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohX7wNa7gSedVBxwiJS2UtAzdEoTfvnhXOrm9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOljQnbGI1KWGA7EJdRSug8aIt4mACgGYCwHICwGADAHaDBEKCxCw96fY7_C8oOsBEgIBA6oNAlVTyA0BuBOcG9gTDdAVAZgWAfgWAYAXAbIYCRICi08YLiIBAOgYAQ&sigh=PF0qigZl3Ls&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864g&label=videoplayfailed402
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1605716148&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=A58FA6F5-8BF2-43FD-A8AB-96757652969B&nel=1&eid=44751890%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532053647&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=3411887101447252&scor=1585747534668333&ged=ve4_td2_tt1_pd2_la2000_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16491
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	21306
Entropy (8bit):	7.984253057026201
Encrypted:	false
SSDEEP:	384:KYo+7sitixxLBqKOxKsD1BPe8zZXUMxqSoDeZ54AR7eH7oaNNa6n:KYoysitiHLBq8WTtXnz9K47iNb
MD5:	C1164AB65FF7E42ADB16975E59216B06
SHA1:	AC7204EFFB50D0B350B1E362778460515F113ECC
SHA-256:	D7928D8F5536D503EB37C541B5CE813941694B71B0EB550250C7E4CBCB1BABBB
SHA-512:	1F84A9D9D51AC92E8FB66B54D103986E5C8A1CA03F52A7D8CDF21B77EB9F466568B33821530E80366CE95900B20816E14A767B73043A0019DE4A2F1A4FFD1509
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/cookies/cookie_info_card_image_2.png
Preview:	.PNG........IHDR...8...........j...S.IDATx^....0..A......:.J..&..Ep.:...'...i;..Y....B................* T.* T@. T@. T@..PA..P...P....y.i.M...}.l.a}...cV..b.....y..bZ.S....]..u......>.W.......4..q.G.F..yH.QY`..Pw..\. .P[.<\|...:.N....u..V&...v.O...H....9.\..p...}.....k.T.D...-...V....U}..GcI......yg..^....B...S..oJ.y..L5....&.....}Ny..?3....12pg'...N....#.....0Y./%6...`.q..TH.&"~..'.y..Y..Dl...............ax`].u.U...."c..........)...}kH......Q.g.6.Z..L..RI..bf[.P...S..DsA..H......Yo......`......q..].i..............(..*..\|f.-S.....$mbx\.<Z...@..Q@.].L.&Z..}=uf5.2.Tl.q.h.W5.D.o%k\.z....q.......+..M.u?.`S.v..T.T...@a...n...-H.+.....O;.+.Hk1...9.x.WJ..Q...e.(L..3e.....T...-3^.H....v........rf...`.x..R+...$....o.<.y..t...'7o.ug.......o.z.w.../?\.4...\....@.8...9.8.(..3.;.3;;..]^.,.......H.....R-Qk#b...j0%..hJcc.XC.\|..Z[IK]TL.hi.Z.m}..kP.V..?w..o..O...r....e..?..{..w3...AC@.....~............df...}......9.......T_.'5..NJ.$.'

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=MjY0NDQxYzItMGU0Yi00MDk4LTkyMGYtMWM4YTZiNDVhNTc4&google_push&gdpr=0&gdpr_consent=&ttd_tdid=264441c2-0e4b-4098-920f-1c8a6b45a578
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2539)
Category:	downloaded
Size (bytes):	2762
Entropy (8bit):	5.39953712348932
Encrypted:	false
SSDEEP:	48:iIypLFU/a0FcB30OwWf5YspSss4XXHkfOnqpV+P54XzQpE8DpDDpPWmEQ:mphUS8cB30hgYCnQnMiqCQ
MD5:	220E6EA177950B94CD6B830D96E92B62
SHA1:	70C82D38D476CB12F60777703E49C3095C941FBE
SHA-256:	5EE1DF45C66129505DF1AA2B8C68347F9071512B93ABE75534D60AFBE45966E6
SHA-512:	6C2A867A7C796B14FEFFCC3F517DA3F6C31E85BB5DACCE806B4E9276C52C95BABE8DA8CBBD780DA91E193DB84F693906CD715B1A2DD24085C38D4EC6DF7E1A2E
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund.96e281ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.AudioSpacePeek~bundle.Compose~bundle.Conversation~bundle.DMRichTextCompose~bund"],{96688:(e,t,s)=>{s.d(t,{Z:()=>L});var r=s(7896),a=(s(6886),s(2784)),n=s(76984),d=s.n(n),o=s(45184),l=s.n(o),c=s(63140),i=s(72983),u=s(25686),h=s(42569),p=s(23301),f=s(34590);const I=({displayMode:e,renderUserCell:t,userIds:s})=>a.createElement(u.Z,null,s.map(((s,r)=>t?t(s):a.createElement(h.ZP,{decoration:h.ET,displayMode:e,key:s,promotedItemType:p.bj.USER,userId:s,withFollowsYou:!0}))));I.defaultProps={displayMode:f.Z.UserDetailed};const U=I;var b=s(23803),Z=s(23335),P=s(58343),m=s(92160),D=s(16657);const E=(e,t)=>t.userIds,_=(e,t)=>{const{filterPredicate:s=(e=>!!e),userIds:r}=t;return r.filter((t=>{const r=D.ZP.select(e,t);return!!r&&s(r)}))},A=(e,t)=>{const{userIds:s}=t;return s.reduce(((t,s)=>{const r=D.ZP.selectFetchStatus(e,s);return t[s]=r===b.ZP.NONE?b.ZP.LOADI

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	"https://ids.ad.gt/api/v1/g_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&google_gid=CAESEC-9AAbcxy1uJB2yDHfvup0&google_cver=1&google_ula=450542624,0"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.064698569179295
Encrypted:	false
SSDEEP:	3:TJQWesK2XAMLRwK8WFDXTiZsrBn:TJeMSy35B
MD5:	F32D5DF7F15E1A9B6BAA58E05B6225A8
SHA1:	5DED68F58C040194BA58CB5DC368A8FF336DBDDA
SHA-256:	73F0303851E977716800EFA57A66387958FBD2E6219CB27B8186FEA5E21B2AE7
SHA-512:	0E1E1FBE8F396F8943A20DA813239031CFA295D28855B9B5323A3F2801EA6CA17BC1E2C8CB953963ACEB1477E001B3EF81B6360222FC9AEC91348C8B19378A54
Malicious:	false
Reputation:	low
URL:	https://ow.pubmatic.com/setuid?bidder=amx&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&do=pjnewsletter.com
Preview:	The gdpr_consent string prevents cookies from being saved

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 768x403, components 3
Category:	dropped
Size (bytes):	20645
Entropy (8bit):	7.95618806544571
Encrypted:	false
SSDEEP:	384:4r46WkVR0ELw2QLtjw9uij7BmZJcVXnbIReJNURpF+Mx7o:406JR0ELdQRjwpj7BKcuvPx7o
MD5:	56E2006ED364C711B4D3FDB859860C79
SHA1:	CEC16167BAEB4B81FE5CF5D4437F7CB0EBF666B4
SHA-256:	E5E1F0155A5F2C8674D0DA5690DB21A7F9A539C2D3E497031BB81CF7D52E4587
SHA-512:	72CF42863EA01A6321E3BC71B7A72AB0CE92A62CA86516D9A659C052938939580B0FC1ADC5F3F68FDBA54F6CF812A5B16FEFB767B794D2D4B267516814A8AC14
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress.......................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn................."................................................<.I..B .I$.A ..........u;..;5.~... .......@D.}..H$.I .A$.H .`X.\...U.dk.T....rA!.VC..b.$.,Y.`.@D.........X......j.+[~."...C..TH.$EP..H.H.}.....$H$....`....3.6-.{..tzT...gg...P.@X...$.I.....@$.d.... .HD.x._/..Z.:...(....z] I..@.... A$.0H ....$2Hd...3...v..<....;y.4.....D.H UZ.,.. .A;.(. ...h.$....>U..zOK..=.....FN.?......t. .U..U.,.@$......g,.%..,.@...C....TsaL.>....Y........DZ.,.H$..:.c;.]....C..UT(.>.....;...]mR. .).'S...."...H...I...L...X.....P.'.h.4i{...QQ.^Z...Gp.I$.$..D.;.....$........Q.A..\|.6Hu.];..v..@.U...:.I$.,.Yk..Cc".~...(EUDP.T...I$...NV.4h....e.;W........A...........*...@........B...?.o........f..gk.;.....2.@Q]K..r.T.......A$.H.I....0.u.z^..5.V[.."..]......B..U.....UbX. ...C....2C.&6O.W.z...%..Z.T..n

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22059416475%2C22652678936%2C187271864%2Fpjnewsletter.com_AV_DFP_MCM&description_url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2265029014675375&cust_params=ps_floor%3D1.5&sdkv=h.3.642.0&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=74815731&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=505E7A61-96D1-4B0E-BB68-ED9B1E399709&nel=1&eid=44785452%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&dt=1716532112728&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=2214915870898660&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td32_tt24_pd32_la32000_er1396.182.1546.482_vi0.0.907.1263_vp0_ts0_eb16555
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 538, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	337809
Entropy (8bit):	7.951953552687533
Encrypted:	false
SSDEEP:	6144:hafh6cugW3/Ks4QBhIU/mxFPkUfL/WlWbRMMYVoppmYLuUQBd:hafscugy/KpQBCFPkUfKlWbDppmYKUQT
MD5:	F7F8149223DF665725129E2B45C8015B
SHA1:	572EEBAE0A80553ECBD11D7839C06681455A875B
SHA-256:	17D3E7ECD793E138F1F24F5D9E4EC27E55B5BC3F40FB7BE164A125A7FC15861D
SHA-512:	D9FFB6BD2FBC0206CB81B8FFB91A5F99552805B1810EC792BBA3D4FBFB9264C2B6DC2543B9E1B639CCBA82448A39A3BB697A03EC348659AAB085E358CD17C5F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.v....PLTE...................................................................................................[.............{........}...........y.....`.....z.....q..h.pr..y....}l.eD~...snj.....yx.yk.uj.tf.ut\|z..gU.mh.rh{v}.k[.l_.hg.ol_t..g7.ig.?_.hX.f_pny}fm.ea.cX._W._EngpyaY.LK.B'~]Nbcm~YWo\fKc..QNvXV.R)zVLU^.yU@rTKhVW..JYVehRHxK3\|FBXRXhKN\|H.gHFgH>?O..0.XHNJJggE2\G@..(EIps;5)O.JHU..(AFgSD?\=<[>0g60L=ES:7r0.;>\5?d?>NY7.f1.?<BM8/Z10...H89...78X57R67EM..@33I1%Y(.81>11N...'2VO..8j0/E306=+.)/GG&$.7Z..E&.;($n..()H((A2&0'(=((7;$.2$$$'8.TH..&&+$$63".J..\...%7 "79..+..:..$.P..0...!,2....6#.!7....DE....2&....)..0....'...#....!.....:..%..%....".....52..).......##..............)........$......................$.............................................$LIDATx.Lz.k..u....{Y...\|.p......w..0dg..7....I.h...c..d.?x.....X...m.dH..Q.k9&v.8M'..L.C.3..!M..9..a.T..U..;._yA.a.?...0...}.HD..#..<.+\..pa.......$.....U.8rY......4]7s.7..

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65478)
Category:	downloaded
Size (bytes):	234704
Entropy (8bit):	5.427718662498054
Encrypted:	false
SSDEEP:	1536:1M0lDe2YZMbrNJTsTzma+vPP2HPCcI8Vx62UYn2U8A5mMby/I7tILVd56xMd4Mul:eSJvNpsuiPxdu/2gIoJM
MD5:	413546E6DB1ADA0E3550D199BD93AD57
SHA1:	AE6CC4CED7CF8A34467F53016F077E73095FCFCE
SHA-256:	EB87C0447BD19366919BDB8913F775CACA732AC31CBC5E5D42E4DB5DF39437CE
SHA-512:	9759AF989A794BD291BAE1E2C0F4195F85B316F3BC06980719DD0C613F18AD2D9BDC89CCFD929FB2D74310F7CF94D75434643C0F0AF677F1D0C12A82F23EC7C4
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js
Preview:	/* cnvr-coreid 2.4.2 - Fri, 20 Oct 2023 23:15:46 GMT */.(function(){var __webpack_modules__={1556:function(e,t,n){"use strict";function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}n(2526),n(1817),n(1539),n(2165),n(6992),n(8783),n(3948),n(4747),n(7941);var o=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")};Object.defineProperty(t,"__esModule",{value:!0});var i=function(){function e(){}return e.prototype.clone=function(){var e=this,t=new this.constructor;return Object.keys(this).forEach((function(n){var r=e.deepClone(e[n]);void 0!==r&&(t[n]=r)})),t}

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21732), with CRLF line terminators
Category:	downloaded
Size (bytes):	21774
Entropy (8bit):	5.115502676294042
Encrypted:	false
SSDEEP:	384:UreDRxVh8c0SHE9Bu15oOfOWYjKssPz5rWokA/Jq2gzA:Ur2RxVh8ycre8okABq/zA
MD5:	5A761BDCA62D569A3CDE853D55F80DBC
SHA1:	33A4873C424A1FE47904DBAA7A86CE1F7BA64F1C
SHA-256:	B921A50E12AF15073D4B9A2376F6A87CEB19B34A3EB3C0B23BF57FA477DA8C8E
SHA-512:	5A244EEE0CD21F6E4B792FD9E0262A5CC5521CE5ABA7E1EF18D9AB8D4CF060094C5ED2B0B200E52A6A5C2A227910F9C41A7225CECBF65B2233E31292DAD3E8FC
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/plugins/social-warfare/assets/js/script.min.js?ver=4.4.4
Preview:	window.socialWarfare=window.socialWarfare\|\|{};(function(window,$){"use strict";if(typeof $!="function"){if(typeof jQuery=="function"){var $=jQuery}else{console.log("Social Warfare requires jQuery, or $ as an alias of jQuery. Please make sure your theme provides access to jQuery before activating Social Warfare.");return}}function isString(maybeString){return typeof maybeString=="string"&&maybeString.length>0}socialWarfare.paddingTop=parseInt($("body").css("padding-top"));socialWarfare.paddingBottom=parseInt($("body").css("padding-bottom"));socialWarfare.initPlugin=function(){$("body").css({paddingTop:socialWarfare.paddingTop,paddingBottom:socialWarfare.paddingBottom});socialWarfare.establishPanels();socialWarfare.establishBreakpoint();if(!socialWarfare.panels.staticHorizontal&&!socialWarfare.panels.floatingSide&&!socialWarfare.panels.floatingHorizontal){return}socialWarfare.emphasizeButtons();socialWarfare.createFloatHorizontalPanel();socialWarfare.positionFloatSidePanel();socialWarfar

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1097)
Category:	downloaded
Size (bytes):	1137
Entropy (8bit):	5.434873704777306
Encrypted:	false
SSDEEP:	24:2dXo4sXECCWMt9beJWXX61tmb1YXNh8Ss835Q9a15e:cY4sXTCWMyJYXIMh28SR5Q9aje
MD5:	6322E64C145335A8357C135F1C1B6CDB
SHA1:	2F400A90B13C04A74857584B22730C958362EB5A
SHA-256:	77892AB67733E90BB6B434EF91E99972D085501B142FAF28E9360E63EA6B5BAF
SHA-512:	7C9FBE1525BD66F03EDBD30FF9969A9F6C15F6242E6C2A6B724876813DA127975D0153D85C611F3E6F3A1F3C6E8D00F9648FDFC6769BE34FFD155A839D9EED1E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/ima3vpaid?vad_format=linear&correlator=&adtagurl=https%3A%2F%2Fpubads.g.doubleclick.net%2Fgampad%2Fads%3Fiu%3D%2F22876227373%2FAdmixer_oRTB_VAST_T1%26description_url%3D%7Bdomain%7D%26tfcd%3D0%26npa%3D0%26sz%3D1x1%257C250x300%257C300x250%257C300x600%257C320x480%257C400x300%257C480x320%257C600x300%257C600x600%257C640x360%257C640x480%257C720x1280%257C720x1560%257C720x1600%257C729x1280%257C768x1024%257C960x540%257C970x250%257C1024x768%257C1080x1080%257C1080x2220%257C1200x628%257C1280x720%257C1920x800%26gdfp_req%3D1%26output%3Dvast%26unviewed_position_start%3D1%26env%3Dvp%26vpos%3Dpreroll%26vpmute%3D0%26vpa%3Dauto%26type%3Djs%26vad_type%3Dlinear%26url%3D%7Bdomain%7D
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="2.0"><Ad id="IMA3"><InLine><AdSystem>VPAIDIMA3</AdSystem><AdTitle>IMA3</AdTitle><Impression><![CDATA[ </Impression><Creatives><Creative><Linear><Duration>00:00:30</Duration><MediaFiles><MediaFile width="640" height="480" delivery="progressive" type="application/javascript" apiFramework="VPAID"><![CDATA[https://imasdk.googleapis.com/js/sdkloader/vpaid_adapter.js?adtagurl=https://pubads.g.doubleclick.net/gampad/ads%3Fiu%3D/22876227373/Admixer_oRTB_VAST_T1%26description_url%3D%7Bdomain%7D%26tfcd%3D0%26npa%3D0%26sz%3D1x1%257C250x300%257C300x250%257C300x600%257C320x480%257C400x300%257C480x320%257C600x300%257C600x600%257C640x360%257C640x480%257C720x1280%257C720x1560%257C720x1600%257C729x1280%257C768x1024%257C960x540%257C970x250%257C1024x768%257C1080x1080%257C1080x2220%257C1200x628%257C1280x720%257C1920x800%26gdfp_req%3D1%26output%3Dvast%26unviewed_position_start%3D1%26env%3Dvp%26vpos%3Dpreroll%26vpmute%3D0%26vpa%3Dauto%26type%3Djs%26vad

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8279)
Category:	downloaded
Size (bytes):	8502
Entropy (8bit):	5.263376577829986
Encrypted:	false
SSDEEP:	192:wVV/HW8yRk50+oIeb6QfXxJzgnlV+ytKbTz:wVNW8yRk50HIemQjzjytKbTz
MD5:	53419A1D3FF60E0C6F1477CD19A3D530
SHA1:	2C75D812731FF602F845335B4FE5A00041F747BA
SHA-256:	E26F8832356AF5FE7267A87E7EFE5CDA8E564DB761B839134B84C251B629DDC9
SHA-512:	584B9A90861789468C7E62D3F67298CA957C144288E1E2EDE98349026364328F7133211FBEA7513D570CAD439A3E4CC7C3E7A3910C3CAEACFBE727D6CA09DDCC
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande.ad3b124a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.ReaderMode~bundle.Articles~bundle.AudioSpacePeek~bundle.Birdwatch~bundle.Brande"],{31099:(e,t,n)=>{n.d(t,{ZP:()=>b});n(6886),n(71372);var r=n(2784),o=n(25686),a=n(73186),i=n(45184),c=n.n(i),s=n(78525),l=n(61339),u=n(82392),d=n(29496),h=n(50329);const m=c().jcf3e7a2;function p({animation:e,autoplay:t}){const[n,a]=r.useState(t),[i,c]=r.useState(0);return r.useEffect((()=>{e.addEventListener("enterFrame",(e=>{e&&c(Math.round(e.currentTime))}))}),[e]),r.createElement(o.Z,{style:f.container},r.createElement(d.ZP,{"aria-label":n?"Pause":"Play",icon:n?r.createElement(s.default,null):r.createElement(l.default,null),onClick:function(){n?(e.pause(),a(!1)):(e.play(),a(!0))},type:"primaryText"}),r.createElement(u.ZP,{style:f.frames},`${i}/${e.totalFrames}`),r.createElement(o.Z,{style:f.slider},r.createElement(h.Z,{"aria-label":m,max:e.totalFrames,min:0,onChange

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14160, version 1.0
Category:	downloaded
Size (bytes):	14160
Entropy (8bit):	7.984366061864312
Encrypted:	false
SSDEEP:	384:xuSsnqITlR8xFPvcabnz6OjCOntQsJjgaijTs1Q:xRsqsUxFncabzCi/jq6Q
MD5:	6CAF2B9A15E4AE129857767920794068
SHA1:	DC6946A2C472822BC25B5FAD19587B998A62B07E
SHA-256:	500F8AAF69DDCF71A16CEAE58C927F03371B33665185E16DF347B67F7F11BDB9
SHA-512:	9FD2548F0362D28EC755313FA21051105C5651865A67836FB1B368B0065D254F32F3460C07232CC564838FCC984CE0E4C8FD36EE63BF45BF1D3E247F14D62685
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2
Preview:	wOF2......7P......~...6..........................t..b..&.`..b.....d..\..6.$..4. ........l%.....'J..GQ6Yk.H.....j.!....lmA.q.Fj...w.5c.s.{6tS.q..t.:.i..z..c-..].8Y...q.k.M.....b.e.)../.I~v...@...@..H+kr.w...#.O.Tk......AT@.d.....6.a.U....8..{I-.S..6../j.f.M....\|.L...Q..O..\.M...~.#..ER..S.r;v.n:.w.......;..I......D!.F.4......s?I.....:.L....k."-..O.G..1........V[...../.Bk{E...x..FL.N..hs....2..f...U0..~...jy.E....b........g..VW...p.n.I.....\s....evgayMM>~D.M~[..;.._kl.....D.l..n..*...#v.?......Z&...X.V........V.=.....}...?}.FY}}...s..GC.......^b..v...%....CQ...IQ&.).....}.2.\|._...U\|.:...j...D...V...L$T.V...6....?.E....}.a...."...............Jr......BM.Gem....H.g...F....0"h$....P.q...0.H.`H$.tq.....&SB.\|M..f.ai&.-..s...1....P..(.K.cS...1.......y`..v@...G_.(........E%c.)...v.N...z,............3..S......^'...@....\|.............ln..8.YI...w..?dY.0J..O.c\..\,..Q.z...w......bI3(....j....y9....E..H.S..t.d.5e....u.l...#.A.....@&..j..8z.W.50...

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	167781
Entropy (8bit):	7.97036539884559
Encrypted:	false
SSDEEP:	3072:RI892ABbkUbQQC8QGG2ph/I0XDmUkMdq/UPJ0yt1WTpz8pwhNWfwo6:Z7xs7tGzpNI0qUkk7JPO8pwc36
MD5:	B703940AF8393AF43CB23EAB0F80DF53
SHA1:	17EA4A2B4B7678C42D0B2A928AAE20B3CC037199
SHA-256:	5F078C72733AA5D15D6359AEAB4BF7408B499F42EE7EC41BCB0FBBC7CE538DC7
SHA-512:	6376B1908036E5ED9CA6F85930243BF649D443E224BEA990AE3EBD063CD05711D160147C7F85FF05D7858CC9F7CAD755C6CBF7A5F7E42C921FA044B51A07E329
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.x....PLTE.......................................................................................\|.................z...........y.w.............p..}.s.......o..y..{.....b.p..u....h...~....l..q..`..r.......\|f.._..y.y_.~l..o.u`.uT.zc..`.t\..W{....p.lX.rWg...lG.ub.yW.jX.kV.iL.wj.u[<..rwx.sQ.dS.c=.hV.aL]u.uoh.cJ.jQ.`>gou...{iO.ZJ.`NqgZjhe.Z>.ZH{aK.XF.W;ibX[di.V:q[JGe.\|VEzV<b\W.N@rV9.N3hWFXZZxL?xM6^VInN=mM-dN?IU_.d.wF1WPOnG7eJ7WNCKORfGpB)%V.XI7bC4OI@HJJe?)ZDY?3PC2.S.GD?;EQc9%Y=HB6<ACV9%]6"N;.,C[M<(D;3::<U2.N4.1:KG6%>81.Bt751@2#-5EK,./4940)002E.>-.&.?-44!.3^)+0?$.+)$5&.")9'(-#'05#.$$+%$%.%5'#. #, #) "$* ..".3..1...!).!$. ...'."<%....#.....(.............$.........&....!.........................................#.............................. IDATx....lYz...xn.P.....f.M..Z..............c...6.8g.....`.`a0..$.I+iW.g'..y..uw.......TW.7....[...............S...O..h`../.,..@...a.V....6P..Z_<.72G. ..7l.T.......-./....).rP

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7950
Entropy (8bit):	7.979362721369481
Encrypted:	false
SSDEEP:	192:1EqI8pJlQQ41Mqj9m9YJkKA0/jd/th2BOYu6eOD4bL2f:1kYlr41MqM9YJkKvj21PD4u
MD5:	B3A3D88269DBAFDD0CED943512AB5DA6
SHA1:	6369FFE8FDB4894C42B1E2E13039D75ADD33196A
SHA-256:	F74E6E43D8875C94199C2A3DD2D18419ACF4B900026A200939BA6A042DF8EB2E
SHA-512:	2C11E70A856ADEE2E3DF40CA8721B2E6B18456DA90D38DFB650E940099F44F19866364FE9CBF7E68846AAB5BE76E82E78EB97A384C8179E0A20E01C429CE5DB4
Malicious:	false
Reputation:	low
URL:	https://s-img.mgid.com/g/19505572/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpiZXN0LHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wNC80NjYwMjMvN2Y4YWJjMzFjOGI5NWFlNWUwYWE3YWUzOTE1NGNkY2MuanBn.webp?v=1716532085-p_ql4elvU7TdFW4NuTyyFiTRBO4i65fo4LcBGg0o50o
Preview:	RIFF....WEBPVP8 .............>.@.I.....q.iP..gl6P....x....b!WF..-?.E.d.O......._~......8...)........y.v.W..........g..j,.`&.y.j.yr.!w...!.#..'P\|.........$.I...i.s..N.t.\|.b..d.{g.{....BE...O.V..s.'...{.5..\| .....!2.....9...v.f.../...X...X.0#..?6.ap/&.w. ...Y.....2.]7.)=du..{."9.<..r.}.'....T...$......j.pd.2...1.%=..\.km.F..MLy..H....NM...q....x(...]..._`n>J.....I}b`?.GL..6a...Bd'...U[C.J...&.aN&<Y.\|...<=0..N..r..bq\|..xL.WG3. kpf.(\Y..N..4..2.h..B.7...LJ.......q.f..k.Q..P.;....&.x-....N.d1........EUSy...V...Y7..c.......}i.e....tn..b.3...Cl1U...$.WV....u..........$..TT6..s.HK.-...v...h.../w......B......q.9H.... ..0.3.9......2........O.H.........3..)^m.>...JQ..1..'"2O........a.T.Y.KHe.4...@..R..=j.V.....c...1....(#...,.&..FtX-.].>V...kt./ql<..f....9...."..Y.g.S..<..Zd?!.....e.V&wu.=....R...=.)...+.-.p..c..7...(.D....0_...A..<m.H"..<0..J..A.R..!2..,$.N...;....@IO.QK{.s.c....f..X.Ra..L.O....n... }9.0>.....`V.......[W...8(.....q

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6079)
Category:	downloaded
Size (bytes):	156549
Entropy (8bit):	5.2833098034352535
Encrypted:	false
SSDEEP:	768:daQHFi0H+tOGNgN0k2FIuEegbhbfRFb8781bhcQcsPe2EG6kHJ80AAPRd9Grh3tK:dgcbZdZ8APRW2FcxmEUATCT/2a8BC
MD5:	F89DF58AA2EEF6DED95D9D2750B240FC
SHA1:	EC60CC7B744DE4B9FB038E24BA421B951069F69F
SHA-256:	884D973C0A12E3FA10C17876A989F3A8563DA35CBB1D9B4BC2F2DE7DB7E225B9
SHA-512:	1456FCA8B55F436127494F9C2353E9AA513E50FE45E6D0BD7A96A5E7F1E0F0661A3B8D15D3A4060F4A04367B8C8C313F4B50C7AE8E8874CB1E5A3A387E93C48F
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iGgu4/yv/l/en_GB/vthHJGQUf_5.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("AnimatePresenceGroupStub",[],(function(a,b,c,d,e,f){"use strict";function a(a){a=a.children;return a}b=a;f["default"]=b}),66);.__d("AnimatePresenceStub",[],(function(a,b,c,d,e,f){"use strict";function g(){}function a(a){var b=a.children;a.presencePayload;return b(!0,g)}b=a;f["default"]=b}),66);.__d("CometAnimatePresenceGroup_DO_NOT_USE.react",["cr:1787128","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsx(b("cr:1787128"),babelHelpers["extends"]({},a))}a.displayName=a.name+" [from "+f.id+"]";c=a;g["default"]=c}),98);.__d("CometAnimatePresence_DO_NOT_USE.react",["cr:1787055","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsx(b("cr:1787055"),babelHelpers["extends"]({},a))}a.displayName=a.name+" [from "+f.id+"]";c=a;g["default"]=c}),98);.__d("CometAnimatedRevealContainerStub.react",["HiddenSubtreeContextProvider.react","LegacyHidden","react","stylex"],(function(a,b,c,d,e,f,g){

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	162629
Entropy (8bit):	7.963202885658453
Encrypted:	false
SSDEEP:	3072:qEdqwrQH8otzf/g2oJwdPDW9FCtaDTSUNC1STnqo7kOJqdihfFVEVOy:qEd/rQcMn2JwwwIim/7zFtS/
MD5:	E0048CC02D8C56F87AEEB82AC11D9B7B
SHA1:	4732D3B94AF012D4F767A0EEE32EF1046C0488DF
SHA-256:	6BB06DC8AE7707A9ACA89C5CCD6BCD621C63BAABDCF53995FC15437919DF9CCB
SHA-512:	03C9CACF2A603958C55DC5F90FEEF2B142436421753D1B46C6F625C7211C9A2B5030AF2C3DF8D4ABFC99C1CF5BE23279CBBF9EBFF2909A36F5042F6A7B49FAAD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.x....PLTE...............................................................................................................................................................v....................Y.............e.........@...............w....l..<..........ljr..~....t...u.......~../.z...iC...uZ..Em..p...\|r.tm~~~#....+f...pQfx..tkTz..JJdv.uuofu..l\qxO[u.q{7v{&Uo..gFsld.OV...gjgrfVQh.lr Vg..WMXimyZR]hKg^Z8g._j).,-I].Y[uiZM_i.wQCWYZFW..o.eSCZVNXX>U_.5U....LT[iIBLUM8P.IW7..8gF7WKD?NrIW&MW.IJP..)WF8CHZ}/6....J.IF>b;0.P.CEJCN....>J'V9-I=5....>.;=<:E..>..>q3:N8<.K3(^%%2?....>3.6.324.3.43!\|..D).'08(7..,../V&0%4(".p>..h.. /.!'2.#."%$0 ..(.T....'#...%.E..2....h%....8..'..]...............%....Q..!..C.................4.....%.............................Ir..x.IDATx...1H.@..`...,,W0&......m.#.!w. .q.[...J.F.A..i.0a..L``...`..K{....9A..e..A...........................#.......<eL.3Q.....%}I.0.Hj..\...1.2xs\...%.KT.f.q.9._......RY=S..S.4i.

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10699)
Category:	downloaded
Size (bytes):	10887
Entropy (8bit):	5.317831519813348
Encrypted:	false
SSDEEP:	192:Eab2Coq+nhzPOF1bsoq+nqycpMlP8hOBHbNry2RgPHgMJWSktMlRFTTQmHOePELw:Eab/oq+nhzgbsoq+nqycpMSsBHpryUg/
MD5:	4582BCBA7009443D6EC1A7A821BEFD03
SHA1:	ED214456578A79697655989AD8BE35F9C2C1388E
SHA-256:	BA08C48143F5A5E428E2DC11FBDA6A252365345AA385E402B9F094978222F9D3
SHA-512:	EFAC93A4EE5F1954C4E3885079C3D04CBECC5D37CB987C90A4469E761303F964E9AAE1E6FB01C16D7BEAEF7B787271F2E30FCE951F4214AC4BFDF9C1C9FCC9F7
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch.cc6cd58a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.SideNav~bundle.MultiAccount~bundle.JobSearch","icons/IconChevronDown-js","icons/IconChevronUp-js"],{44910:(e,l,a)=>{a.d(l,{ZP:()=>B,V7:()=>W});a(6886),a(36728);var n,i,t,r,s,o,u,d,c,g,p={fragment:{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"DelegatedAccountListQuery",selections:[{alias:null,args:n=[{kind:"Literal",name:"s",value:"4bf0"}],concreteType:"Viewer",kind:"LinkedField",name:"viewer_v2",plural:!1,selections:[{alias:null,args:i=[{kind:"Literal",name:"status",value:"Accepted"}],concreteType:"DelegationGroup",kind:"LinkedField",name:"list_delegation_groups",plural:!0,selections:[{alias:"handle",args:null,concreteType:"UserResults",kind:"LinkedField",name:"handle_results",plural:!1,selections:[{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"result",plural:!1,selections:[t={alias:null,args:null,kind:"ScalarField",n

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (861), with no line terminators
Category:	downloaded
Size (bytes):	861
Entropy (8bit):	5.719823191571401
Encrypted:	false
SSDEEP:	24:haoDCfJ2fJftYF5Kpp3i8Ra9veU5iYGPqa9UOiYhqa0M60YSF5G:TeORtBppHRaVemiYGSaziYwa0MlYd
MD5:	CEBD4E5DC983C905D251D7BB5BA79D74
SHA1:	B3AE0ED916C78EEDC2196BAF3AE1F66AE77AD519
SHA-256:	DE85B4FF49DC00090B056F3D7C069629602118C7537624C7B8F807D56A0D60D4
SHA-512:	A470CF0870D590FEFAD22C30B2AA66D67604CE00DA33BCD73A797F23AA72AAA4E88F31B5A56B0307FAC1E04E9D84B0E41B89C5C0D03ADE83BB76AF75545BB010
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=6035134773&adk=1088046264&adf=3378254834&pi=t.ma~as.6035134773&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010341&bpp=1&bdt=2802&idt=2829&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=2491&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=3&fsb=1&dtd=3036
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CJCGt4jUpYYDFTaR_QcdjLwJBg"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-7666278362879166\\\",null,null,[[\\\"ID=ef25a511dce2f2ce:T=1716532015:RT=1716532015:S=ALNI_MZGatTLHkUZUNTIVdjjiccoGr06Nw\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",1],[\\\"UID=00000e2baa271a01:T=1716532015:RT=1716532015:S=ALNI_MZRp29fHXs_FfzPM5VMo4PTqJfclg\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",2]],[\\\"ID=57b60de2d9cc0ac5:T=1716532015:RT=1716532015:S=AA-AfjYK7Oq-O_lxWa2Y21GSwNI_\\\",1732084015,\\\"/\\\",\\\"pjnewsletter.com\\\"]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://dsp-trk.eskimi.com/tracking/load?cntr=us&cm=206591&cr=1322050&lt=1732
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11014), with no line terminators
Category:	downloaded
Size (bytes):	11014
Entropy (8bit):	5.2334448949295345
Encrypted:	false
SSDEEP:	192:OkNqy91jdxEKQTvZMVrox1sZmmHTZD0GpJYhMoygCC6YVRyX2cPV9:tndyvZMuW/hguYVRyP
MD5:	CB2D7F2AFA30286B3081D30FDE864CA8
SHA1:	7555D01EADC5906347A6792EA7F14D2377227C5A
SHA-256:	ECADE5B0A7D40B38B068100F231A8705DD9462E568C6ACDA38165182A51E8422
SHA-512:	8A620B849DBA61F87A4D9E7CF4883A9115CB2270825DB00C449F75B79192514F4315A535AE1BFE57A1C39293EA2F4FFA506C34E79FAD84F55246F6557E2C024F
Malicious:	false
Reputation:	low
URL:	https://dsp-media.eskimi.com/assets/js/e/utr.min.js?vv=0&trv=0&trve=0&src=utr&bId=1716532081333.2.fV4aFMLDonJ85kzpjgiusA&baId=ead-a23c63435ae7ed639763f101de087282&mr=0
Preview:	!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var t=function(t){for(var e=window.document,n=i(e);n;)n=i(e=n.ownerDocument);return e}(),e=[],n=null,o=null;s.prototype.THROTTLE_TIMEOUT=100,s.prototype.POLL_INTERVAL=null,s.prototype.USE_MUTATION_OBSERVER=!0,s._setupCrossOriginUpdater=function(){return n\|\|(n=function(t,n){o=t&&n?l(t,n):{top:0,bottom:0,left:0,right:0,width:0,height:0},e.forEach(function(t){t._checkForIntersections()})}),n},s._resetCrossOriginUpdater=function(){n=null,o=null},s.prototype.observe=function(t){if(!this._observationTargets.some(function(e){return e.element==t})){if(!t\|\|1!=t.nodeType)throw new Error("target must be an Eleme

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 855

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6223)
Category:	downloaded
Size (bytes):	6444
Entropy (8bit):	5.370524289210556
Encrypted:	false
SSDEEP:	192:CBA2FDwDFGiGJXQdvTZ6rjcGv3X7czP0n:CBtFDwxG3cMcGv3X7czP0n
MD5:	BB2B2F41C6227754E249F7B3B6F37DF3
SHA1:	79A1D1DF551DA495D2DE692728439589D525284E
SHA-256:	1068E45FD6A8180D8EA362C23C6A6E8F70BF67F08E18D87ACD3BE0909649E0A3
SHA-512:	63A6A397C5990C3B0D0698F73AE40B11EEE2C0CA5DB984DACEF724982B93FB9EAB3269E474C95A4F37803CEBE86BE6FD004B93B601E5D37D5016FB98BEC33345
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.RichTextCompose.2a0ac11a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Compose~bundle.DMRichTextCompose~bundle.DirectMessages~bundle.RichTextCompose","icons/IconDraggable-js"],{54477:(e,t,r)=>{r.d(t,{Z:()=>u});r(36728);var s=r(2784),n=r(29496),a=r(45184),i=r.n(a),o=r(16489),d=r(60673);const l=i().a4993fa2,c=s.createElement(o.default,null),h=i().i0db46e6,u=({dmConversationId:e,enabled:t=!0,gifSearchKeySource:r,history:a,onPress:i,style:o,testID:u})=>{const p=(0,d.z)(),C=s.useCallback((()=>{i&&i(),p.scribe({element:"found_media_button",action:"click"}),a.push({pathname:"/i/foundmedia/search",state:{gifSearchKeySource:r,dmConversationId:e}})}),[e,p,r,a,i]);return s.createElement(n.ZP,{"aria-label":l,disabled:!t,hoverLabel:{label:h},icon:c,onPress:C,size:"medium",style:o,testID:u,type:"brandText"})}},37680:(e,t,r)=>{r.d(t,{Z:()=>c});r(6886),r(71372);var s=r(2784),n=r(93983),a=r(32941),i=r(88027),o=r(15236),d=r(80524);class

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16559)
Category:	downloaded
Size (bytes):	16595
Entropy (8bit):	5.257610671511415
Encrypted:	false
SSDEEP:	384:llcwPCZVWO4HIz1FsWgw8S1WG3fDQkgJ+mtZyrZCuWS:U5FZPD1WMfDavutCuWS
MD5:	661E6ABE0A5412C54B6FAD71BB67C591
SHA1:	0E36CC51DC77A6D265F529F11BD5D5A1CCF886FE
SHA-256:	719A1764B0D9860BF828AE412AFCB86C0D38E8E0E3C1A3781637F747B22A0C8D
SHA-512:	2C7A883BDFF2A9FE76462D09EFD378E5C1C3FCB757BFE5C9BE70DF2F8489A59B5F859AC25336ADC8638468D6720774F64B89A3526CE1AE641CEA292901DE86D5
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/cframe.js
Preview:	!function(){"use strict";function t(t,n){q.forEach((e=>{try{e(new Z(t,n))}catch(t){}}))}function n(t,n){return-1!==function(t,n){if("string"!=typeof n)return-1;if(null==t)return-1;let e=String(t);return 0===e.length?-1:e.indexOf(n)}(t,n)}function e(t,n){void 0===n&&(n="");try{return atob(t)}catch(t){return"string"==typeof n?n:""}}function r(t){return Math.floor(Math.random()t)}function l(t){return new Promise(t)}function u(t){let n,e,r=l(((t,r)=>{n=n=>{n instanceof Promise\|\|null!=n&&n.then?n.then((t=>{u.v=t})):u.v=n,t(n)},e=r})),u={v:null!=t&&t!==String({})?t:null,r:n,o:e,p:r};return[u.r,u.o,()=>u.v,u.p]}function i(){return Math.floor(Math.random()(Number.MAX_SAFE_INTEGER-10)).toString(36)}function o(){return[i(),i(),i()].join("").slice(0,18)}function s(t){let n=[];return Object.keys(t).forEach((e=>{var r;null!=t[e]&&n.push(nt(e)+"="+nt(String(null!=(r=t[e])?r:"")))})),n.join("&")}function c(t){if(null==t\|\|t.length<2)return{};let n={};return t.replace(/^[\?#]/,"").split("&").forEach(

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/interaction/?ai=CnAoaLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKgCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohX7wNa7gSedVBxwiJS2UtAzdEoTfvnhXOrm9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOljQnbGI1KWGA7EJdRSug8aIt4mACgGYCwHICwGADAHaDBEKCxCw96fY7_C8oOsBEgIBA6oNAlVTyA0BuBOcG9gTDdAVAZgWAfgWAYAXAbIYCRICi08YLiIBAOgYAQ&sigh=PF0qigZl3Ls&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864g&label=adpause
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (881)
Category:	dropped
Size (bytes):	77221
Entropy (8bit):	5.655968066265703
Encrypted:	false
SSDEEP:	768:ddKW29gdw0AjMq3mDUjQXTE8kCqz6qtTs92lo3ULS+SaLV3c9wZjyasx+Xsu19sZ:iW29l3mgjQXTbm/Ts92lo3ULSzOFz1Yf
MD5:	0D683BDF35D89F985A1029ABA278A5D9
SHA1:	97BC8BA038325C26B258E59BAEBB62D55498B1B3
SHA-256:	3F549D3829F1C3139F3B9803AEE55F74EE3A9A38C53A816B5344BC20C3168208
SHA-512:	35FC5175D3AA798F5ED75338CA533E53170D5062F97FCC811C3A4FBF3E8EFC7563AE67A6320501F30600314F9383358736D1E61C6BA2430AF2DEA812E80D3701
Malicious:	false
Reputation:	low
Preview:	/<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adscore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.location.hostname+"/",!0);a.onreadystatechange=function(){if(2==a.readyState\|\|4==a.readyState)window.parent.postMessage(document.location.hash+"\r\n"+a.getAllResponseHeaders(),""),a.onreadystatechange=null};a.onerror=function(){window.parent.postMessage(-2,"")};a.send()}catch(b){window.parent.postMessage(-3,"")}};</script></body></html>. //. pako 2.1.0 https://github.com/nodeca/pako @license (MIT AND Zlib) */."function"!==typeof AdscoreInit&&(AdscoreInit=function(ta,F){function bb(e,b){var d=e[0],g=e[1],h=e[2],l=e[3];d=V(d,g,h,l,b[0],7,-680876936);l=V(l,d,g,h,b[1],12,-389564586);h=V(h,l,d,g,b[2],17,606105819);g=V(g,h,l,d,b[3],22,-104452

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 177, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7438
Entropy (8bit):	7.863455923855553
Encrypted:	false
SSDEEP:	192:R0sQJBIzYnSkL9XRYPK9xKqGugO+nAUk3:ysevm6gO+nAP3
MD5:	D761C562AFC7AB8AA5599B7F50B3B501
SHA1:	6C2B8FEA9DC8174B07A62C09DBE7FDB45222FFE1
SHA-256:	D8F62FB0474C387CAF31924FF82CB89282D87F66F2FC7421160E6172EF924144
SHA-512:	6126F853A9C7B02CB63BD5210C65FB53BDC3D5E3B427DEECA3FE1FCAA171B7196E50CC940CD8DD2FAAC1D4E9CD341CFE4770AC025AED1747C36D7C9A2326FC20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............Ly....PLTEGpL..........................................................................................................................................................................................................................................(((...........................}................................................................................................................................................x.............................w................................x...................................x..w..w..v.....w......................... ...w..w...................................................................................w...........v..w....................x..x.......................w..w..v..v..w.....x..w..w..x..w..s..{.....w..............g.....tRNS.....>.........Z...f...8.....H...P..N.p$d;.,.....*T.v.\..^...F..'..r....B...@J5.X...2.l,.^a.. ~j.6.yK..........~..z/....6"R......@V...zXs>..R...@.).. ."......hFv..3..........

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1088
Entropy (8bit):	7.810875450507714
Encrypted:	false
SSDEEP:	24:zFZqoVVSiH98j9wNYlD0xHWrDix5AeoBVIyKQKjV+SSLzJ:zWoCiH9uwOlDJDLxzfSOzJ
MD5:	9748753D4E3297E4531CBD5483A98EF1
SHA1:	A5264E7D79E06532861E090915B606C041D29E96
SHA-256:	41488CA678AF1C975634A2BE97FD019F799558FD0CC1F54D0A77E742D8FDE3FF
SHA-512:	B283F88A65A26965162E9EA2A8647F36D0399F76C79F36203F2594664337160040BCCD21EF34DCAE33E4759C7F13F4DCA0195015F141CBDCC1A2639EE36ED56D
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/favicon-3-1.png
Preview:	RIFF8...WEBPVP8L,.../c...'.8...Y<g.<....H..G{..\..Ba#I..+n.R......}..o.Z.Y..]...$%...."D)...B.R..(..c... %...(B....l.V.F.d.w...#.....Y..w(.J.p..h.x.~....AR.Kyf..f..[xN.f.!...t...HNdvg.P..T.h....}.e..\|a....dJ....Tan.$0..cS.......P..Uih....?ae.`...N....yH..5.G...Y..Y....l).K.+V>...zy.b..(.'@Fg........y.]....ry"b&.:.z.\;.R......q.y..1...........8..Fy=."...:.l...gK.;.....(..SS............M........F.q.(.M....+...jK....6.nW}{ .tU.5...[..+...\|......z)..+@n%ke...G{....C\4#...6.m..{...p....#..F.1.6V.59z....P..w.I9nA....!.`M.(\|....,.{$.0...P.l}....z.DYa....D..t.q.@..>n..Fa.v....(.. .su..?.ZB.z.=.r.8.....+......0^Z..tvVu.......aS........%...l.......w.._u,........"c.rJ-0..<.O..........B.R.(.sT.....L.M....&Vw?..c*..]..>i.......L......"K...P^...r.Q%..Y.V.M......<Z...1F.2.u.3?L.n...L.."....:..P.(V{.;+....L.{e..{...jh s..\|.@;.U.......l...9...el#.zI....c.#.-V:8M.z..6Q..f...........V.+Up...N..u...C UX.24..H.cD.;Q s._.......DRWJX.n~.l......%...... :.=....>.w..

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0010b00002PIxPJAA1&src=aps&ver=1.10.0
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468)
Category:	downloaded
Size (bytes):	1691
Entropy (8bit):	5.463029685009129
Encrypted:	false
SSDEEP:	48:iIyyDAl2mGalx7WKYQOy9+iV3nHzy/+QLv6JWmEyDaU:mysl5FlZfYZM+i5c+ecCyGU
MD5:	594E0D9FFE7302A9FD38CEF14923F04A
SHA1:	D720FDF5DD5A38DA13A4EB149848CC11B5152716
SHA-256:	DF795D1A4EE3C8C8E5275F3DFCBA9000E7D30856F166EEAD017C44764E53DF11
SHA-512:	3F1D5F280B701EAB0728318A5BAD3A62DA100A955AEEB230A5D021DCFAB79864BEA46C574EF680FC953C79D0CFF8B8C096E1ED7D5020A979032E39B90ABD155A
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich.5ffff2aa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.Birdwatch~bundle.Communities~bundle.Compose~bundle.DirectMessages~bundle.DMRich"],{58804:(e,t,r)=>{r.d(t,{Z:()=>p});var s=r(7896),o=r(2784),i=r(77089),d=r(30700),n=r(24797),c=r(46110),a=r(60673),l=r(48501),u=r(23335),w=r(92160),h=r(99072),m=r(62854);const b=(e,t)=>t.tweetId,_=(e,t)=>{const r=t.tweetId,s=r&&m.Z.select(e,r);return s?(0,h.z0)(e,s):void 0},p=(0,w.Z)().propsFromState((()=>({community:_,hydratedTweet:m.Z.createHydratedTweetSelector(b)}))).propsFromActions((()=>({createLocalApiErrorHandler:(0,u.zr)("QUOTE_TWEET_CONTAINER"),fetchCommunityIfNeeded:h.ZP.fetchOneIfNeeded})))((({community:e,createLocalApiErrorHandler:t,fetchCommunityIfNeeded:r,hydratedTweet:u,onPress:w,tweetId:h,withBirdwatchPivot:m=!0,...b})=>{const{featureSwitches:_,viewerUserId:p}=o.useContext(l.rC),f=(0,a.z)(),C=null==u?void 0:u.community_id_str;o.useEffect((()=>{C&&(0,n.Z)

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=9130&tp=BEES&tpid=AAJTiE7MoGcAABTuYnJhWg&gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Category:	downloaded
Size (bytes):	21528
Entropy (8bit):	7.988581564927641
Encrypted:	false
SSDEEP:	384:47KwKbMXQq5EvJxCscVSq5aR3lYjLW9Sh0G64JKxH8emqhgvdnKa/HyrTX:46bMgqGRYscWR3CjLWiBHQ8lcgvdnKaG
MD5:	780E2060AB7A6A4FA797405755B62441
SHA1:	A99F5EA68F7A617ACCE6F3FD49411142E3B54CF7
SHA-256:	CC308BE27791DC58E7CE19F0D245EF66B8EB6975B8C7AE22D97C09927C84DC48
SHA-512:	C6635045E38101A8975C6885882BA5FF7093444F6679480EFF8B8F935CCD124A38204EEC7CB27C4B48B08D7191BCCEB3F6E66AFC1880C27036A7467B06F4F2C3
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2
Preview:	wOF2......T........ ..S...........................4...L..0.`..J.....`..-.....6.$.... .............~.Y=..N....r.@jk...l.......!.....!R..m.;Dl.e....kv.U......;...(.;<G.."F^.MV.0 ....a1e2k2on:.q.x...Me&\|.NlR+.,,2\|..u>.!.P:..z.}F....e.........(.EEA.I.L.GT.-..Bc..N....(Z{...{..BL.I}..D.T...... .......1..U..\|jl..6X.c...,@...<....>+.<.V........x.w.=..{.%H.P3.L7..61....J..k.f...e."...9.v.\|@..._..A.....rO..,.......NB..x..R...........x.A.y.PD.g...-.h7s...1..y2.K.,E..2._.......ip.%...T..E.p...Y.5.u..N....{...I...Q.h..ntWX..(].OM....=.s=.Z._.........%.3_.0.!... ....E....c.!.@..k......=.k.....c.D".H..P.L..\|.._..%,..4.....Pe.x0..Ip...........j.\|....Y.+T#).m@.\..].X.;.e..h..5....U\..T9Q.....E(.(.J.....6Wf.......ep......y.)s..hw.....=...........[.#@.......6.".b.i.I.Co"gRf.".......D...w.........M...R.B~.h.a..4..]}n...QY..#\\.m...2.TY]..P&...,.n..5c.T0Q3..:....Y...v{.X........!...\......K.n...Z......cD......{..t.,.$b.G....l. ..x.q.3..U...",..qR...A.2b .IH4 .'

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	227
Entropy (8bit):	4.634284619742124
Encrypted:	false
SSDEEP:	6:Yzb1jDE3t7v4qsDE3t5rbnhmqVx+b1jDE3t7vMY:Yzb1jDEd7GDEdNbnhmqmb1jDEd7Z
MD5:	96B4A153A57E6AFB7E6C3B649040851D
SHA1:	63FC16378C2A2CD322C0F50EBD740CB6B7145883
SHA-256:	B37D8030B08FB21B8FD130C5C779A9DA1DE188AABA3DD7ABB30764A47CEE4C3E
SHA-512:	6E6A2E9D50F7752CC25BAA624CF04CA23245F7D4B18E7D921FBB05E6A336599BDFA01DEC4B7813C10D96F24127588F060B64476CE40FF0DDC6AFA22D63192E36
Malicious:	false
Reputation:	low
Preview:	{"hadronId":"0001yum0ea99jha6clfcgeaikjhlll68igi8eiflgfabackkc2jl","hadronIdv2":"0aus99jha6clfcgeaikjhlll68igi8eiflgf00ede6fifbafaejeg86b6dhkk9cae8e7h9","haloId":"0001yum0ea99jha6clfcgeaikjhlll68igi8eiflgfabackkc2jl","cf":"US"}

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	134
Entropy (8bit):	4.988231661403621
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4DCVeBELAiOzt5TpmH/nM:8WiIUemo/HPbfCYKpY4DCVeELABZjmHU
MD5:	D7751D30983759C80820E17A41BEA462
SHA1:	076084757B70922F93E1B6EE663287A6B568F377
SHA-256:	C36CBF0C5FEF531A43CFA6CE4659FAF63F3FDACD3EF79D6280B88C75FC1C0A77
SHA-512:	2BF3AF2C8BCBA9D50EA6CB4E46F98FAE70026EE5E64A4B25CB47718E4F2582A85EEEC04A38B9AF8BADD74219AA24F2ADF20CAF599DCD007B63F9F1E903B32B5C
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"1"})

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F170737076%2C22652678936%2C187271864%2FVideo%2Faniview.com%2Faniview.pjnewsletter.com&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&env=instream&ad_type=audio_video&correlator=3447120804420273&tfcd=0&npa=0&gdfp_req=1&output=xml_vast4&sz=640x480&max_ad_duration=60000&unviewed_position_start=1&vpa=auto&vpos=preroll&cust_params=posB%3D2.1&plcmt=2&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=2793355114&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053494&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&scor=1178863386301216&ppid=1716532025945-172031150014-000201-002-004790&ged=ve4_td34_tt17_pd34_la34000_er1396.182.1546.482_vi0.0.907.1263_vp0_eb16619
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70159
Entropy (8bit):	5.304224218716712
Encrypted:	false
SSDEEP:	1536:ykmSnifjFHKGh42DKzhhg4dOizVk//PvosSJicer:fifjFqmWhS45G/3osS4cer
MD5:	38FFC7DD7A7EC4604120B1E90E220A3D
SHA1:	DE858378178FA66E02E1CB13A7618DD1F802E491
SHA-256:	E8F44127BDE5E30BA49AA0BCE8F22EDF314036292C1EE5639662CB082E3DC625
SHA-512:	9ABED0126B7AABC410E129B156682D72A9AB0AF8BB4F024BE5B22CDFB2EC6C37C3A6635B1968862883DDBFD902FC6DD587AAC16FFD1590D7D199E0E27351A7F2
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/modules.common.ab59dafa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["modules.common"],{49898:(e,t,n)=>{n.d(t,{Z:()=>y});var o=n(2784),r=n(6555),s=n(82392),i=n(400),a=n(73186),l=n(88809),c=n(24949),d=n(92160),h=n(16657);const u=(e,t)=>t.entityId&&h.ZP.select(e,t.entityId)\|\|void 0,p=e=>`/${e.screen_name}`,m=e=>e.name,g=(0,d.Z)().propsFromState((()=>({user:u,badging:(0,c.P1)(u,(e=>e?{displayContext:"content",isBlueVerified:e.is_blue_verified,isProtected:e.protected,isVerified:e.verified,verifiedType:e.verified_type,translatorType:e.translator_type,affiliateBadgeInfo:e.highlightedLabel}:void 0))}))).adjustStateProps((({badging:e,user:t})=>({badging:e,link:t&&p(t),screenName:t&&t.screen_name,text:t&&m(t)\|\|""})));class b extends o.PureComponent{render(){const{color:e,link:t,onClick:n,screenName:s,text:i,weight:a,withHashflags:c}=this.props,d=o.createElement(r.Z.TextFragment,{color:e,link:t,onClick:n,style:_.wordBreak,weight:a,withHashflags:c},i,this._r

Chrome Cache Entry: 871

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 768x403, components 3
Category:	dropped
Size (bytes):	50220
Entropy (8bit):	7.978819374909206
Encrypted:	false
SSDEEP:	768:VVaITa7x2AMG/1aKxGl8hWPokmXXvcdyDaVmC6lKYKtNGg3SUX1nn:aITa12AMmtxG2WPneXraVW4ta0n
MD5:	925CC892C6E17253FEB8F2C9F178C396
SHA1:	59A8357062CFB6AD3573F2DF23D78F4B17C8E876
SHA-256:	4FCCF0B0293B122697A6D08E22728133E4901832839C993DEC682C8FE71C1CA1
SHA-512:	2EDAF28DD001460316CF28EE07E1AF6E6F7D0419BB7EDA2DDB2609D9EC54E39591FCAA75FDAD7452BE44928FEA0AF412F330A31C356BA04393A5FE91DB74B733
Malicious:	false
Reputation:	low
Preview:	....."Exif..MM............................................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr.............."..........5......................................................................gGM..9....t...t...u...t...t...t...u...u...u...u........t0..tu......C........&K...A.....o.0cvA..P,P.$xQ.&.#Z.$4....G..-..n.8...a..T......v...`.".+#.<@.p..I.....5.....t4...M.....z]...9.X.g..[ f..`....D....jPJI..4.d.[D..H%.......&..6.Qp...,.C!.!...Z,....l..B]K"...h..^bq..L.._YU8...3my....T.dO....{dO...bD....E..z.VR.j..%..:.-...K..ah...A.Y..Q.R..E...=...}/.t.o..4..c.B.^l...@C.#..e!.FS....Il..Gm...i..HHP.nKKNX.r[em6...2..!..Q@. ...A.6K&$.R$..i.M.1...F$[V....5..5.].:.V.9..Q...f8.evxY....v..Uh.i.."I-..$.)..B.J.d..%.....u.\|?..H..&...9.~Z..F...x.@...$..&.M0....#m..N.h...!.."iJ%.....`.n7!.ii.....BB\I&.D..D.D... .L.`...'PI....^...,..4`..u.....7d*..J..b4.:E)".5r.2.L...U"...%.'E.w.. P..u.\|?..

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.362961159354576
Encrypted:	false
SSDEEP:	3:bh6G3XWZNDrMyMcbtugSUhdei3XWZNDrMyMcI:bnXS5JtpnS5O
MD5:	F71C4EFD36879E28A721AAF93B559B3F
SHA1:	2AA52C4FD618680148F935B280F96496EFD7E153
SHA-256:	F39FC3D962FAE023EBB725DFDBA524226C593C6EB2BC2C1F23C454D63CC10EC2
SHA-512:	8EB53CB46F668813C99768F701C00D1E2FF18FFE86F50C0C0A17DFAC06B339DCB513F58972CDEDB5A372035596806F69F50E5F6228B5F0AFE5992E13AADE080F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkbMnFS9SzlUhIFDYOoWz0SBQ3Fk8QkEhcJsA2cf48--pcSBQ14bxIZEgUNxZPEJA==?alt=proto
Preview:	CiIKEw2DqFs9GgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgCCiIKEw14bxIZGgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgC

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://c.mgid.com/pv/?pr=pjnewsletter.com&lu=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&cbuster=1716532082030498894897&pvid=18fa948f56ea8b5551e&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&site=733245&i=1&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	294310
Entropy (8bit):	7.943851124753812
Encrypted:	false
SSDEEP:	6144:KfJP2pZoeVO5J2Q8tems55AXmgsZ3grQktEcga6JB+snh9im5Lc2eON7q0b8:KfpKoeVO5N80AvUxOEcgaURhUm5Lc2RE
MD5:	A9A16135E3EE89EDFB4480F84E9CF97E
SHA1:	268CE5565860DCC2BBF0785270BA08F19CA46E30
SHA-256:	0A2B1CFC0EE1382006E1879EF41D7B8336F27EE278F8AE34FFA5884A0DA6E95C
SHA-512:	65D77B160B1D789A6DBD56C6B85FCCD39C472CF8A03D6D825E90F1D1050866A950F7DEDA08BE40FFA547FF4D49E5A1310EB7D470852BD65AEA27B1453B0EAC5F
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2019/06/cnn-1-768x403.png
Preview:	RIFF.}..WEBPVP8L.}../..d..Pl.I.$A1S..j..... .......n.v..J.~Z.]Y..d.j......i\.o......t....[....z....`.._....&.E.I~$...s.m.jo..w.......6I>m._<....D..vk.$.../...~....=.1.....\.^/J.Y..N....6^....1.....&i...>.\...e..I'.g.9.....u].x...L'.!.....Izu..I.L.>.....rp.&Y.LV..1Y.<0.v:....!..fuf..k'1;...3k%.9"&...G..p:.b.v&I<..^}..-.&........$... .W?..G.....NT...n..].i..q...'..iY@.^[x...n].......... ...<...[...D..x...8.M.}................]...$9.-;Wk....O...}.Z.}.....C14CQ$.z...m...0....q.xuo../..}_o1"b..6..j[.$....bXC.._..Z...c8..q>.a..c._.....j...J.;...x.MD......V.....B.t..C...q...Js..Y..[.u.Y.K..7...!...?"..C.......q..._K.v:.DL.."..p...~.Y...X[..r[...V+}.Uu....\..\|0.[.a.8..1...E<.s.:.....).......G.....T......W,.j.D.z.:h.T..>8..s...d.+.!....g....X.]...{N......D..w"...!;{..8n.<..>O....O......=....f..8~Ss.......[4H.L.4;...D..6.T..G ..\|....v...>......3ep...p.Pg..}....D.....+..L..O..."-...A...U....2...4..l.I.M..............<...+hh..

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (551), with no line terminators
Category:	downloaded
Size (bytes):	551
Entropy (8bit):	5.026450316376014
Encrypted:	false
SSDEEP:	12:zAMsXC4V8q7QL6SFL6+MCpKNE90MVdIf9SoTWHEi6H6mV:zAM23Vh7brTCQO90MV89S6WkXamV
MD5:	042C6131E836A6180824D112E6469C9C
SHA1:	F28269FE7ACF20C093DD2E1D87A03874806FC3D4
SHA-256:	BBD39ADAFC52028B996D873C90EA1DAC4468F06EC7E5422832C34233F9463F5A
SHA-512:	80288A7AE2CC03A8EE720F369FBB5773F80EB9172FDC82FD6BDE351CE8F5165B580748A893E7445347D9B9FE54FEBD4A115B03A0B764509FFBEEE03062CE0CFE
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/plugins/inboxfirst-by-klicked-master/assets/subscribe.js?ver=1.1.2
Preview:	jQuery(document).ready(function($){$('button.ifklicked-subscribe-btn').on('click',function(){var inputID=$(this).data('input');var email=$('#'+inputID).val();var id=$('#'+inputID).data('id');$(this).parent('.ifklicked-subscribe').hide();$('.ifklicked-loading-'+inputID).show();jQuery.ajax({url:ifsub.ajax_url,type:'post',data:{action:'ifklicked_subscribe_import',email:email,list:id,},success:function(response){$('.ifklicked-loading-'+inputID).hide();$('.ifklicked-message-'+inputID).show();$('.ifklicked-message-'+inputID).html(response);}});});});;

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	205072
Entropy (8bit):	7.991787794502786
Encrypted:	true
SSDEEP:	6144:AwOp7AQxiitByTutnX1J9E+HO5Hr9kS26kuMGDiMO0l9:AwOp78i+TiG+uzkIMGDiMOm
MD5:	CF040115DC6E034E6126B1D255717A5D
SHA1:	2883366E81C6EFCCFE475340D3D6361B0716D328
SHA-256:	BF2E610A0F48183A2C5793EA5D33E40BE8808EE1EAC755037E456AA6E1620600
SHA-512:	5E44430CD50552823D72A05037B5013BF60B89EF2DF392F2E53EBB49C7E4D1848D77A3FF548C67EB9EA30FC084E1A02799723AD4CA0AB6C665F34A21F91B1C04
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/trump-speech-1024x538.png
Preview:	RIFF.!..WEBPVP8L. ../.C........#....?73.O..c&.6`......m.3.v..C...2s+3..d[us.c1.3f.ze.(3[,==.......$..DC.@.....`..Qqpv:0."..&.`.$.F&.$...l. .!+.&5.W...G..0.......m.9r.... ..S.G..e".&...p#..P...f...$... ..#SO..j q.c....f...f.......?u.U.5..DA.z.e.Z/..fKJ....!..N.E.).#Cb.."xCV...- ..e......'c.....F......L..-_............z.5..nf.G...l..Oh...'a1O.3...jn].).....K.&TM...W...O...\...4g......ll.m...E.T.rd.D7E....hGj.3.qZ..!.&.\X.D.6.l........;.NY.......9....X.o.:.P".."..DJ.N......$;....K.u...x.......'...%X...P.DK...s....ZCv.F..q....J....-=..._..\...`q..;...K..e..UO.W.z.?.=^l..n.M.W...>=_.O..V....%6WI...n.C...m....;..3...."b...F...I.....&..6...?.>.......h.....R'....H#u.b...Q...A.....<.J.$..X....l;).v].j.8...n..aw.-R....<7...J.$.mj.....$v.5....,.8i^u.....H._^...U.........g.yt,..$..!..6.A..l..(..H..+...;.H..c.<.mRr.3."!......kN.H..).2M&K.jz.r.`...Z...n..?...\|?..7...`.#I,B.!.'.i...........FRw%*..T.f.E4..Ue1......D..E..h...^f.....`.bd.D......\PA.p...^O.O[

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	543
Entropy (8bit):	5.501580638840677
Encrypted:	false
SSDEEP:	6:6v/lhPE0EswQ9SvnkkFOShjVHAcPicZzEQ6zgiRlWCsPBG8drm9jB3tbHup:6v/7MJs/9Svnk8OUjVgO5GnR9sPBEBhc
MD5:	8C6D3D65395902083479FD327F86A1D7
SHA1:	0667B3AE1799ACB8455631AEB99CEF56DDD43698
SHA-256:	DA8B7678427D3159D0F68EC15EC42B3536ED1D0085E94AFFBB1FD05C600B7420
SHA-512:	3A1577E6DF18C7A5257D3F2E979BEECBF2924B70DCDF01573280D942A1699FA7FF216527A9B6305A5B1073257F27C0D9FD2E5E47A556A37C9707716493D418AB
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yM/r/qUPkXkiEwfh.png
Preview:	.PNG........IHDR..............W.?....PLTE.......................................................................................................................................................................................Z.C...<tRNS......C.$..0 ..".<........B.......i.n.~.....{..........o...]....IDATx^E...0.D7q.N!....[{/...u52...g.#YP.82&.Sx:.O$...g4y....a.?.2V...i.2)+.\7a.......}.Dg.....0..3..Q...e,.....*........ys.`J....l..B.W}.........-..;......<1....[~...A7.#....=q!..........t-F6p.......y.vq..Zu... ........IEND.B`.

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?cb=1716532049499
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (27427)
Category:	downloaded
Size (bytes):	336011
Entropy (8bit):	5.565338353134924
Encrypted:	false
SSDEEP:	3072:TZ1Jj2hlKqGGyDMNDEyJXyg6PrHvxXLsg2iggiEqHIA1j1qXGXps20K9tUE4otqN:slKBGyUDE6AP7taiggiEMj1C1y3qSVmt
MD5:	2FEFDB213C0697A8E5685EF226F68CC8
SHA1:	13DA5A780DEFD4E3092B7AF16983F50A613620B2
SHA-256:	CCBCDD2122DD83494989ED157C495C987DD7BD6B6CDCA6BDF7F06C7361D6EE19
SHA-512:	AB0A6463BA28486668189F55F7F3EA149B5A84FB1BF67026E433A94A3199F36544C4D7A0B26EC41819D0813DCCFCE9C9F0058B3E6A9F064EE57F5B109E8165D3
Malicious:	false
Reputation:	low
URL:	https://jsc.mgid.com/p/j/pjnewsletter.com.1604063.es6.js
Preview:	(()=>{var cn=Object.create;var Ee=Object.defineProperty;var ln=Object.getOwnPropertyDescriptor;var hn=Object.getOwnPropertyNames;var dn=Object.getPrototypeOf,xn=Object.prototype.hasOwnProperty;var $=(g,t)=>()=>(g&&(t=g(g=0)),t);var ae=(g,t)=>()=>(t\|\|g((t={exports:{}}).exports,t),t.exports),at=(g,t)=>{for(var e in t)Ee(g,e,{get:t[e],enumerable:!0})},un=(g,t,e,i)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let s of hn(t))!xn.call(g,s)&&s!==e&&Ee(g,s,{get:()=>t[s],enumerable:!(i=ln(t,s))\|\|i.enumerable});return g};var ne=(g,t,e)=>(e=g!=null?cn(dn(g)):{},un(t\|\|!g\|\|!g.__esModule?Ee(e,"default",{value:g,enumerable:!0}):e,g));var Z,P=$(()=>{Z={marketgid:`<div class="mgheader">..<span class="mghead">%WIDGET_TITLE%</span>..<div class="mg_addad%id mglogo">...<a href="#" style="display: flex !important; align-items: center; justify-content: center; position: static;">....<object aria-label="logo" width="58" height="26">.....<a style="position: static !important; margin-right: 3px !importa

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	43036
Entropy (8bit):	5.692113097327789
Encrypted:	false
SSDEEP:	768:tQJ8XUYhYxw/U3/9ovTDPdt415COEWq/3eP0jIpQ:6JbA8w0Sv3ny5RFXQ
MD5:	DF416F45FCFEE5C0944313B56924E267
SHA1:	288CE83AB46CCB429A26F79DAD4BBA9131023E56
SHA-256:	27B101995CD472351BCA908614BF320FE018CD6FA171A979CE37A810E1732D85
SHA-512:	8AB2CBD408BDC38767459757B0CF8BAAFEA7977466E3C0BF51987A40A36D5BAF76C2D4DE79E4A64B0DF92E63482A7A031EE314CF70239397CC784E8986A55A87
Malicious:	false
Reputation:	low
Preview:	...KEYF..(... .............$.......$.......,...t.....4C..4C...@..pB..............................(... .............$.......$.......(.........4C..4C...@..pB..........................................yC..!C.....PNG........IHDR.............2L.8...BPLTE....i..f..i..i..i..h..i..h..i..i..h..h..i..i..i..i..h..i..i..i..i.'.)"....tRNS..........H%/m[~>7.vRd........IDATx...;.. ..Q...X..p..z....j.%.w..............+,At\|..o...q..)].................V.C.....>..[k9+.Rr1./\|.z.}S...Q^....~....U..[.....>...1.\|...i.....1....._..l.M......c..,......,A.i..o.2yH..Uk..^.O.f...../...<.~(.n.y.}s.W...7.....n\|.\.+e.......w....\|.vR...I.U{....3.v}C..u!.B/..4....h\|......'..,.EQ<h...+w.W....q.^@;....K.n..B.G...'...L.......w.O.w.H..k..Rw..v..c..s...BGYN.g.H....^.OFw.n..D.>..k...Aw.+].n.....}.2.W.g.n3..M..,;...;.=e.3..t.*..t..=Y...G.@.gI.x..A.ml.;V...#^..n....=...t....v[..{v../.,...m.h..uw.q..+...I...y..w].m#..~.Tz... .wf..;.....J8. w.~Q......]J......n...w..:..].g.._C.N.1....tGr.wF.....

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y0/r/eFZD1KABzRA.png
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	29744
Entropy (8bit):	7.978579451502957
Encrypted:	false
SSDEEP:	768:KpXo/YR26fLJeLcqY4E2zSumXV2VD25jgOvHLI:Kp3R2kJeLcqY4EQsIkyOvH8
MD5:	49DDDFAD6793CF9AD36FCB692BCF94E0
SHA1:	920E15D05AD963DEF873376A68C19C9F28422615
SHA-256:	CC0841F42D4AD2BA7F2FBD547167EE783FE911835B1FEC5EE7FF923F5C141565
SHA-512:	BE45329DA190AADC95B870AC99D62648381A4840E82AE72555CF563E291E4809CB5D8B4A33FC4151B70A29E0F0FC0F8BC8416130C713FF07A2430858884FB596
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/277773878_3226216657699416_1442497024577550303_n.png?stp=c0.17.160.160a_dst-png_p160x160&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=euN-UVm5cMIQ7kNvgGqCO-o&_nc_ht=scontent-hou1-1.xx&oh=00_AYBEERAaL0qavIFjCf6aF8bhXo0k5hrBBUuEXRR8O626bg&oe=66561293
Preview:	.PNG........IHDR................z....sRGB...,... .IDATx.....m.U&....{.s...cM...U.....6...@..Q.DB..Z..)R..5Q"%R.CK.Ng..&....M.......5.{o.....w.'?..>...neW...~.}.~..g=kmI).........[..........c`.b.....R.SJF."RW1....... ...!.t.%w..}.t.A.".TGUU.Z..U........QK.......bDP....0.U......."..!...1.e..6...M).Pc..C.\|y... .J%.'..K....u=..1. .AO.mb......Q..."..Nw..D<..../....N....".\|...H33..b..T.....$.CCp....}.O_\|.Ew....eu.\|k..(..............c_.:s.W.OA$(.J.#..b]k]. A....Q.5.)vA...nn ..AQW.....h.'.....1F..".%...$}..pw.w.......3g.y..U`._D.JI....@.....E.0...tR...:)$ED.t..b.........+!....K!....f(.........#..U>..B...".B.m\|.k}-....._../T..MU.!.J.:N.aT.(....C.).w....\|H....Fu..b]A.....U.. .{l... .@....@....@......%Qq..\.B.{.D..8@..V'A.... ...B@.P.Wr......be..^..}RsD.......].xc..u..j......F..m..<!.....]D.Qq.@..U.....Z.F!...fRaP$w..T..".2G.....Je.}......l..j.....@%P.H.b.<yo=..dt...8.p~kk.w.x4.1..M.E..P .!...e.r...z9\|W.-....J.VK..2. T....42.O1...$.....Z.......Aa../..

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70756
Entropy (8bit):	5.313618415077441
Encrypted:	false
SSDEEP:	768:7U0Q20ixMvYt8qfq9pK9Fh/U1hoAEFvNwToejbUWtr3yHyDH43xtQ8GmWwb3XChF:rQ2pYoq9YZAEl6TFtrVDYQ8Gbwb2F
MD5:	D7AA90657AED0227993B38C5BE603268
SHA1:	244AB66833E164F6B98F52E63474947295B2E2A5
SHA-256:	DB9E12D60E1E7EF75DD057C41C3C139CC97CFC35122511C59CF51742F81D0107
SHA-512:	72A542C697F8590261A618C16FC5EFE447DB82632B374F26779DBA0174F4CC9D88E83A255EFC762CCCD9F97F490AC5C9606774682C7EB134B209B3C797472F49
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/ab5/libs/prebid/avpb8.48.0a3.js
Preview:	/! License information is available at LICENSE.txt /"use strict";(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[200],{174:function(e,t,r){r.r(t),r.d(t,{spec:function(){return Z}});var n=r(4942),i=r(2623),a=r(4953),o=r(4030),s=r(265),d=r(3802),u=r(5740),p=r(460);function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){(0,n.Z)(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}var f="33across",m=["33across_mgni"],g="https://ssc.33across.com/api/v1/hb",v="https://ssc-cms.33across.com/ps/?m=xch&rt=ht

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1147)
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	5.476063907540029
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIE6sj4wdNwRbrT4WDc2RSDf/3B+tEIKj:2e2C6lI3Fj4wdNwBoWo7L3Y2
MD5:	A6053A8C0A69135DF9A5136708507761
SHA1:	3BAC961D2DA0B8328129517E9615C650F56ADAD9
SHA-256:	BB65F3221D7D51DA154E998EBC0A6B2FA25A765454C280264D1022268191DE73
SHA-512:	ECF5AD066C08FE20EE8A8E802FC81D78E33A43BEDD86F0C17ACA055F6009129435EF4C101B7E8FE0A76860481648E1E19C0BF455FB0415FE0352247D0C34D7BE
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D70%26external_user_id%3D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=70&external_user_id=b300bb13-ab4c-45be-94d7-3b66670104f8"><img src="https://sync.srv.stackadapt.com/sync?nid=268"><img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=dae58398-27bd-491f-8e75-aff789679896&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D"><img src="https://rtb.openx.net/sync/dds"><img src="https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID}"><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0"><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c315c481-2ec0-48d6-b201-ac605ed957ab"><img src="https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=ebaf34f4

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23432)
Category:	downloaded
Size (bytes):	23433
Entropy (8bit):	4.988691933097723
Encrypted:	false
SSDEEP:	384:uifv9o67LRIHsTZQu07f087x7iY3bVyYQPDcdd8HyxlYOgjYYuXCy90fY6wEvyMa:pv9o2LRysTZQugf087x7iY3JyhPgdV/n
MD5:	63FAD256B41B5D84BC1E86461A96A318
SHA1:	20D44C76509B9FB61A6E005112D60A1F3B73B8EC
SHA-256:	A69C12CCD186A899DB79FCE802B46C08E71F69C2C422BE2666ED8565E3ADD026
SHA-512:	09BBD78798D0A62B0020A3C97A2E1E34970806003BFBE8F6DDBBDAA248C10A4E947BF58D93F1FB468A7F820D1BA6F83E85A561E740277555F8AEBA356A6D6C72
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.3
Preview:	"use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics(d,b)};function __extends(d,b){if("function"!=typeof b&&null!==b)throw new TypeError("Class extends value "+String(b)+" is not a constructor or null");function __(){this.constructor=d}extendStatics(d,b),d.prototype=null===b?Object.create(b):(__.prototype=b.prototype,new __)}var __assign=function(){return __assign=Object.assign\|\|function(t){for(var s,i=1,n=arguments.length;i<n;i++)for(var p in s=arguments[i])Object.prototype.hasOwnProperty.call(s,p)&&(t[p]=s[p]);return t},__assign.apply(this,arguments)},reactive=function(getter,interval){void 0===interval&&(interval=300);var subs=[],v=getter(),interval_id=setInterval((function(){if(0===subs.length)return;var new_v=getter();if(v===new_v\|\|"object"==typeof v&&JSON.stringify(v)===JSON.stringify(n

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1892)
Category:	downloaded
Size (bytes):	13841
Entropy (8bit):	5.299026493837264
Encrypted:	false
SSDEEP:	384:Sa56DxlrGrMdhs5XD1D8FSIsownCYQgKobgj:Sa54lr+Mde5egI2Cfj
MD5:	C9B96B62FD9259306D0F853EEFC5FD79
SHA1:	7A8F0879C142D4B8E9AA7E1F4AA8BB49E0214CCD
SHA-256:	8604DECA168A5A1DBF1128BF19E1E69DE242660DB19F4E1B3EA7C6F35CAE666B
SHA-512:	7EBB24ADEE820DE9D43FACC89D3BCD6E907494F75E893AA9E3CF685A9E2AA747A6EBA4221A6A3A30ECD576671336B8740CE3F69177C111EF8DE791DF320E630E
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iO7g4/yP/l/en_GB/SbuNRCYSygq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometContentNotAvailable.react",["fbt","CometContentArea.react","NullStateGeneral","TetraNullState.react","react"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j=i\|\|d("react");function a(){return j.jsx("div",{className:"x6s0dn4 x78zum5 xtp0wl1 xl56j7k xh8yej3",children:j.jsx(c("CometContentArea.react"),{verticalAlign:"middle",children:j.jsx(c("TetraNullState.react"),{headline:h._("Sorry, this content isn't available at this time"),icon:c("NullStateGeneral")})})})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),226);.__d("CometPhotoPermalinkRootQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7782661541791905"}),null);.__d("CometPhotoPermalinkRootQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometIsAdaptiveUFIEnabled.relayprovider","CometPhotoPermalinkRootQuery_facebookRelayOperation","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","IsMergQAPolls.relayprovide

Chrome Cache Entry: 890

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56077), with no line terminators
Category:	downloaded
Size (bytes):	56077
Entropy (8bit):	5.3966037959270485
Encrypted:	false
SSDEEP:	768:tvB5S9KiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4O:7O
MD5:	4F8D7ECCB8B77BFF110A91871EBADCC0
SHA1:	74E5D00ECB54BFCFC2CF0D8D95441CD9236C048F
SHA-256:	2DDD96839C08E8CBDD3B1F56569B6D4770021731534B98DD17DEC8526BB0D151
SHA-512:	FAF100313010634C21A7EFA0B0E8D38D532EF52497B268AADF1AAC03DA9B5D14A45CBC1CCECC508A989B28D1DEC8BAF97270C433BE5AE85CE454267B19430DF4
Malicious:	false
Reputation:	low
URL:	https://cdn.hadronid.net/hadron.js?partner_id=405&sync=1&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9659)
Category:	downloaded
Size (bytes):	9794
Entropy (8bit):	5.287337313501562
Encrypted:	false
SSDEEP:	192:t4BTyyOCXyAg5myEmtLsOEBd0THSEkeRnGkYsPT5Tb5381:tCbOUyAamyEe4KBGklb5Ph81
MD5:	9CAE9057158997926F599C44C24B29D6
SHA1:	B2F9CD19AA054B30D182CCB5F724BE2BF5CB1739
SHA-256:	4E087E791D5FB90B5541A7C02A1FDCD13BB63CC7652505E6CFEB2439775359AF
SHA-512:	1C9B0D487868624FB3689D333FA4CEC09874CC6E9C399E21012CD1A570AB9701CF3F4F0140F43F70662A63B04FC6AF98EC2796BD901AC58B5057ECF4EA202DAC
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/ondemand.IntentPrompt.5a51a72a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["ondemand.IntentPrompt"],{7402:(e,t,n)=>{n.r(t),n.d(t,{IntentPrompt:()=>ge,default:()=>me});n(6886),n(36728);var o=n(2784),i=n(84292),s=n(45184),r=n.n(s),c=n(25686),a=n(82392),l=n(3613),d=n(69263),p=n(29496),h=n(73206),u=n(73186);const g="IntentLoginSheet_Login_Sheet",m=r().d1091f50,_=r().bec9cff8,f=r().hd50e064,y=r().e919c3bc;class w extends o.Component{constructor(...e){super(...e),this.state={autoSubmit:!1},this._renderHeader=()=>{const{Icon:e,description:t,heading:n,iconStyle:i}=this.props;return o.createElement(c.Z,null,o.createElement(c.Z,{style:b.contentHeader},e?o.createElement(e,{style:[b.icon,i]}):null,n?o.createElement(a.ZP,{size:"headline1",weight:"bold"},n):null),t?o.createElement(a.ZP,{color:"gray700",style:b.secondaryText},t):null)},this._renderLinks=()=>{const{showSignUpLink:e}=this.props;return e?o.createElement(l.Z,null,this._renderForgotPasswordLink(),this._ren

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	99594
Entropy (8bit):	7.937384615356069
Encrypted:	false
SSDEEP:	3072:QCQLHKYipSYGy86/zskqaVmmACKKgzMXeD86TD+cTbLxv:QCQjKZt/LLVVeRzqeY6TjLxv
MD5:	4C70FF10B0B7DBD639737CB1CA4F9461
SHA1:	C6CB4595FCF6D2300089F7E8220E5612071106AD
SHA-256:	20F2DAFDD34F983D52975586855ED035020B58F9043A7E4E8D9013F97B8D385E
SHA-512:	85B8F283EF777A5443CCA511FC16FCFD3F5919B657AF9F4BEFBDB22B1E043F632D1E5C215BB40BCB8B640B4098DE0FD0F957CBC48974C0A84CF3B82D244AF988
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.x....PLTE................................................................................\|........q..............u...........z......o.w....\|........k....s........z.g..t.h..k.............a.ut..g........q..c.\..v.\|.....X.....Z..c.dc.{V..e..m....\|Y.~..r..wS....}o.wW.tL.za.sL.tV.lT.\|..yw.qt.s[.lT.kH.sd.mVxwz.HH.kK.Zg.gU.ii.fEvqs.fR._M.gW.cEzjjnms.`b\|g\.^?.]Rigj.\F.Y9.XWkab.FT.WE.++wXS``f.S4{SGkVX^[_.KL}Q8.-HlQL.##.K+YVXwJCOWe.>EnN=vK4.,B_MITPTjFF...wC0pE.lC<NKNHLXhC0]D@9Ky.1<bA.LEF...i77h9!]:4DCG..3..3...^6&Y7)..1R75.<f?;>.....,9:DO4'..(..)V,"...749..$K+&..&k.).....$E&P%...$1.6#/T.. C$.9'&.+.~..w..D..(%(n...%F9..d..^..+..!."V..W..1....:O..G.....>.......5..)....3...#....,..,........%...........................................].N....IDATx..1h#I../.l`...E.@.. .X...`.E..d..I&..m4...Nr8.6P...98z.....v..4\P.A....^vOn....RKn1..7.,..{...-Y.._.......................................7._:>..:.op4\~......l.._/..o.L...

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (430), with no line terminators
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	5.385696721771642
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRXV3tFiYSB0Fgdu43o9fk4tFiYG:haoDCfJ2fJfhF5Kpp3ipF5G
MD5:	4F2CD6EA5A9F48487F9706E4B36AC008
SHA1:	2595FF7DBC79702DAC7B543C68E8FFADD7D28A07
SHA-256:	7A59D5B4862DB582078F52BBEA6A557E4F3B3BED451A078766A5FF2910A2F0A0
SHA-512:	B18BA72F28F426CFD4BA3A57C39EC2883AE796C407265F703C9F05CE1D5683EA8FF025E32B0FD8868CBFBAC594170F7FBDE2D85B4B2BD80630BC1566BBE442F4
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=354&slotname=8587446116&adk=4042979303&adf=184950147&pi=t.ma~as.8587446116&w=590&abgtt=6&cr_col=4&cr_row=2&fwrn=2&lmt=1716221071&rafmt=9&format=590x354&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&crui=image_stacked&fwr=0&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078298&bpp=2&bdt=286&idt=649&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=2528708288376&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532079&ga_hid=396375652&ga_fc=1&u_tz=-240&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=3618&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083639%2C31083822%2C44795922%2C95331983%2C95333409%2C31083940%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2604152591232249&tmod=1068189570&uas=0&nvt=1&ref=https%3A%2F%2Fpjnewsletter.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=4&fsb=1&dtd=653
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"COuKyafUpYYDFRVbpAQdyZEIvw"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-7666278362879166\\\"]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	19557
Entropy (8bit):	7.9695986136629395
Encrypted:	false
SSDEEP:	384:x8CKPeFAbUp+lTeuqub0MRHpdhWIj9YfEc/r+xH8GhN5T3hVm2N2MhqzIRedH95b:xN/Fj+Reuq5MBDhW89YfB+V8G1T3v9N0
MD5:	297CB6218F2E9E53BA296B0FA80A5F52
SHA1:	C55BEB28DE70907F6072BD9AA722ACF69C073956
SHA-256:	A90D15274FF1D3CF9608F11BA4758B55087F00E111B9B84F1E61C41A5B3C3CEB
SHA-512:	EE02EF7F5360D48219825DBF85C5C2813A22BDFCAFBF1B30199810BFD364293A41507F6D2D5DC200B11EE5B00ABA2D292818D3617B9BC09B252B116EE628E03F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............":9.....sRGB...,....TzTXtRaw profile type iptc.........0.....Ic;..B%~<._...~+J1VV;s.h@...7...K.{..m......m...Y.. .IDATx..}w\|TU..{.wj&.t.{H....v....`WPQWE.....ko._...kw.....{.z.9...L.%.....<.\|...s..;....}..}..X....h.......&.5..`.X....5..`.X....5..`.X....5..`.X....5..`.X....5..`.X....5..`.X....5..`.Xc..!.......t./`.....!.8pJ..;.!..9....F.qb.. .H..c..u(.....t..q..F$....'......9..;..P.s.jB.C3...S..fL.J...XU.<.......!.qb..bI..q.J)w(..JA"........s&g..OJ....u..9.N..z.i..{[..UUzP.c.@.U:....\..1.B......71:"'51/'mvn....hI".c9.....DD..w..u}G{..2;......_.6p6...`.4.iBhfb....9..3&.g%O.2....q.]g.....R......7..8...!.h..X....s2CQ....@.d.J..553y...Y..rR.b#'....g....!B..s.9c\|.E.o.Q@........8...$....LUA..8...:\|RjB..9...2.S.c4.....q.x.T..e.`....c..FtZv....M..x.........Y6N...N...:{rF^NzVR\p...X/.G..C..c...3r.....^..L....A._....S.......dL.....2;7=/'=751>:..X.9c.....,...s.9..{Ic....)g.....2c....)..2pz]d....Iisr3.e..%.h5........}.t.B....4a.

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5842)
Category:	downloaded
Size (bytes):	37565
Entropy (8bit):	5.448513872741674
Encrypted:	false
SSDEEP:	384:B7j8FarWX8oDvnpVKyGdxRNElB1N67RrLPDwM/vSNAF4QbefaNJiJvFrcK99GTJZ:+8WlkrrD1ViStQ9Fr12J0RMQqBBv
MD5:	04F4D5F6D50FA9A8D5A5F94CA153D3ED
SHA1:	400E77DC1E1BFD03EDF7ED7CF0574DAE611F8DBC
SHA-256:	060B0FA7BA2A1B0E9625BBCF0130A2C75BEC2DDFDAAD54548007E089E6953395
SHA-512:	D63163A6E6275E0437386467BEA4DAABCFFE6A6C36FE05A31B1F0B8F5E18ADA228B900559391322687DF705185E805E27AAD78B0268D7B2715B93AB2DA2E6269
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i9Jf4/yt/l/en_GB/JXU_sh9bUKo.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ArrowLeftOutline24.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 24 24",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-444 -204)",children:i.jsxs("g",{fillRule:"nonzero",children:[i.jsx("path",{d:"M99.78 56.78a.75.75 0 0 0-1.06-1.06l-6.25 6.25a.75.75 0 0 0 0 1.06l6.25 6.25a.75.75 0 0 0 1.06-1.06l-5.72-5.72 5.72-5.72z",transform:"translate(355 153.5)"}),i.jsx("path",{d:"M109 61.75H93.625a.75.75 0 1 0 0 1.5H109a.75.75 0 1 0 0-1.5z",transform:"translate(355 153.5)"})]})})]}))}a.displayName=a.name+" [from "+f.id+"]";a._isSVG=!0;b=a;g["default"]=b}),98);.__d("BaseToast.react",["BaseInlinePressable.react","BaseTheme.react","BaseView.react","FocusRegion.react","focusScopeQueries","react","useCurrentD

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1097)
Category:	dropped
Size (bytes):	1137
Entropy (8bit):	5.434873704777306
Encrypted:	false
SSDEEP:	24:2dXo4sXECCWMt9beJWXX61tmb1YXNh8Ss835Q9a15e:cY4sXTCWMyJYXIMh28SR5Q9aje
MD5:	6322E64C145335A8357C135F1C1B6CDB
SHA1:	2F400A90B13C04A74857584B22730C958362EB5A
SHA-256:	77892AB67733E90BB6B434EF91E99972D085501B142FAF28E9360E63EA6B5BAF
SHA-512:	7C9FBE1525BD66F03EDBD30FF9969A9F6C15F6242E6C2A6B724876813DA127975D0153D85C611F3E6F3A1F3C6E8D00F9648FDFC6769BE34FFD155A839D9EED1E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="2.0"><Ad id="IMA3"><InLine><AdSystem>VPAIDIMA3</AdSystem><AdTitle>IMA3</AdTitle><Impression><![CDATA[ </Impression><Creatives><Creative><Linear><Duration>00:00:30</Duration><MediaFiles><MediaFile width="640" height="480" delivery="progressive" type="application/javascript" apiFramework="VPAID"><![CDATA[https://imasdk.googleapis.com/js/sdkloader/vpaid_adapter.js?adtagurl=https://pubads.g.doubleclick.net/gampad/ads%3Fiu%3D/22876227373/Admixer_oRTB_VAST_T1%26description_url%3D%7Bdomain%7D%26tfcd%3D0%26npa%3D0%26sz%3D1x1%257C250x300%257C300x250%257C300x600%257C320x480%257C400x300%257C480x320%257C600x300%257C600x600%257C640x360%257C640x480%257C720x1280%257C720x1560%257C720x1600%257C729x1280%257C768x1024%257C960x540%257C970x250%257C1024x768%257C1080x1080%257C1080x2220%257C1200x628%257C1280x720%257C1920x800%26gdfp_req%3D1%26output%3Dvast%26unviewed_position_start%3D1%26env%3Dvp%26vpos%3Dpreroll%26vpmute%3D0%26vpa%3Dauto%26type%3Djs%26vad

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	37509
Entropy (8bit):	5.5141492176979545
Encrypted:	false
SSDEEP:	768:AfCrFLoJgW6/mYBAazCtaRmSKyGMtfW0J1CsUvpPop6P7ShtBhGGpxRgLdm/xIyf:PGjczCgt/83OFP641
MD5:	1F858A4316F6D5524E2F709C9B01335B
SHA1:	622AC4A2C75979B8A41FB824E2DE996D4359A6DF
SHA-256:	E6B99193CAC89CBCD73ABEFCEAC3123F14611F52E79327AE178C1E076AF91D13
SHA-512:	6FD89C97E19647756208DF000F06C98DC3E6FFF5B11EF39D43BDE12426C3BAF2638E89099D3F2C833BE017AA3867B863716DA5CF2E43CDD12595C12C6DEA2A7E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/1f858a4316f6d5524e2f709c9b01335b.js?tag=addon/mysidia_one_click_handler_one_afma
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=n,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};function ba(a){a=a.o;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));"undefined"!==typeof a.wow64&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.m.slice(0,a.g.index)+b+a.m.slice(a.g.index):a.m+b}function da(a){let b="&act=1&ri=1";a.h&&a.o&&(b+=ba(a));return ca(a,b)}function ea(a,b){return a.h&&a.i\|\|a.l?1==b?a.h?a.i:ca(a,"&dct=1"):2==b?ca(a,"&ri=2"):ca(a,"&ri=16"):a.m}

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	114554
Entropy (8bit):	7.995812185029626
Encrypted:	true
SSDEEP:	1536:rHmhZc6WRK6+VIUCM8A3kunedHf0MlnlkBxHjTUNI0AMq1xCCQnUXIgoQBXMkeeV:rmhcgTVRCk3HnedHfNeTd0LcS095q+F
MD5:	193F5734F0DF0EEEB1D3CA8B7DB9AEA1
SHA1:	FC12CE4564A16FD27685E7490F6E4B56170B6BE0
SHA-256:	9F39B4B6D04D5D0494E04E1394D6C493277D271461B1E68D55A9D68DAD87853A
SHA-512:	2893CAECC4C407AF31832F3A8CEEABAEA0B82A5EA3CFB69359F05EACE9E4FC601F41B7CDCC3222315E26C4A5B3AA80C6AA1F6328F48223878839B88A8FBAB1A2
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2024/01/trump-speech-768x403.png
Preview:	RIFFr...WEBPVP8Le.../..d...9...$s.q.n.Ez.eF..5 ...."...(.....:gf...$..!..H...#6...P..F.K........"&..\.H.. .$..B2@..EL...H..b..b....Q.h..7........{..H......H@..@:.W--.:".I.8.0..@..^#c.j....m.$...F...._.SM.\.....3j.k.K.Z"%j...........@q"..).%.be.#V....(8...l.....e.%b..2.E.,R.R.H...p[....P.V.14$..4..-!..7....I.....f...}.}.s.n.....j...Z..@j0..Q@...p.......F...W%..]0.2..L@`..K..D...^+.q.,!.j.p.3a.%f.$.N+..:..........."..}.....#cQ.Tj..l.X..qS\|.....P...._T..8ZV 9..x.Z.r...I.O..n..<..1x.yE....!a{.:....9.JC"znu>iM)..XDOV........yL..#&{.x@.!..IJ2.8.5..H......!..W..._..wW...._^...b...c...~.d...q..-....qy.w<{..........k.a.m...v..{...1.k.E.e.W..I.lh.....}..w.%.{fz.[... @.....!uff.n..\..g.1...Y..-..CRR..%..INx..yR".....rW./..]7.m.Q..@@l..Z..{.P^`.......!...%.\.K2../..j...au G~....l5l...B.^.../....=.l.y.CUa.UmA.(%........]&$a...k....%..5...V5K..6[..0..{..H......S...{.f.d.......8....8..8.#......$I.$....b.A....Q5{.Iv.H.B...0(..D......F.........I..x.+H...

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	299400
Entropy (8bit):	5.574214536970787
Encrypted:	false
SSDEEP:	3072:pr4lgTc0Iard8OdwDMhba8GyCKqjysCBIQ+9agdDBqzGmRFFHxK6DHH54O5oD5+A:x4Qb8OdwDM8Fz1zQ+9fdDBqzGavH+OW
MD5:	05359000A9DD012E12FB21557A974C4A
SHA1:	3DD193956AC3743C328B5BA50399C115B11734AB
SHA-256:	2DD613F53329F4FEC1596B587C392564A1A3AC05ECF3E1FFAB892E6083CE94BD
SHA-512:	5822C52ECDBDE985EC0892C64F3EEA6DAFBB00EF83258449458A1992608562F2917A7E470AD3D7EC2C66D08DC7D2DEAEF57DBAE89479A4E65AD1A6EF200AE21A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-6EDY1BF25J&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_datatos","priority":27,"vtp_instanceDestinationId":"G-6EDY1BF25J","tag_id":33},{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_S

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5666)
Category:	downloaded
Size (bytes):	5889
Entropy (8bit):	5.499106286212697
Encrypted:	false
SSDEEP:	96:mlLpsZPMXGbCI3wOqeHKXYmHm5OlsLFMO4Ricgfq9slceFtTIdkyWdeKeKl:CtAlGIkRXYmGHMO4RiHZca9rt
MD5:	58009CEF540562A8A3A1EA78E7470442
SHA1:	ED2967422AE2E3B748CC5DA12DB1B162B27640D7
SHA-256:	534AD49C58CAABC42ED9523D5C079F4B6FE537E30B09C8B87CC8D44D5F521A7A
SHA-512:	6D89C7CC35A6D899328FC3D29FCE7330A8E9EE1F840787D3518AB1033F30EA826CA5240B72817C51BC4740009D190D095B9C2E6E26FADD6C8754293D6940A47E
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.WorkH.547ceaaa.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.Typeahead~loader.DMDrawer~bundle.Communities~bundle.TwitterArticles~bundle.Compose~bundle.WorkH"],{78780:(e,t,i)=>{i.d(t,{s:()=>n});var r=i(63752);const n=e=>e===r.p_},54352:(e,t,i)=>{i.d(t,{Ah:()=>P,Bw:()=>b,De:()=>O,E4:()=>C,G6:()=>M,Tu:()=>R,W8:()=>D,bG:()=>I,m1:()=>k,q9:()=>T,qK:()=>U,rA:()=>G,vb:()=>y});i(6886),i(36728);var r=i(68811),n=i.n(r),o=i(28213),d=i(53223),s=i(56992),a=i(8871),l=i(78780),c=i(26853),_=i(53392),p=i(55699),u=i(76431),m=i(97654),w=i(34556);const h="dmComposer",v={};const g=e=>{const{conversation_id:t,id:i,localMediaId:r,recipient_ids:n,sender_id:o,text:d,attachment:s={},error:a}=e,l=Date.now().toString();return{conversation_id:t,recipient_ids:n,error:a,id:i,is_draft:!0,message_data:{attachment:s,localMediaId:r,sender_id:o,text:d,time:l},type:"message",time:l}},I=e=>(t,i,{api:r})=>{const{allowVideoDownload:c,senderId:h,cardUrl:v,conversati

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1618)
Category:	downloaded
Size (bytes):	4943
Entropy (8bit):	5.979901607338739
Encrypted:	false
SSDEEP:	96:HfNtXwb+POoWotrtK/ct++POkox/WBdI5P+A77DlXeYOLrgOe+NZuK56:fXiLomBkodeiENfXbZr56
MD5:	ACEE438B1BB9F64014D24BBE010CDE05
SHA1:	FABE776FF94AA3E6027F90F6C474AE55A5729243
SHA-256:	6AB91AA64B2B4A20595FB3A7AF613C6AE01D61EDE48BEB6ACCEFBD3E2D16E07F
SHA-512:	41E8B1D7A684F4521152C5F3F3D985F30F1724F51858DB3738B0E63C836AF57E4329E3EF3F0AE2C4ED24D5BB1CFE8131960717E8C10033B780D1C01213516CA6
Malicious:	false
Reputation:	low
URL:	"https://servicer.mgid.com/1604063/2?cmpreason=wvz&w=300&h=795&sz=297x236&szp=1,2,3&szl=1;2;3&cols=1&id5=ID5*U60D8kuyqjuyq4y-AGkkfd2s00CjK_Y8Nw4MavDQ5GChKe5LEBa3C9wfjxiCMq-9&tcfV2=1&sessionId=66503333-055f9&sessionPage=2&sessionNumberWeek=1&sessionNumber=1&sessionCats=243,1;239,1&viewrate_1w=2,3&pr=pjnewsletter.com&lu=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&cbuster=1716532083433940879481&pvid=18fa948f56ea8b5551e&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0&mp4=1&ap=1&consentStrLen=0&uniqId=0fff2&niet=3g&nisd=false&pv=5&lct=1716458280&jsv=es6&pageView=1&dpr=1&ref=https%3A%2F%2Fpjnewsletter.com%2F&hashCommit=428598fd&muid=o4n2DX9tTBrn&apt=2024-05-17T21%3A37%3A11%2B00%3A00&tfre=5181"
Preview:	var _mgq=_mgq\|\|[];._mgq.push(["MarketGidLoadGoods1604063_0fff2",[.["Classmates","19505572","1","Look For Your Old High School Yearbook, It's Free","","0","","","","BEGg1nPVshiHjefJrycpm-x0ykPgwMULmOVL7G29losOkpjVsQfs8fvLjPifqjMEksntDCjZorhqhl0LgPP4us_5hbpFeDS30kQ_okEg3gk",{"i":"https://s-img.mgid.com/g/19505572/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpiZXN0LHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wNC80NjYwMjMvN2Y4YWJjMzFjOGI5NWFlNWUwYWE3YWUzOTE1NGNkY2MuanBn.webp?v=1716532085-p_ql4elvU7TdFW4NuTyyFiTRBO4i65fo4LcBGg0o50o","l":"https://clck.mgid.com/ghits/19505572/i/57935209/0/pp/1/2?h=BEGg1nPVshiHjefJrycpm-x0ykPgwMULmOVL7G29losOkpjVsQfs8fvLjPifqjMEksntDCjZorhqhl0LgPP4us_5hbpFeDS30kQ_okEg3gk&rid=c78efa6a-1996-11ef-8297-c84bd68370b4&ts=pjnewsletter.com&tt=Referral&att=4&cpm=1&abd=1&iv=11&ct=1&gdprApplies=0&st=-240&mp4=1&h2=xwIziUS4wo_UT2mUEzXCZgeiD4KdQcpbK56rnhPMeKdaqis2N7xEL3haFLY3LCBO",

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	103107
Entropy (8bit):	5.28710221075581
Encrypted:	false
SSDEEP:	1536:OFJMmiapiudQjpnZo4CwnrKF0y0zc0fs0n/qQ19zV:MVsqQtc000/q2h
MD5:	DCE9FD8A7E0FA980B97AAB0441EDC770
SHA1:	6E8DE6C4BFFD8E856D2A5A297597EBC3F60DA442
SHA-256:	BDEF3E0A4A16A45D6920CA0FF13DCF898E60C7AE3764E58753EA832BE2C84971
SHA-512:	03818A4532AF8C126EF857AE526184A4588658833D806B1038F1184832CE5695A74FD9A36002FFD2B4666E271D47CDD290B4A8DF5DB185D19FF8A22245555665
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/
Preview:	<!doctype html>.<html lang="en">.<head>.<script type="text/javascript">.. function detectAdBlock() {.. let adBlockEnabled = false;.. if(document.getElementById('LESfbmkdUexV')){.. if (!adBlockEnabled) {.. const elements = document.querySelectorAll('.responsive-ad');.. elements.forEach((element) => {.. element.classList.add('is-loaded');.. });.. }.. } else {.. adBlockEnabled = true;.. }.. }.. document.addEventListener("DOMContentLoaded", function () {.. detectAdBlock();.. // detect scrollbar width (for full-width ad).. document.documentElement.style.setProperty('--scrollbar-width', (window.innerWidth - document.documentElement.clientWidth) + "px");.. });.. </script>.<meta charset="utf-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<link r

Chrome Cache Entry: 903

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3
Category:	dropped
Size (bytes):	30132
Entropy (8bit):	7.969483557620218
Encrypted:	false
SSDEEP:	768:p+qtAvuQaC4i5g6B1gxXta5CAPr3QoLBSVVk21agfKCSOgOA0a/QFlUKrs:p+z6C4Et1gxEEAPrAoLBSn1jf69w+
MD5:	621731B0AC9DEBFD941A1AF46D4A1541
SHA1:	BA566057A945C2E7A59774E00932A27E73CF32D4
SHA-256:	F2A96A76FAAC763DB3BE7331003E2A79F81BD564F648502FAB70619773076379
SHA-512:	D1FB287D84CF885ADA5BF58B143108AB535209AAF8227974A2D693B4C8F30935182BEF95D1E6069E73F1FEBDD61771555E8DA9060E8B339F8566289EC051F627
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....'..N...QT....p{....:....@.y.#.N.1..........F..(q..ns.l{..w..4...7p?DGG$.;..\.?Z{$..Q...)...2..2....Q..?.R....th.....\|.Cc.....5S..L.q.H..J...1L\|J...~5(.H.?Z.pE...z..=9..%r.....z.8..U...7..~UdG..0.....hWw..BJ.W#........r.3.t...%r1.k......G,aQ.#...t.;H.W..C2..'j..C.~...."!.`..yx..ji.{x<%%.j....g].....mA..+.@...>....4.m4...5..B`W.....I..oi.;.5..).. W...

Chrome Cache Entry: 904

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21863)
Category:	downloaded
Size (bytes):	130817
Entropy (8bit):	5.19719410122441
Encrypted:	false
SSDEEP:	1536:mw+Qx6z+ldxLjU4NRzUaWn1v3427VWIZD:sm7yn1v3427VWIZD
MD5:	515A137E051356C539EF3297C4100B2C
SHA1:	825277DDEA15DDFEE5BE5BE3BF81164339D0B351
SHA-256:	14AE471A3C25E8CA54C6A4E1B70C0BF4B27EBC4D50A0A7B120EC3F219885FBB3
SHA-512:	82433C4C0F66F72A6F6BAEEE78A9876B6D188299E825E24945E002B9E24243E9A226B0D302BB48A09AD6A5CEDA42B264E49403D8FE0D21B48E6E53A2390B83E8
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ikn04/yz/l/en_GB/JNtlbX11Plv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseTypeaheadLocalStorageDataProviderStorageKey",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="_SearchBootstrapCache_";c=b("$InternalEnum").Mirrored(["FeedComposerMentionsIntentfulMentionsBootstrap","FeedComposerMentionsNonIntentfulMentionsBootstrap","FeedComposerMentionsWithTagBootstrap","GlobalTypeaheadBootstrapEntities","GlobalTypeaheadBootstrapKeywords"]);f.StorageKeyPrefix=a;f.StorageKey=c}),66);.__d("BaseTypeaheadLocalStorageDataProvider",["BaseTypeaheadDataProvider","BaseTypeaheadLocalStorageDataProviderStorageKey","Promise","WebStorage","recoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=1e36060*24;a=function(){function a(a){var b=a.storageKey,e=a.storageTimespan;e=e===void 0?j:e;a=babelHelpers.objectWithoutPropertiesLoose(a,["storageKey","storageTimespan"]);this.$1=new(c("BaseTypeaheadDataProvider"))(a);this.$3=b!=null?d("BaseTypeaheadLocalStorageDataProviderStorageKey").StorageKeyPrefix+b:null;this.$4=e;b=a.queryVariabl

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	17083
Entropy (8bit):	7.982308428834002
Encrypted:	false
SSDEEP:	384:m60n76CIHRODbU9VBUaiXB+F8NRYwiINmLGL0luobcIOgHMHFvUFG:90nkmg9XUTBU8iLIZ0luobcIOgH+MG
MD5:	9978DB669E49523B7ADB3AF80D561B1B
SHA1:	7EB15D01E2AFD057188741FAD9EA1719BCCC01EA
SHA-256:	4E57F4CF302186300F95C74144CBCA9EB756C0A8313EBF32F8ABA5C279DD059C
SHA-512:	04B216BD907C70EE2B96E513F7DE56481388B577E6CCD67145A48178A605581FAB715096CFB75D1BB336E6AD0060701D2A3680E9F38FE31E1573D5965F1E380A
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/cookies/cookie_info_card_image_4.png
Preview:	.PNG........IHDR...8...........j...B.IDATx...m..W....9gf...X^.-...$.@..i.$b-.6h..kZE.R.R0jll@?h..R.D[J.hZ0..&....X-...".W.M...,...,.uf..s.^...kWS..csy..93...s......%.x.S.... .... ..... ............................ .... ..W=...A.....A......T.....T.@P..T.@P..T.@P..A.@P..A.....A......T.....T.....T..9.`...B$..:..\..!%$i....@..E..$....(&bRL...[.F.=Ijcl....$...3....!k%.Gql..Ql8..S....Z.'..{{.PB1....,D.g.....Ia../i..=...".v..K..g.....%._...fO...).EaR@P....dw........0..7....f8...O...1.......K<....$LZ.u....%u9.o#.....mW.&U...X)....+rI/wvo.Y$fR..`.V$.........4.m.<we...u^nZ.Z.p..olh.+...^.Z.8qb.O~..........oq.PDB..).'D\..mI%6R.......J%.nh,&.E\....)2...8d.E.)fX."..&..R..........&..6b.`k1......-Jjq.nH.gl..=.f...{&.({......*."a.VZ._.......#g_..t..+Vu~.CM..+.._..f7m.g.K.K.....^...D....n^..H..Mt...^..6...o>t.F.Kb.L.E]]].>q...,.......4;.;b)t..r,....g..~.........OvE..3...o.......M.I..........O.........E..Q......[....OX....Q3i..m.<..u...g......

Chrome Cache Entry: 906

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/lotame?uid=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 907

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/impr_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&impr_uid=f102e783-2700-4bb9-aa0d-8e4779f6d278
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 908

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 909

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	3.930990186162398
Encrypted:	false
SSDEEP:	3:fuMLQJaecD1jn:2LaLdn
MD5:	B244E5087B64B137E3659C21B48E6D6D
SHA1:	B3D17CB434D8500280BE34A51AB0ECE2725E8E73
SHA-256:	F26847BEA8592279409A22D8F1446C16F02C238B701DA3FD165995917F3A69CA
SHA-512:	72F81985409461740CA705180EDCDD7EB4A4036CC0AD11CBCD851420D92EF3E097BFB1EC357CCCC8CBE826C7C5CF3206EC7080E7F43229C1F2A8E4B3FC7F2E8C
Malicious:	false
Reputation:	low
URL:	https://4.adsco.re/
Preview:	8.46.123.175,953ee6681b10db530f0a8c8646bbc31e

Chrome Cache Entry: 910

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 39481
Category:	dropped
Size (bytes):	4937
Entropy (8bit):	7.956105423500484
Encrypted:	false
SSDEEP:	96:rw2ItKHnOVUtwq+eoD2vIuTNq8FPvS1nHSFzsniEphgIxli3J1xCnuUIMLZ7v:hIlVUt/+em2VAgPzFzsnxhBS3LEn9L
MD5:	301EDF7F73AD778F15D38611B1F5E5BA
SHA1:	7021916DDC9B4A126A489BD584C3763C8F17C77E
SHA-256:	460E156DF9A355E217977215301AC2EFBA8637A9CE656321B28392BAB512889D
SHA-512:	5776F48BBCA8BAC26F450E95F9606B120EDB8B9EAF668570E3DD4A9738DF9F6B1A858B82C20930D96DE0120A544DED8D20A5E74028DC541B9152FD4070FF9897
Malicious:	false
Reputation:	low
Preview:	...........][s..~._.:.KL...[.........e'..]..e.y....d...J....+3..+...@7....q......W...T...3...V......c;..0RYg...aS.E.J#^$.C..$..MB...4.B.`V...>\T...z.Y\.[..&.qd'4.V.i.+3.C.7.?.$...B..N.............8-..d..).3.N..2%....f.(.A...$.2..N.^u.uI.S..,...Wh..B.;).IA>s...U9..,...t.?2vV%..Y.+Ie.u^....t.j......-.q.X.1..5...Te.TOkG..j. U.....$.l.....0GS5...#..'.......Q.1H.0.,[%.j.....A..U.#..q..!....H.4..5.(.:w.$..d,..u..22..!.."...XE...?1mU.j:.....\|.........../....`.\|.Q.R.0.BM.>i.c(X..K..`M7U.m...wYw.<..<...R..C.M..t.>,.a.....:..p...SN.tJF.:...b<A.,Pm.$..E...a.\|az.n..4J"..j...-?....w..@=..lD,.[....fX6.,P.E.uB..Q...3U.........).....!.c.&.Q......L.H.tJU.0H.....X...........C..n.DC..p....{.....4.E...........<.A"G........\...8.,...d....x\|,.QQr.Xu.\.S...Cb.4z._u.w.....wk..7.._.2.W2....Ht....;.<.Zfo..7..........vg<p...hx.+hu67..R.Q....dc..*.3....... ..l....C.:.l.y.......n....:....x..T.......Y.RIU..q..X...uwY....tz.7z.._.^..w......g...Z.$....y.,.b.....

Chrome Cache Entry: 911

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/5/c=3722/ctax=Campaigns%5EExpose%5EViewers%5EPlacement%20111992%20-%20Viewer
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 912

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223733
Entropy (8bit):	5.454805985390715
Encrypted:	false
SSDEEP:	3072:H88WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:H8lWBU7O0bvQQGArHu5GKnG
MD5:	7C75053C3DC6FBEF27DB57E11E5C63C4
SHA1:	CAFC7264C0B8224F621BFABAF588905552008D49
SHA-256:	E9C370EA9070B144ED45FF5F35C9206112DD1091326FF898F414EF8C12EC85C0
SHA-512:	92F72DC113DC761AAFB2F630C77773C19029C9C0CB995238281AC5109AAA043940B1E681EB9EEACD8E436141BD97928985B679B1515166227097E4772E1FE1B7
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 913

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 914

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2374)
Category:	downloaded
Size (bytes):	9437
Entropy (8bit):	5.447308142549099
Encrypted:	false
SSDEEP:	192:Gd36jKZme5rX3pvJpk0LPyTQYQF3y42iYFNb1XtI/:836j+B5L3pvc0QRC3y42iYFVJC
MD5:	19C2D1A545AB7919D1F0FED35C0F1B1C
SHA1:	1F2929FDDD00E1855157024032844E6C88901785
SHA-256:	89117C6E2E3B8213915066BFDDA1A294FB21FB616A172A49A1A828A377CE023B
SHA-512:	CF3863E0A7363BE700D613E645565E392636EB33A8B40C3E02526A0F381AA5511DD335D5365402FF0B54B5D2C6EA517A65FA51DD7D20AC9677AB7CE4D5EDF82A
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/19c2d1a545ab7919d1f0fed35c0f1b1c.js?tag=engine/client_fast/client_fast_engine
Preview:	(function(){'use strict';var h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ba=aa(this);.function ca(a,b){if(b)a:{var c=ba;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}}.ca("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;h(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.g};var d="jscomp_symbol_"+(1E9*Math.r

Chrome Cache Entry: 915

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 916

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 492x276, components 3
Category:	dropped
Size (bytes):	25048
Entropy (8bit):	7.957407021610508
Encrypted:	false
SSDEEP:	384:3ak5KbWaY4OjoOfpfyb1Sk7slRD3MRu7ETXyeMPn+wUyzyo064x0LJ2UE4YIS:3j5uZOjoO1o1/R8kyJ+ByzyH63L0UEn
MD5:	9B31FEF2F230DD9CEA3BBF24BDACA6BE
SHA1:	DA996C39D0FE8D88D99B44AB3AF6086B82B4C320
SHA-256:	BA35AC3E2F51B349CAE9A2A0C553755345503DC1320801ECE84436DC0A65527E
SHA-512:	0C576CE5170C475E641EECDD18FE41C7C0EA36A61423C5FA518EEF9A59040D56A26054C433829232F8AF6E4ADC855D49574C0B73A234A75375CCAA9C7F3808EE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..4..O..0..+..s...C...<.z}....B......K..!R{.l ...J...og%.E..........=);.p...........<.d.p.H..^....!.>g'..p?.y..-..Us.............n2.l..V.e}.........8N;.5g...K..G.iFDV..6k=...By...5.G.$a....I..c....^.J.6".......MS.........Vge.d...c...?.T.v7......o......\.G.Z....W%......j..2]4D..._.}K......

Chrome Cache Entry: 917

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	313787
Entropy (8bit):	5.3884010371761
Encrypted:	false
SSDEEP:	3072:SiPe04Ck7K1JJsLYAgPjVTAnvosYlO5MOrtY0az5h4abMMmGn/qWCsKeTJ0:SVaWsA+Vs/5TLBsKeTJ0
MD5:	3C8E8561365F9AA60EE89F9145607DE7
SHA1:	F019B69B7C70E883651F95243C67D7494C1FB016
SHA-256:	D803B8E0FD5B95599CC2D7575F94CD688FC0ADEB8A07A9FB5E814AD0277DB024
SHA-512:	B1A65AD75920D99A5990491B05F8F204CF3C1FF24B037C72B381F4F04B5FA4BF00D8DA97EF7410DB8506C4F2F7161576FB50B97A9573D52E695CD51569DDD7A3
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu.94e4723a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~loader.DMDrawer~bundle.Account~bundle.ReaderMode~bu","loader.directMessagesData","icons/IconSortUp-js"],{70828:(e,t,r)=>{"use strict";r.d(t,{Z:()=>n});r(2784);const n=r(15954).Z},31573:(e,t,r)=>{"use strict";r.d(t,{Z:()=>o});var n=r(2784),i=r(679);function a(e){return n.createElement(i.ZP,e)}a.sensitiveMediaTombstoneConfig=i.xh,a.sensitiveMediaWarningTombstoneConfig=i.ui,a.sensitiveMediaVisibilityResultsTombstoneConfig=i.xg;const o=a},70628:(e,t,r)=>{"use strict";r.d(t,{Z:()=>n});r(2784);const n=r(62002).Z},73395:(e,t,r)=>{"use strict";r.d(t,{Z:()=>n});r(2784);const n=r(96182).Z},79135:(e,t,r)=>{"use strict";r.d(t,{Kx:()=>s,ZP:()=>d,ad:()=>c});r(6886),r(36728);var n=r(2784),i=r(7267),a=r(48501);const o=new WeakMap,s=e=>{o.set(e,0)},l=new WeakMap,c=()=>l.get(n.useContext(a.rC)),d=e=>{const{children:t,deletedTombstoneType:r,forwardPivot

Chrome Cache Entry: 918

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFdLQVVOSEwtRC1CRllE&google_push=&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 919

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1440)
Category:	downloaded
Size (bytes):	1663
Entropy (8bit):	5.351464038865217
Encrypted:	false
SSDEEP:	48:iIK2grclW6IB5frQOtL02oPh2LM8oRUWU8K7SWms2grJv:O2grclW6IB5fjMpNK7Sa2grJv
MD5:	54FE566B6735C4BBEA65ACDA1923121C
SHA1:	62CF6A34D902D659608D315C0E5DD24EACC749A2
SHA-256:	D4CEEF82C438C08CE28471B34B6992E9EAA383B395B782D0F015908C72FA2182
SHA-512:	EB12361519EF359C2306EDE588E79B96AB79A2A23011BF03E4D200BA17FAAB187FE442CA5F39BA8105FF4DE2C61A2EAD5D3676133BC24402DD6697995442F611
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.SuperFollowsSubscrib.2610107a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~ondemand.SettingsMonetization~ondemand.SettingsSuperFollows~bundle.SuperFollowsSubscrib"],{39002:(e,t,r)=>{r.d(t,{Z:()=>y});var n=r(2784),o=r(66999),i=r(25686),l=r(45184),a=r.n(l),s=r(62106),c=r(67181),u=r(73186);const d=a().c2fc878d,m=a().db11b27f,p=e=>e,g=u.default.create((({colors:e})=>({root:{alignItems:"flex-start",minHeight:30,minWidth:30},center:{alignItems:"center",justifyContent:"center",margin:"auto"},progressCircle:{transitionDuration:"0.2s",transitionProperty:"opacity"},hide:{opacity:0},text:{fontSize:13,lineHeight:"0.8",minWidth:16,textAlign:"center"},gray700:{color:e.gray700},red500:{color:e.red500}}))),y=e=>{const{count:t,maxCount:r,formatNumber:l=p,warningCount:a}=e,y=r-t,b=y>=0?m({count:l(y)}):d({count:l(t-r)}),f=t>=a?n.createElement(o.Z,{"aria-atomic":!0,"aria-live":"polite",style:u.default.visuallyHidden},b):null,h=(0,s.Z)(y,r),w=t>=r?"re

Chrome Cache Entry: 920

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	265
Entropy (8bit):	5.699621597454565
Encrypted:	false
SSDEEP:	6:6v/lhPkjl/Mmw3gwYFE+/2MpWI1BhOsvs36SCYVyecdQjljp:6v/7Il/MwwYh2zI1XOeWTNVyeTZN
MD5:	A1E5F333AD092F16905FC1E60D404729
SHA1:	6FD7E3A35CA3AAD1BE2B46E7E69866110719EAE4
SHA-256:	4A0CF97FCD185F5DEABED3C6F3ED7991B241E3E6EE2BA67AE20589449A60D19F
SHA-512:	1E8C4CE386612D07B844CB84C72C68837B9570BE56F7280BF828D0D5D052358921CCBE844409E33EA58F49F8865D8F8C112A3920C2CD73FE592715C30C5C264B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................>...0PLTEGpL.............................................%L.9....tRNS...PU.....J..K.l....yIDAT.[c```....*...N..@..Z.....L{..3.......$....d.. ....c~e.)..P.$7.......@.'......V.f~.k.3....3......l...(p@v..#......8W..g.-)....IEND.B`.

Chrome Cache Entry: 921

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8857)
Category:	downloaded
Size (bytes):	78206
Entropy (8bit):	5.617313603795406
Encrypted:	false
SSDEEP:	768:uYKS8wzfs4B2OSMpZ2OwG+pmdphEIdE1YvEmNI17jhRv:6S8woXeUOwGiKEIdJI1XhRv
MD5:	A745E4B7A9A444A6468F4FB78BD6D495
SHA1:	F7B9091C8918006F801AE0B2B493B9846C90CB24
SHA-256:	B2FCD4CF9FAF6A7DD116E5B4AC8FFE63B7AB5964F434629ADD68639899DF82B8
SHA-512:	45C6D3D0EA94F708FDCABEB62B9DEA55E90990746A0EA39EA753BC6166C97EB2C75A7AD27C8192A343DE9B58D35C60D3E953438B519F80719ACF7DB0139A755C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iizA4/yo/l/en_GB/HHF3KtxQn_Y.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometOverlappingFacepile.react",["fbt","BaseContainerQueryElement.react","CometComponentWithKeyCommands.react","CometKeys","CometPressable.react","CometProfilePhoto.react","CometTooltip_DEPRECATED.react","CometVisualCompletionAttributes","Dots3HorizontalFilled24.svg.react","FDSIcon.react","FocusGroup.react","ReactDOMComet","SVGIcon","TetraText.react","focusScopeQueries","gkx","react","stylex","useIntersectionObserver"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j,k=j\|\|(j=d("react"));b=j;var l=b.useCallback,m=b.useId,n=b.useRef,o=b.useState;e=d("FocusGroup.react").createFocusGroup(d("focusScopeQueries").tabbableScopeQuery);var p=e[0],q=e[1],r=-4,s={item:{marginBottom:"xieb3on",position:"x1n2onr6",$$css:!0},itemWithoutMargin:{position:"x1n2onr6",$$css:!0},itemWithSpacing:{marginStart:"x139jcc6",$$css:!0},overflow16:{height:"xlup9mm",width:"x1kky2od",$$css:!0},overflow24:{height:"xxk0z11",width:"xvy4d1p",$$css:!0},overflow32:{height:"x10w6t97",width:"x1td3qas",$

Chrome Cache Entry: 922

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 923

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (861), with no line terminators
Category:	downloaded
Size (bytes):	861
Entropy (8bit):	5.704244632988948
Encrypted:	false
SSDEEP:	24:haoDCfJ2fJfSF5Kpp3ita9S65iYG9Aa9W2iY8dal5HFYSF5G:TeORnpp2a5iYG9AaZiY8alZFYd
MD5:	06B3588242848BF29CB4A178368625F5
SHA1:	EB6092BD2CD29DEA65AF632D0B3AC999F1CBFAD0
SHA-256:	BAC780394AFC1B264354D702F9D0CACF4DCB5BD34A648CBA6B56E296F835FD12
SHA-512:	6FB089B83AFACC3FE40A713F6C42CDDF8C7956BC50ACF3E96FB29E63DA8CE01893E1ADBA60323CCB34F15A555AAA2AD097F2425DAABD94150C05712580F33E66
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9378512249&adk=3988068036&adf=2307578502&pi=t.ma~as.9378512249&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010325&bpp=3&bdt=2786&idt=2706&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=1024&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C44795922%2C95331983%2C31083940%2C31083182%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=240215820045032&tmod=1068189570&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=2746
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"COHDsYjUpYYDFXjQuwgdQ7gM2g"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-7666278362879166\\\",null,null,[[\\\"ID=da67d6cf617bfbae:T=1716532015:RT=1716532015:S=ALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",1],[\\\"UID=00000e2baa71d767:T=1716532015:RT=1716532015:S=ALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",2]],[\\\"ID=0de722eb110b0792:T=1716532015:RT=1716532015:S=AA-AfjZ_Vg53aFh6S_pt_4oSG5A6\\\",1732084015,\\\"/\\\",\\\"pjnewsletter.com\\\"]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 924

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (782)
Category:	downloaded
Size (bytes):	981
Entropy (8bit):	5.567491285397692
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVICbqLZiWfwp/iSvKzN9gHCWOkbbBIsTdFBf:2e2C6lIj8ZivvcnnmbBIsTdFBf
MD5:	0182CCD284ADE120D44DDC5122B0304C
SHA1:	9B425B2BB00747B28F51619FBBBBBFC00195BC63
SHA-256:	892F75880101455F2FF9D26FAAB93CD2BEEADB71066BD5F8F70B9832B8C995A3
SHA-512:	349281D402F6A8B4A3C518C7D896737B93D30691AA2BE2336F513CA5AF493105E24574C94CD52E7789FA5E2E990DC0887F7E8070209B4248F51E43D6CBC40565
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&us_privacy=1YNY&r=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata5%26uuid%3D%7BOPENX_ID%7D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://sync.connectad.io/umatch/1?dataid=data5&uuid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a"><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/51acd139-e56b-e718-c937-224392025bee?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZTkwNDY0YjctYmNiMC0yYmY1LWVkMDAtNmUwZmE3Yjc1OGM3"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc">..</body>.</html>.

Chrome Cache Entry: 925

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 926

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 156x155, components 3
Category:	downloaded
Size (bytes):	6113
Entropy (8bit):	7.857897729545636
Encrypted:	false
SSDEEP:	96:tYCtHNm9LjAISzoHRlXA4zhiDzZWMLBehRPHoajPLeKsgyEMHeUIrDYK98hkwa:GecAJmXnzhiD5q7HskMHe5DT+Pa
MD5:	571D5B1DB829AEC8E2D88AE55AF527ED
SHA1:	05CFAF0AD52ABD0A1B90A093C6371B8B861457F5
SHA-256:	6F1AE6739830DFA6DA15C86E97F900BFDDFA0FCD7E2B2F93E5D2A2368F47BEC5
SHA-512:	CED8A5A1F70E3D3AD8D0184525A6AD37787AE92D19BEFC8671D3E3031D4F096BE3F7208FE14730FA64AA9F1AA90CF923628D186CEA838517F855B23C62BE7DDA
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/341298445_780647303698447_1552128141270824112_n.jpg?stp=c70.0.156.155a_dst-jpg_p296x100&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=47xELcE9KRgQ7kNvgE_4wyZ&_nc_ht=scontent-hou1-1.xx&oh=00_AYCjr0CtqAqTM5uWsPDZFV6nRaZQ5Pn1MXmsdzqVBKXcNw&oe=6655FB5B
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100004c030000500600004b07000018080000120b00000a0f00008b0f00009710000063110000e1170000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...................................................................................r...thWD$.R.q.....3...k".q...!F.8?9.N=\Y.-/......R...gG.3...@+Y>k?G$.... .9b.I.n'.6....\|...;C.. ....+.v.#..!...y......R...)..OL..._...[zY.:}.u,$.xC.6.........t ...y...R....[.q.<..g.j.....-GBh...P.....N\|]..}H..c~^n..g...d.}.k.6...W......$ygg..x.f...UoQ.Y;..KL.<3ha.kKOb..QXy......Q..p#...B...Au...v.J-..0..Y.0.aH5...=t-I.....)....1.HJX.[..K.q.,...<7\|4.Z...2M..l2..ck.Z...,l....../.-.q.e....J..q...+............................ !"12#A.034@B...........m.....,.....M;...;..f.e..\.u.[f.O\|...hgl6v.;Z.m\.I.b..4.A8.3...)..7..S.&n.x....Es..wU...9.w..0...c...Oqd.r<..S.?.J.".V.8.H.t.5.o...{.

Chrome Cache Entry: 927

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 928

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 929

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 930

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2628)
Category:	downloaded
Size (bytes):	22352
Entropy (8bit):	5.509617207980025
Encrypted:	false
SSDEEP:	384:ueZ81Ud3GnGF811lXR3X/UGxT7nPBPmcLl0i8CJnuXVrccmcJ125tUrcy8t3oxcv:3mUd2nnZXRn8GxT7pPmcQSnuXlccD242
MD5:	EF8C18C755ED2CB4EA0264A9F1429E83
SHA1:	EA5D16786CF9067C7AB38250270C3E1359BBCCF6
SHA-256:	387F51193D101BF8D3EFBD1D2D5BC5B6808D8631BB76A9FCFA4434D3AFC0927E
SHA-512:	AD5D535183E295920543299EF10A66A333B161EB0D6A014FDB7BE4F36CC1C947233AAD88786AFB0C7D28864B15E9A668C41A696F2B28E7F351EEB1CD21308533
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=n,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)};var da=aa(610401301),ea=aa(188588736);var t;const fa=n.navigator;t=fa?fa.userAgentData\|\|null:null;function ha(a){return da?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function u(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break a;b=""

Chrome Cache Entry: 931

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2800)
Category:	downloaded
Size (bytes):	2930
Entropy (8bit):	5.423128593721845
Encrypted:	false
SSDEEP:	48:iIinQMBHE1Wk7FwHE1WkBHnX7FtHE1Ww+v4U5CF+21DJzMP6s7FPWoS:enQMtE5yElRxZEcvuQsSiWP6
MD5:	E08749EFBFBD4346BC560E62E5AA0309
SHA1:	70B5B6624249C79883F3005192F06A82BB60C04B
SHA-256:	CA7211328AF321382E6AF74D1FABF9A4E4E80757AA1E6CB1E2F7BAE273C905A8
SHA-512:	57A91205DFC935B88890763A95BAD30C79FED815D31B256FC619C536C86A594A30D48EDA7560C1E5348A7C41944712A481C7C4CF58D74580D1EB0F3D1970DA53
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.c04ca70a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["loader.AudioDock","bundle.AudioSpaceAnalytics","loader.AudioContextVoiceMedia","loader.AudioContextSpaceClip","loader.AudioOnlyVideoPlayer","icons/IconChevronUp-js","shared~bundle.AudioSpacePeek~bundle.AudioSpaceDetail~bundle.AudioSpaceAnalytics~bundle.AudioSpaceReport"],{55916:(e,t,i)=>{i.r(t),i.d(t,{default:()=>d});var a=i(2784),l=i(8543),r=i(83427),o=i(73569);const c=(e={})=>{const{direction:t}=(0,r.Z)();return(0,l.Z)("svg",{...e,role:e["aria-label"]?e.role\|\|"img":void 0,"aria-hidden":void 0===e["aria-label"],style:[o.Z.root,e.style],viewBox:"0 0 24 24",children:a.createElement("g",null,a.createElement("path",{d:"M12 6.59l8.457 8.45-1.414 1.42L12 9.41l-7.043 7.05-1.414-1.42L12 6.59z"}))},{writingDirection:t})};c.metadata={width:24,height:24};const d=c},47636:(e,t,i)=>{i.r(t),i.d(t,{default:()=>d});var a=i(2784),l=i(8543),r=i(83427),o=i(73569);const c=(e={})=>{const{direction:

Chrome Cache Entry: 932

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7727)
Category:	downloaded
Size (bytes):	7865
Entropy (8bit):	5.149427935150509
Encrypted:	false
SSDEEP:	192:uJ288ybeRwinoc8ziC/pnR9KCYplpRC5St:uJl3beqioVeuClpn
MD5:	A9B2DB274403F9C12B36CEA8387B9D84
SHA1:	148004269ACB26EC6D62E0FCD215F44CFB3D3157
SHA-256:	CAAE630EF943A036737D23EFBAE960A1E1180AE70FF38E5EED1A38E6498E32A0
SHA-512:	D4153A074C6656765500AA1DE1ACEE50189B19B7565BB13829959D8C79703A2BBE50E87113AC5076FE4359E6B504D4CA2416C55F581C44CB1E12F09C68E61884
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.4a624f8a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.NetworkInstrument"],{88170:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});n(6886),n(14121),n(60523),n(43673),n(40753),n(28399),n(36728);var r=n(77799),s=n(56776),i=n(59211),o=n(56992),a=n(63174),_=n(63140);const u=[_.ZP.BadOauthToken,_.ZP.OauthTimestampException,_.ZP.BadAuthenticationData,_.ZP.AccessDeniedByBouncer];class c{constructor(e,t){this.scribeRequest=e=>{let{response:t}=e;const{error:n,...r}=e,i=new window.URL(r.url);if(n\|\|!t){const r=new window.URL(e.url);if(t={request:{host:r.origin,method:e.method,headers:e.headers,path:r.pathname,uri:e.url},headers:{},body:"",status:n?n.status:500},!(n instanceof a.Z))return}if(this._shouldFilter(i))return;this._flushResourceTimingBuffer();const o=(0,s.Z)(this._buffer,(e=>{const{request:t}=e;return i.protocol===t.uri_scheme&&i.hostname===t.uri_host_name&&i.pathname===t.uri_path&&i.searchParams.toString()===t.uri_query}));if(o){const

Chrome Cache Entry: 933

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 154x154, components 3
Category:	dropped
Size (bytes):	6324
Entropy (8bit):	7.86158994645444
Encrypted:	false
SSDEEP:	192:jNo/dari+2Bn7TveDObSg2liXpw5DT/mfyT:jSVar8Bn7yzBliXC5OfyT
MD5:	1655B98F08A6A6A7407816FEFC51DE78
SHA1:	03C1C5DA6CCEF1C9FB1F6DFB87295FDA17661EC2
SHA-256:	0449E674FA56B02E544D59973DFB58464B52A4F305C27994BA557DBFC4F1F234
SHA-512:	D764DE4BE20884C5DDD283E9553555963D8A8AE72762DC4D05311D94AF1675098D1B06A20B5977B4DFA2ACE37354D475FC9D9F1FAF3FD4CE5E5AC7464498FCE6
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7101000075030000a5060000fb070000db080000400c000039100000b3100000b01100008a120000b4180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................2.i..P'...........{.p.kr.LV.@8X.....h.0..:......P....T..lrvn.....^....1....4\.a...../..&.../.3..n.Q......H........5w...e.D.O...r..K....fj..+.....&E...H... ......\W......+....'o*..t."+s.]..J....[..H.X...b.=.f..gJ.&K..Z.vx....L.q......=9D4.;6..$.k..................-"...j...H.g.:mf....^C...{.ED..^2..%..AL..5...:l...).h=.._3....hZ.U.....Zi9J.... .A.+... Ez1Sp.X.....u.$.U..8......q.0......D.0..i".(..b.f"..w<.S>~..8@c.w.=..D80.D..../............................!1.3"#045.2@. $6B..........b.7...e..[.R..?...D>v...V.v.c.......&..p......=.l.."a.s....{..u^..^.......i.n....$..U}.}....o[...'..

Chrome Cache Entry: 934

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 935

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=NzJhYWMzNTBkZjJiNGE0MDIwMWNhYzFmZDE4ZGZlMWY&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 936

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14527), with no line terminators
Category:	downloaded
Size (bytes):	14528
Entropy (8bit):	5.1640009813418954
Encrypted:	false
SSDEEP:	384:95IqKTmlzypjOjS8X2YGWH0kxp68kGE2/L:9MTmVzP88kPgL
MD5:	78FE4BB890F5080AB806E3C04E34F63D
SHA1:	E6CD4566ADFA0D8AD8F8B48233A8154BF61D5103
SHA-256:	D3C286558922CA8C2C69167698CD61A8280CB03B81BB41D9BD633F80F18C274F
SHA-512:	EF1B77B4568AF6273F9486B0B89A79D0DDCD09D9CCDF495B983C0C4CE56092A4006B1712A1079684F51E125016FC9AD294E311A443D7F6E89968EDFD3DACB72F
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher-stub.min.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var o=n[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)r.d(e,o,function(n){return t[n]}.bind(null,o));return e},r.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=128)}([function(t,n,r){(function(n){var r=function(t){return t&&t.Math==Math&&t};t.exports=r(

Chrome Cache Entry: 937

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 938

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4713
Entropy (8bit):	5.255139639624185
Encrypted:	false
SSDEEP:	96:beBUgc0OmZkiCt/Dwo2oNKfE24VzMDaTpXpDidL7lDBsxenAVDKZksoPhPn0JUzc:be2Z0Otdco2iOE24xfid/AYqsWhf0J5L
MD5:	23B83551C9172B95192795A70E592C08
SHA1:	47C1BF768EC6AEBA4B8C61F836C86A837D2F8993
SHA-256:	14CD9EAFB6FE8B35A16F5AD5FEA8BFF80CFADEB5DC6667E817FC312A7668D9FA
SHA-512:	39B1DFA95F93E86B296EB717ACBCA2FDF31C21DC543F1BB39B41ADB8FDD576C2E1CC33A396521464297B2F25B576ACF7F524CC8C303B3E88E82E553EAFB59FAF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fpjnewsletter.com&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag)

Chrome Cache Entry: 939

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 492x277, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	25380
Entropy (8bit):	7.99229949785087
Encrypted:	true
SSDEEP:	768:sYY4yr2zWUeWqxPx244Lmf5hkfYX0fEBJTg:sYY4yr8qnyLCPkq0fEvg
MD5:	FB50423A409EA1C1248FF224111B99C8
SHA1:	7B964451B0CC9C34A2BDB970FA128AF3ED6EE23A
SHA-256:	AAE59B994DAE56CCA38D01587DDD028680AD7D2096EF30EF3E52950C3D03E0A5
SHA-512:	3AE5A065C0FE1262BC223719726AC8DBDD8CA5BEAFDF26680B08C2148C86DB8A8C874C026C364FD97E5EB3822181A90646233790DF41C7D60F9558B8329F875F
Malicious:	false
Reputation:	low
URL:	https://s-img.mgid.com/g/18571120/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpiZXN0LHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wMS80NjYwMjMvYzhkNDZiYjdjZTBlY2M0ZWQ5MDZjYTI5ZDNmZjQ4ZmQuanBn.webp?v=1716532085-ONkbbfdvC4Kbx8fLJtI1L22gbANIzEOqLQ4a88ZczoQ
Preview:	RIFF.c..WEBPVP8 .c..Po.......>.:.H..".-......Mz.....p.}.\|$@...Y?P.w...y.r..............{.S.].1...S....................%..............d.Z...w..........^...."..r./.k..~Sz..P?1..x..k.G.O....X.m......F..N`...<.e.u..x..%.\|....Eg..no..K..f.C..l..~..K......&}2.w.......`....$k~&...NOS/.y......X...../^....}..v\|O.......M....%..."..g.`S,.+..x.....K....w.9.x....wO........l...\.2W......6...0..j.jnsG.v ..BZ...0..`.~f.t.F(v...+..h.#.....J.+.K.VHgC..?E.(.8{9..3.GU.{..FeK..U. ...,.....l.....92. .......-A2I^...4...O...8.../...2\|...im..]_...X....n.:I....>Rg.W.s....7...0H..VC..;.p........zXHoW......zm.U..'a*O.,.E.d...r.2.`.~.jJ.B..G...&.)...............X..%..A....JV.D..>..._.).cC.~.M"....kn,.......-IB......BQ.5......4Ao.+.G..0.......7...m_.....C.P.d..4.1-.oy.qf=.yL.....!0w7.>..'.L....Y.o.y".1....x....D.r.lP...............S.6,d(..o....$.}..-_.2..bn...y.iW..........z....y..4../.Xf......8..YpcY..,4...31..A.....8...M.EZ.x~3.Ge.$6...>...o....a....f.k Q..k..../.Q;b{&2......

Chrome Cache Entry: 940

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	43036
Entropy (8bit):	5.692113097327789
Encrypted:	false
SSDEEP:	768:tQJ8XUYhYxw/U3/9ovTDPdt415COEWq/3eP0jIpQ:6JbA8w0Sv3ny5RFXQ
MD5:	DF416F45FCFEE5C0944313B56924E267
SHA1:	288CE83AB46CCB429A26F79DAD4BBA9131023E56
SHA-256:	27B101995CD472351BCA908614BF320FE018CD6FA171A979CE37A810E1732D85
SHA-512:	8AB2CBD408BDC38767459757B0CF8BAAFEA7977466E3C0BF51987A40A36D5BAF76C2D4DE79E4A64B0DF92E63482A7A031EE314CF70239397CC784E8986A55A87
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYBpaV-lxcBFMD3yqnKbxgOLmPcZQxn5pqJFCjqtdU4rfA&oe=667798C7&_nc_sid=7da55a
Preview:	...KEYF..(... .............$.......$.......,...t.....4C..4C...@..pB..............................(... .............$.......$.......(.........4C..4C...@..pB..........................................yC..!C.....PNG........IHDR.............2L.8...BPLTE....i..f..i..i..i..h..i..h..i..i..h..h..i..i..i..i..h..i..i..i..i.'.)"....tRNS..........H%/m[~>7.vRd........IDATx...;.. ..Q...X..p..z....j.%.w..............+,At\|..o...q..)].................V.C.....>..[k9+.Rr1./\|.z.}S...Q^....~....U..[.....>...1.\|...i.....1....._..l.M......c..,......,A.i..o.2yH..Uk..^.O.f...../...<.~(.n.y.}s.W...7.....n\|.\.+e.......w....\|.vR...I.U{....3.v}C..u!.B/..4....h\|......'..,.EQ<h...+w.W....q.^@;....K.n..B.G...'...L.......w.O.w.H..k..Rw..v..c..s...BGYN.g.H....^.OFw.n..D.>..k...Aw.+].n.....}.2.W.g.n3..M..,;...;.=e.3..t.*..t..=Y...G.@.gI.x..A.ml.;V...#^..n....=...t....v[..{v../.,...m.h..uw.q..+...I...y..w].m#..~.Tz... .wf..;.....J8. w.~Q......]J......n...w..:..].g.._C.N.1....tGr.wF.....

Chrome Cache Entry: 941

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.580622094395224
Encrypted:	false
SSDEEP:	6:6v/lhPEuLl/bbtoyl1AViPh3QY32V65Mm+27hVp:6v/7MuLl/bbqzuQY32s9
MD5:	AE278E7804E28C2733CEE9883DA38CE9
SHA1:	09DCBA0885D6F8094617831C6D1A16AD7A1689CA
SHA-256:	D07B8B3DE27E367F307A22F81DDD52AB9BB68A47E71376B9674316910A863B4D
SHA-512:	5CD4D885BCEBCA2DBF1CAE0F88211399E7F723ED7BB95FB10DA9C92408DB637A660604C0C54E3D9F10E0DBCDDFA194269567F6F48C885C4964EB60789C33F545
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?...lPLTEGpL.........................................................................................................N......#tRNS....Q...U........../b..*.v....:9........IDATx^m.G..@...83J.bp...?. hu.....&....,..(}.AZ.S......15D.&.p..@..#.......1.R...5....p..0..9^1..L.H./........M...).v......\|..)E. j.}..>.=...?&...u..-....IEND.B`.

Chrome Cache Entry: 942

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61750)
Category:	downloaded
Size (bytes):	61959
Entropy (8bit):	5.38827617756105
Encrypted:	false
SSDEEP:	768:LgCld39viK66dsa+WH0wY6fCG2baLtXkLy09RaUABmG1+JwS12HCLQbGUNukKjLN:U4Z1qLMQ+h+jqUV7Tvzyq
MD5:	1882A8AF2C1F4F42EFC8D525DDE764F9
SHA1:	8C3671C64A96574B843EC2D0766863EF31EF7C53
SHA-256:	39B84D2A735E4D3A4D1FA65A3B210CA904A597668C2115531527038F3B789549
SHA-512:	9B38C9EF39DE7D4454F4E0C3821CB4982A08B7816CC27B54C3BDA9222CD81CA7B2B20F189F4D048F936BAFBA2803B97C8A365DBAEE902AFEB8056F0BB0DCA885
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV.8774e17a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV"],{7187:(t,e,i)=>{i.d(e,{Z:()=>xe});i(34115),i(634),i(20796),i(49228),i(38695),i(27233),i(74083),i(18145),i(15735),i(43450),i(43108),i(32501),i(24895),i(99120),i(65584),i(26936),i(71245),i(14586),i(58143),i(43105),i(34769),i(58188),i(34114),i(77950),i(88233),i(28673),i(1939),i(6886),i(54226);var n,r,a,o,s=i(80753),c=i(81665),u=i(56666),d=i(22699),l=i.n(d);function h(t,e){var i;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(i=function(t,e){if(!t)return;if("string"==typeof t)return v(t,e);var i=Object.prototype.toString.call(t).slice(8,-1);"Object"===i&&t.constructor&&(i=t.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(t);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i))return v(t,e)}(t))\|\|e&&t&&"number"==typeof t.length

Chrome Cache Entry: 943

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1631)
Category:	downloaded
Size (bytes):	1854
Entropy (8bit):	5.476189548742878
Encrypted:	false
SSDEEP:	48:iI+NQsBNXE5FpUgZBAweIqMnFtNXE5FfQHFnF7WmkNQ3:mQC0CgZ/qC/0HQH37CQ3
MD5:	61E7DE656B18AB7E55D1517999C5271A
SHA1:	C88D123B214DC2CA47997B0BC64A343E042CB612
SHA-256:	889BCEEA0214F7A5FF7FF0E4BCD9963005F7F3C23DB59E1BF8E668D4587C313C
SHA-512:	B66DDCE124196852DF28A33AC174D7B14CE354B95F72829EBC5F2371FDBC44B7A261789C1D59BE4B98FCBE7C3EAD88E173B5B3E4146708690564C46C1542F42F
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA.7ac9d23a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DashMenu~loader.Typeahead~loader.AppModules~loader.DMDrawer~ondemand.NotFound~bundle.AboutThisA"],{73624:(e,t,a)=>{a.r(t),a.d(t,{default:()=>d});var r=a(2784),i=a(8543),l=a(83427),c=a(73569);const o=(e={})=>{const{direction:t}=(0,l.Z)();return(0,i.Z)("svg",{...e,role:e["aria-label"]?e.role\|\|"img":void 0,"aria-hidden":void 0===e["aria-label"],style:[c.Z.root,e.style],viewBox:"0 0 24 24",children:r.createElement("g",null,r.createElement("path",{d:"M23 3v14h-2V5H5V3h18zM10 17c1.1 0 2-1.34 2-3s-.9-3-2-3-2 1.34-2 3 .9 3 2 3zM1 7h18v14H1V7zm16 10c-1.1 0-2 .9-2 2h2v-2zm-2-8c0 1.1.9 2 2 2V9h-2zM3 11c1.1 0 2-.9 2-2H3v2zm0 4c2.21 0 4 1.79 4 4h6c0-2.21 1.79-4 4-4v-2c-2.21 0-4-1.79-4-4H7c0 2.21-1.79 4-4 4v2zm0 4h2c0-1.1-.9-2-2-2v2z"}))},{writingDirection:t})};o.metadata={width:24,height:24};const d=o},2669:(e,t,a)=>{a.r(t),a.d(t,{default:()=>d});var r=a(2784),i=a(8543),l=a(834

Chrome Cache Entry: 944

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11041)
Category:	downloaded
Size (bytes):	52409
Entropy (8bit):	5.6281120502734225
Encrypted:	false
SSDEEP:	768:5yDaPQKIZhkIYGiZ1HYu1dH7BJhHuJEzsU230DUNFOIDdKU:DQKIZPiTJPbKzJ
MD5:	A57B9F764B62E131AE3676AC1CDBA079
SHA1:	729A590968CC26F23E28D80AE1E957F38CCE1D58
SHA-256:	7CDF61EF7173ADF480B96A117B5D485CAA796AD922418A6701400D35F2B418E9
SHA-512:	4DFB141EA4034C2A03FD6C83DAA86CC81092BF8AFC852BEB5D6E9FC3D147E86E1F2B857F92DB36AAA990C3DD0C0267A75FCF8BA4FAF1093536670CD8A15FAEC9
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yF/r/sIUfioK8p73.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BinarySearch",["unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={GREATEST_LOWER_BOUND:"GREATEST_LOWER_BOUND",GREATEST_STRICT_LOWER_BOUND:"GREATEST_STRICT_LOWER_BOUND",LEAST_STRICT_UPPER_BOUND:"LEAST_STRICT_UPPER_BOUND",LEAST_UPPER_BOUND:"LEAST_UPPER_BOUND",NEAREST:"NEAREST"};var h=function(a,b){if(typeof a!=="number"\|\|typeof b!=="number")throw c("unrecoverableViolation")("The default comparator can only be used with sequences of numbers.","comet_infra");return a-b},i=e.GREATEST_LOWER_BOUND,j=e.GREATEST_STRICT_LOWER_BOUND,k=e.LEAST_STRICT_UPPER_BOUND,l=e.LEAST_UPPER_BOUND,m=e.NEAREST;function n(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d){c=a(f);return e(c,b)===0?c:void 0}else return void 0}function o(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d)return e(a(f),b)===0?f:-1;else return-1}function p(a,b,d,e,f,g){switch(g){case l:return q(a,b,d,e,f);case i:return r(a,b,d,e,f);case k:return s(a,b,d,e,f);case

Chrome Cache Entry: 945

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2093)
Category:	downloaded
Size (bytes):	2278
Entropy (8bit):	5.533620532097452
Encrypted:	false
SSDEEP:	48:iIK57Vre7YQSi3z4xZ12XmTvbZfPApoHObcRo7JFMWmsC:O57xecazUZEXKv1gncRofMaC
MD5:	DFB0984E84951ED68E577805D2B58B71
SHA1:	4EDB948ED93B7ED4AF73DF7E7257DE98AD50518F
SHA-256:	5C8826E44726E9DEE6EBCEA6D50AF635BC35D8D20FF86C0633BFFE1BC3D6EFC3
SHA-512:	D20CD9F73CF4D3570E8645ED0BB790793385BB56E40A14121C6DA994953AFE4DB326DDD4E52154A500F513528A45D94D4FFF637BCD9FABDC3671067CBB543139
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~ondemand.ComposeScheduling~bundle.RichTextCompose.7ce1601a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~bundle.Compose~ondemand.ComposeScheduling~bundle.RichTextCompose","icons/IconSchedule-js"],{35539:(e,t,n)=>{n.d(t,{Z:()=>v});var o=n(2784),s=n(82392),r=n(73186),a=n(45184),i=n.n(a),c=n(7038),d=n(81371),l=n(81768);const h=i().bfb895b1,u=r.default.create((e=>({icon:{fontSize:e.fontSizes.body,paddingEnd:e.spaces.space12,verticalAlign:"middle"}}))),v=({onPress:e,scheduledFor:t,testID:n})=>{const r=(0,d.R)()(),a=(0,l.o3)(t),i=!!a&&((0,l.TO)(t)&&!(0,l.Ul)(a,r)&&!(0,l.bJ)(a,r)),v=Boolean(e);return a&&i?o.createElement(s.ZP,{color:"gray700",onPress:e,size:"subtext2",testID:n,withInteractiveStyling:v},o.createElement(c.default,{style:u.icon}),h({date:(0,l.vh)(a),time:(0,l.g6)(a)})):null}},81371:(e,t,n)=>{n.d(t,{R:()=>a});var o=n(2784);const s=()=>new Date,r=o.createContext(s),a=()=>o.useContext(r)},19405:(e,t,n)=>{n.d(t,{f:()=>o});n(71372);const o=e=>new Promise(((t,n)=>{const o=n

Chrome Cache Entry: 946

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	253745
Entropy (8bit):	5.570940133562106
Encrypted:	false
SSDEEP:	3072:Ru8Nc0Iard8OdwDM2ba80qCKqjysCBIQi9a+dQWqzGmRmX4xKk+5H54Ov5gN:xNb8OdwDMX9z1zQi9TdQWqzGaM5+OW
MD5:	71F50B5F6C6FF96FEC9E529054E94360
SHA1:	53551306BA4597A55EF169C7966FD272A96FDC57
SHA-256:	2E02A00F17F085D629ACEEF706451FA75158116710C6B72C836777412573927E
SHA-512:	15B3F473EDD7C9781E62C4A5550F82CE951210CA04BA3D0325E8C6D186A39047B8D1E5DDCB67AC456A205A8555D39728FA5F46B7467EC04F7D84D6D81B2273B2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-FVWZ0RM4DH&l=audDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":17,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR",

Chrome Cache Entry: 947

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2970
Entropy (8bit):	7.8870340540410435
Encrypted:	false
SSDEEP:	48:XNOS7S+COsz8ZDCqOhk0LRemDrFBps6l6DVRi1qZEPoEEKW/rfm0NP8fnRqo:XNk+Yr5a0Nvps6Yi15PoE/W/zmuP8fRT
MD5:	F413F3EF35AD1680C946AA928672E340
SHA1:	F599398136D194DBE5F26BF204F886671DE2B66E
SHA-256:	E0CF122AA6414202DC7D64CA814375DF8F799F933C0AF7DC99829E119E9D09F9
SHA-512:	F2A9912E532765005C68963DC7B6E45CA350A8AAEAF44BCAD03DFC03BC65D13A5446FD12C2C5CB00E3BBB180ED427AAF2B943A3FA29FEEA296253D82478F8BFD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....TzTXtRaw profile type iptc.........0.....Ic;..B%~<._...~+J1VV;s.h@...7...K.{..m......m...Y....IDATX..yp.U.....{.Lf.!.d..1.c&.I.Ab.T..tA..].,.Y.u..E.WqQ..].E.....A.X]...!.2@.2.L.H ..1gw.....$....j..z........k.93....C...'.....B.!@.RQ...$c..p......(......"0.4\......Y...a...%...........uc.Mq..).cS.R....tG..V....V:G..a..E.....P.I4.dCtn..(.<>355!f....Y.W] ......B.R.... ....u.)F...P....f.....U^...U\h(....uTX.g.3q.e...xx...&..G5..0B......tS\~ZR~FrfrB.>._.................\|w.x...(.1aG?....\|.....Ei.... .........w..%.1......."!4.:.}...OC...BS.-..I.....iF..2.....w..w....){.......?.....D... ......R.Pk..._N..1.5%.t:].:GY..V".....c.9Om..0....8"...#...}Dx~J.....Qd....R..*NV...<U.^hljm..^...c...=m...B.%...[....%....g..,.x......f....oomO...B...........ZV.y.(...4.X.ilrBAFJQVjb.N..P...-..G.}e....`....!......)......h....c{..3.o..PJ).E".......o...........u:.......w.......-...a.V.T..`...&.........-..g......dS.)n.}S

Chrome Cache Entry: 948

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1326)
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	5.298840329386039
Encrypted:	false
SSDEEP:	24:iWGKfWGE5FNzFO6LsLcZdFrtjYDb8pMpcQw3hb3oT+PafKHWwDE05q+v74FT6jAp:iIyvYY5xi8S2VU+Pz0Q0FejAUWmEx+m
MD5:	6FA610DD69E6E679617EB6C66CC16119
SHA1:	D8D683853974485177DC2EA9B29F5EF9DF1F6B47
SHA-256:	A0BA3440F44E1C94E38B8C64039DC24AF9BB3755DC20BFC7DF5AD879758A7B8E
SHA-512:	8A9437A6AB7EF66FEE034E8F30F925CE5BF2D75EC3B1512EF5566F2C2222FE2A8183087A08A5AD0CFEF714A1094A28892E0C20FB05CE3915C20E6746319DC485
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b.cbab74ca.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.DMDrawer~bundle.BrandedLikesPreview~bundle.TwitterArticles~bundle.Compose~bundle.ComposeMedia~b"],{34788:(e,t,n)=>{n.d(t,{Z:()=>b});var s=n(7896),l=(n(6886),n(2784)),i=n(45184),a=n.n(i),d=n(29496),r=n(40080),o=n(73186);const p=a().i5450bec,h=a().f7432494;class u extends l.Component{constructor(...e){super(...e),this._handlePress=e=>{const{onPress:t}=this.props;t&&t(e),this._fileInput&&this._fileInput.click()},this._handleChange=e=>{const{onChange:t}=this.props,n=e.target,s=n.files;s.length&&t&&t(s),n.value=""},this._handleFileInputButtonRef=e=>{this._fileInput=e}}render(){const{accept:e,disabled:t,multiple:n,onChange:i,testID:a,...o}=this.props,u=!(null!=e&&e.includes("video")\|\|null!=e&&e.includes("gif"));return l.createElement(l.Fragment,null,l.createElement(d.ZP,(0,s.Z)({hoverLabel:e?{label:u?h:p}:void 0},o,{disabled:t,onPress:this._handlePress})),(0,r.Z)("input"

Chrome Cache Entry: 949

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1990)
Category:	downloaded
Size (bytes):	2079
Entropy (8bit):	5.689630961388063
Encrypted:	false
SSDEEP:	48:tz3YSbp4Pye3gFAHjzkHTjldRv6khkR0z4Q:tzVOgJHfV6m
MD5:	1A9A3710F5DEF4824E3A0F27D38570BA
SHA1:	5FDD7AC58BA4D0B557EBDC3ED17A497740C6F81D
SHA-256:	A58AD8957334DFFFAF13A328BF93350C62EC766ECAFE2AECE053CDAEC48A36FF
SHA-512:	E378F9C9BFC645E02A51CB6828E303BFC5610726C52473029EC2F13E54AF168BB1513F5B076BA916190498CDCB2E3F624CAB245F12E06A9F37908FE0BD8AC6CD
Malicious:	false
Reputation:	low
URL:	https://prebid.a-mo.net/cchain/0?&cb=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D176971%26dsp%3D343983%26t%3Dimage%26uid%3D
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dopenx%26uid%3D%24%7BUID%7D","https://cm.adform.net/cookie?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&redirect_url=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Da

Chrome Cache Entry: 950

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7231)
Category:	downloaded
Size (bytes):	1019455
Entropy (8bit):	5.523051368217382
Encrypted:	false
SSDEEP:	6144:Tci90RXwVZCpEwBReNyOZ7F63yC7p1WmIWL5uELPGMZDhxp5WHlP47jmvrdVACF0:gkewVLkzrPlj21ZSYw00
MD5:	86887DF5261866E479BDF32E99B84382
SHA1:	F073C567FA496EDCB850A442C43862CF6C539E77
SHA-256:	E6145B2DB1574D024488CC8C35D8271E519753E6375D8419260B76853F1B8E07
SHA-512:	BD2ABC9A690DB6C2FF60EDD21A4FEDE5BDE99314453EE5969948718926A75B9EB786DDC70814FD15F50FE4B0B6C8739A7603338A472AD3D99F9FCA09040704BF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3isgV4/yh/l/en_GB/jYvrFIoXAhaqLMNyUMJiYTDwLy5ReOAtBpOcBc5tVZ0hQbpj00E0YU6NGwStGf3BZAkK9sYbxMj7GDYvatkvPhoOE7uP6vsv83liWdOEs54GVeDTWv3lRDyMd1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVRntr0ucTZxw3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("$InternalEnumUtils",[],(function(a,b,c,d,e,f){"use strict";var g=Object.prototype.hasOwnProperty;function a(a){return function(b){return b==null\|\|!g.call(a,b)?null:a[b]}}var h=typeof WeakMap==="function"?new WeakMap():new Map();function b(a){return function(b){if(b==null)return null;var c=h.get(a);c==null&&(c=new Map(Object.getOwnPropertyNames(a).map(function(b){return[a[b],b]})),h.set(a,c));return(c=c.get(b))!=null?c:null}}f.createToJSEnum=a;f.createFromJSEnum=b}),66);.__d("BaseAspectRatioContainer.react",["react","react-strict-dom","unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){var b=a.aspectRatio,e=a.children,f=a.contentStyle,g=a.testid;g=a.xstyle;if(b<=0)throw c("unrecoverableViolation")("Aspect ratio must be a non-zero, positive number: "+b,"comet_ui");return i.jsx(d("react-strict-dom").html.div,{"data-testid":void 0,style:[j.container,g,j.dynamicTop(b)],children:e!=null&&i.jsx(d("react-strict-dom").html.

Chrome Cache Entry: 951

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6185)
Category:	downloaded
Size (bytes):	49052
Entropy (8bit):	5.519300357774896
Encrypted:	false
SSDEEP:	768:z11yseqb+u2JZfM2VxQHr4Bk292grwdHBDlWkys14WXB5oeY:z11ybvfM2gUBcdhK0B5FY
MD5:	BABE314B92CC35AE91398D3D54D3DC19
SHA1:	27ACA22082A0B4A727DFDC8A795537A72C3BA5F8
SHA-256:	BDED1688FAD3DB3E1B89FCDDFE4DB000A528195EEAFFDC6CCAE6468D1D10216E
SHA-512:	343826226F906562A5E847D3BDAC72F62888970140CF6289E4078EBA4C91F61083DB31DCDF5F3591D0D45382DD18286ED665B50839D7521A53914E672AC1E6CF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i4vm4/ym/l/en_GB/hZYSGm_6tB-.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseCacheEntryKeyBuilder",["BaseDataEntryKeyBuilder"],(function(a,b,c,d,e,f,g){"use strict";function a(a){return c("BaseDataEntryKeyBuilder")(a.entry)}g["default"]=a}),98);.__d("BaseDataEntryLabelKeyBuilder",[],(function(a,b,c,d,e,f){"use strict";function a(a){return a.label.trimLeft().toLowerCase()}f["default"]=a}),66);.__d("BaseCacheEntryLabelKeyBuilder",["BaseDataEntryLabelKeyBuilder"],(function(a,b,c,d,e,f,g){"use strict";function a(a){return c("BaseDataEntryLabelKeyBuilder")(a.entry)}g["default"]=a}),98);.__d("BaseTypeaheadDataCacheProvider",["BaseDataEntryLabelKeyBuilder"],(function(a,b,c,d,e,f,g){"use strict";a=function(){function a(a){var b=a.cache,d=a.matchBuilder,e=a.mergeBuilder;a=a.keyBuilder;a=a===void 0?c("BaseDataEntryLabelKeyBuilder"):a;this.$1=b;this.$2=d;this.$3=e;this.$4=a}var b=a.prototype;b.add=function(a){var b=this;a.forEach(function(a){var c=b.$4(a),d=b.$1.get(c);b.$1.set(c,d!=null&&b.$3!=null?b.$3(a,d):a)})};b.clear=function(){this.$1.cl

Chrome Cache Entry: 952

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5117)
Category:	downloaded
Size (bytes):	5285
Entropy (8bit):	5.533664351433264
Encrypted:	false
SSDEEP:	96:7tY5IVaw1inuQhv1DHAKfDV09cORUluz0W4crbnrbqFYs9FNDyakL6:7tY5IswgB1DHAEVNORUluQW4N18G
MD5:	1145E31418EB5D301B5EEE485F0CEA3F
SHA1:	A7B39F122C4F75745487792E053F379D31D25B89
SHA-256:	853C50480517E6A54966017C6370FDA274FED474807D75CD2390E9AB94B7DF33
SHA-512:	5C25E348CE61343A131BE95FD95833FE7E4E4122BFE842B8AD3FE1FD30B753FE93505D4938291B2501A4EB883B47D9DE73A0D24227D1A020623F7E06B905AE46
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AppModules~loader.LoggedOutNotifications.b28b261a.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AppModules~loader.LoggedOutNotifications"],{45988:e=>{e.exports={queryId:"BqIHKmwZKtiUBPi07jKctg",operationName:"EnableLoggedOutWebNotifications",operationType:"mutation",metadata:{featureSwitches:[],fieldToggles:[]}}},88625:(e,t,o)=>{"use strict";o.r(t),o.d(t,{PromptStatus:()=>y,SET_PROMPT_STATUS:()=>_,default:()=>k,fetchLoggedOutNotificationsDataTypes:()=>O,loadLoggedOutNotificationData:()=>F,pushSubscribeLoggedOut:()=>H,resetLoggedOutNotificationState:()=>V,selectArkosePromptStatus:()=>I,selectBrowserPromptStatus:()=>v,selectFetchStatus:()=>K,selectInAppPromptStatus:()=>U,selectIsEligibleForPushPrompt:()=>D,selectLastSeenTimeStamp:()=>C,selectPushNotificationsPromptIsSeen:()=>R,setLastSeenTimeStamp:()=>w,setPromptStatus:()=>h,updatePromptStatus:()=>j,verifyArkoseTokenAndSavePushToken:()=>Q,verifyArkoseTokenAndSavePushTokenActionTypes:()=>N});o(71372);var s=o(72599),r=o(17360

Chrome Cache Entry: 953

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 538, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	231445
Entropy (8bit):	7.878056770878436
Encrypted:	false
SSDEEP:	6144:prdQ7vWR75bFzIaui5IS7iNAOctC5AMkhM:prd2vwFHIiiNKw5AMke
MD5:	ED684BF2FCFD678FD8E1086E7C71FB3A
SHA1:	3F8947BD74F78E6749390670D6F92DC668813B51
SHA-256:	5E38E3E3349AC9C093637CEA63E73C85AE58569AF78B7E61804EA3CD4FB02A46
SHA-512:	7DDDBD226ACD68A761FBD34B8071298BE64A52758CF81E5AC9B0ED6CE29CB5CEFF38F657A281C7BB78D33B33EEB702F1502A5BE4C1776D646DE6ABC41A07EB1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^.v....PLTEhH.........................................................y...................k............x...................................................l...............................x..\......................5........x.....l../.....y..N..y.....5..x..v..g..+.mk.....)..f..P.}n..q..:.....%.....^.zm..f.....$.vg....}S..+.}:.\|".{g.tf.\|..xR.\|!.x[.{..w!.w..u`.v'.l[.u..tJ.t4.tV.r.rr..s..jd.HG.s..pN.n".fQ.o..m..k..l%.kFyic.j<.j..eWziM.g..g.._N.g..e&vcKyc>.c..c.acq.YJ.DAv^7u[E.].o[P\|]..Z.oVA.&&zX.lU6pV$xU.yH;rT.`PIfP7kQ.pO.uM.IQd.0.oM.dK.`H1eJ..1...KIOXC0...aD....>FX[C.."....Y@....L;4...N;!8;E...L5....518</(y..(1=...>+.&.<$/<(M),;',@&+<$,<#+:$+6#!f 5)&+..[.$4."G.$3..M.!<..D.!/..G... )..D..D..@..=..B..<..6..;.....4..:..-..4.....).....%............\.......IDATx.Y...H.....>.@B(h.3.......vp.m..X.G3#.6...u..p#..tL4p..2.C....Z.k6.W_.J........fU..H..,...Q.8.....<.Z5y..z...%..(., .Z...m.-....*!...Y...7...p}.7.yy..7..........!.......?..

Chrome Cache Entry: 954

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-6EDY1BF25J&gacid=1010184661.1716532012&gtm=45je45m0v886867345z8848813796za200zb848813796&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1065212122
Preview:	<html></html>

Chrome Cache Entry: 955

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5245), with no line terminators
Category:	downloaded
Size (bytes):	5245
Entropy (8bit):	5.6050650596279326
Encrypted:	false
SSDEEP:	96:C2Bq9u2reTB12BqhhbCsyjxtbzS5Kd3JgwdtdCbyf57zIB1bIKyFN2xGq:DBq6uBqJxTA5gLUjA
MD5:	66D672B377E062E92F23908488575E2A
SHA1:	7C378BB7B56370653BD40AE0B76C0E890EA2C8B1
SHA-256:	55FC81074F9C51901AE94210F85E5C6919A1B48AB552180CABCEDCFAA485958A
SHA-512:	4299324F3F233DF9C7F02C50C7882956A0EA38204D361ACDC1C2B08E686DD178073D117C482731E3FF683787A47CBC759ECCE8FE91C1049C45138100AE261C85
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=49087993&p=156077&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNY
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=f1QnRS1gQeuallK5DILfNA%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=7F542745-2D60-41EB-9A96-52B90C82DF34');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&u

Chrome Cache Entry: 956

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6068), with no line terminators
Category:	downloaded
Size (bytes):	6068
Entropy (8bit):	5.164643396603303
Encrypted:	false
SSDEEP:	96:9vf6HlrXOCfc3G87DtfHxCRnXGlJHNXJNulx96yaSGAHLy1r:ZglrXOUc2yJC1wNXWlx96yJWr
MD5:	DE0FB0C1686ABF531FF509103CEC0BBD
SHA1:	C885B3CF3190BCBEE2619CB85CEC9DC4B51C926E
SHA-256:	A01ADDE15BCF3504F218199C920B9065894700EC39006ACFC79F0B94C34112BE
SHA-512:	89AF4D7C6DCE1868B5DD64B04EC28F771DABCF8329042F52EE573B9672A69B56347E7EC803E2C4DA496CD43648312E23BE7F2C75290B2EE3C7024F9A60132071
Malicious:	false
Reputation:	low
URL:	https://jsc.mgid.com/p/j/pjnewsletter.com.1604063.js
Preview:	(function(){var h=function(i,e){return function(){return i&&(e=i(i=0)),e}};var b=function(i,e){return function(){return e\|\|i((e={exports:{}}).exports,e),e.exports}};var d=h(function(){});var s=h(function(){});var u=h(function(){});var p=h(function(){});var l=h(function(){});var v=h(function(){});var f=h(function(){});var P=b(function(y){d();s();u();p();l();v();f();Object.defineProperty(y,"__esModule",{value:!0});y.AdditionalWidget=y.ScriptUrlType=void 0;var G;(function(i){i.es5="es5",i.es6="es6"})(G\|\|(y.ScriptUrlType=G={}));var j=function(){function i(e,t){var n=this;if(this.additionalWidgets=e,this.urlType=t,this.additionalWidgets.length)for(var r=function(a){setTimeout(function(){n.init(n.additionalWidgets[a])},0)},o=0;o<this.additionalWidgets.length;o++)r(o)}return i.prototype.init=function(e){var t=this,n=e.widgetDivId?this.createWidgetDiv(e.id,e.widgetDivId):null,r=this.createWidgetScript(e.urls[this.urlType]),o=e.insertTo\|\|"before";this.waitForElement(e.searchSelector).then(funct

Chrome Cache Entry: 957

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=d4e7ddf450ddf256da183ea12abd5361
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 958

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 403, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	352075
Entropy (8bit):	7.995604435902066
Encrypted:	true
SSDEEP:	6144:wUeZkaCepsOddyfA0Ab/bpjDIhzOq8SMHTvfCu2Rw0/eff8TTwj66NU:wUxaCepsqkfA1b/FjDIhvMHTvJ2K0/Ui
MD5:	FD448BCA17589A812536FD6628D50927
SHA1:	36569B4BFC5D384248DDE0769F6011D425771078
SHA-256:	556D9C867F493DF9D8385BC45F7B1CC3E6027A21825D4F5513AA336049DA61B1
SHA-512:	AD0EB9F3B9DAA62E74354EE05B4C25F0B00ABF551356E2FC9BC15BF759A5AD3E21F4644510F5C81CB1028EE4B0DFFD98FE0ADAD124EF5D2FBEF23FE9DF4BAF9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..................._.IDATx.Y.fW....._.L.a.#.....A.TP...".t.c!(.;E........n\$...taD.Dta..%..@\| f2.....Sz.n...Mw3....u.[.....m..?FDT..X.F.3.T..n...[,...pB`.[..qq...SP...6..l......J./R=....=/.....br........O~.........O<..#?.W_}..Q_$...c...7U.cbn#.d #l.....kD...te..x...h...<\.H. ".V.Z.END..@lk.}P.Q...........=..<O7.y.w......g)1;.%"..`.t....8X.\z;...k.-..}...`.:.>N7.6.4...R..nn}...{.[.0...?........=V.......e.YH4e...z%...W7..Z~.G..&.;}.....j9.....sP..w.n........_>....\|g.4...D..6....+.a!).3.M...ZZ...1.Fw4c-$O.`..U6b0Y......0.\|...>..w...........=...@tL&N/.H...L...".J\|..AY...m.........#.......B.k./..../\|.M...".....#..0S...K._}n.)f..t[>.i....V....J..d..p..9..>;g. J./+W..{.U...../]....<......+/.9X...._y.0_L.v>G '!*BO.BZ..y\...#.I{..?..W..[........y.{.c.....~.........3.Q.F\|..S.....t.,,H}.V......[...........H..:.....j.v.......^.W.../..1......>...B.B."9....&.y]D.I.P....Y.H.....6.>..I.e...X....4.H.L.<..$.......=.}7.q....?...e[..

Chrome Cache Entry: 959

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50357), with no line terminators
Category:	downloaded
Size (bytes):	50358
Entropy (8bit):	5.2181356017561
Encrypted:	false
SSDEEP:	768:g7VNmagZTrKaskbeznZ5H8roxxbwxgwrsc:gSagUCGn7ck0xv
MD5:	EDC96E5BF861142792E04BE06B39697C
SHA1:	1715176511209C2917D148CC950BD550F3D33DCE
SHA-256:	938C64115CE60B98EE8151D7EB28208567753F3D4EBBE0AA0F56618C555A18FB
SHA-512:	9E2913865364B5662F48E54E53FA3E515B067E9136180215B3764AEF65FF9C059797983F091A8A982DEAAEECD265E7AA926C19103403CF317311B518D129B243
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher.min.js
Preview:	!function(t){var n={};function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=127)}([function(t,n,e){(function(n){var e=function(t){return t&&t.Math==Math&&t};t.exports=e(

Chrome Cache Entry: 960

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 961

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 962

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&adnxs_id=4426393169609033625&gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 963

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 492x276, components 3
Category:	downloaded
Size (bytes):	25048
Entropy (8bit):	7.957407021610508
Encrypted:	false
SSDEEP:	384:3ak5KbWaY4OjoOfpfyb1Sk7slRD3MRu7ETXyeMPn+wUyzyo064x0LJ2UE4YIS:3j5uZOjoO1o1/R8kyJ+ByzyH63L0UEn
MD5:	9B31FEF2F230DD9CEA3BBF24BDACA6BE
SHA1:	DA996C39D0FE8D88D99B44AB3AF6086B82B4C320
SHA-256:	BA35AC3E2F51B349CAE9A2A0C553755345503DC1320801ECE84436DC0A65527E
SHA-512:	0C576CE5170C475E641EECDD18FE41C7C0EA36A61423C5FA518EEF9A59040D56A26054C433829232F8AF6E4ADC855D49574C0B73A234A75375CCAA9C7F3808EE
Malicious:	false
Reputation:	low
URL:	https://img.rtbsystem.org/256/181/281/6f7cc2dd-9f2f-4b2a-9fbc-56c37d5018ff.jpg/16x9/492
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..4..O..0..+..s...C...<.z}....B......K..!R{.l ...J...og%.E..........=);.p...........<.d.p.H..^....!.>g'..p?.y..-..Us.............n2.l..V.e}.........8N;.5g...K..G.iFDV..6k=...By...5.G.$a....I..c....^.J.6".......MS.........Vge.d...c...?.T.v7......o......\.G.Z....W%......j..2]4D..._.}K......

Chrome Cache Entry: 964

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	64756
Entropy (8bit):	5.225827032715958
Encrypted:	false
SSDEEP:	768:OmzGTKHFfqqFgt1qNy/eGvs6jfsrP0bz8JpvegbKUAWKwIM:jFq/noy/ekfIY8JF6S
MD5:	679A3A4A17037D73A8C5289E662E71BE
SHA1:	9C67A9F0AE800CD4758FED2C9C108C6CB89B66FA
SHA-256:	0E7D78CFE6AD5ABCC9E7AEABE78DE85A2BB8DA203CFB48C83C1015F3FFA873A8
SHA-512:	832D7841382B699B6C98F0C1B1AEED00C15A8EAFE912D530DBB4C5A2E686315357BE323159F1AEA8DE77B1389B681B98FC2F7F94E91BFB31D7BA66DCD9858A77
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yg/r/DUjm2v1u572.kf
Preview:	....KEYF..$... .........................8..........B...B...?..pB............RandomSubdocument...................B#.............B...B...?..pB.................~..Tk...X...D..d1..........N#..............\...`...d.......\|........... ...8...................`...<............4.=...>W..?..'?..:?............................~..................?..?.......>...................?..?.....[.=..>..................a?UUU?.......?...................?"......>...................?0....[.=..><......=...=H...`..=`..=T...\..=\..=`......=...=l.....=..=x......=...=.......B.......B..............pB..pB........................ ...........D....... ...8...................`...<.........<N.=4..>.[.?.c+?N.>?..........=....5..>5...................8......?..?R......>............X......?..?d.....>..>R...........\|...UUU?UUU?.......?r..................?.......>...................?......>..>...............?...?............ ...........p.........<N.=4..>............<... ...................0......C`...............

Chrome Cache Entry: 965

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 966

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	29744
Entropy (8bit):	7.978579451502957
Encrypted:	false
SSDEEP:	768:KpXo/YR26fLJeLcqY4E2zSumXV2VD25jgOvHLI:Kp3R2kJeLcqY4EQsIkyOvH8
MD5:	49DDDFAD6793CF9AD36FCB692BCF94E0
SHA1:	920E15D05AD963DEF873376A68C19C9F28422615
SHA-256:	CC0841F42D4AD2BA7F2FBD547167EE783FE911835B1FEC5EE7FF923F5C141565
SHA-512:	BE45329DA190AADC95B870AC99D62648381A4840E82AE72555CF563E291E4809CB5D8B4A33FC4151B70A29E0F0FC0F8BC8416130C713FF07A2430858884FB596
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................z....sRGB...,... .IDATx.....m.U&....{.s...cM...U.....6...@..Q.DB..Z..)R..5Q"%R.CK.Ng..&....M.......5.{o.....w.'?..>...neW...~.}.~..g=kmI).........[..........c`.b.....R.SJF."RW1....... ...!.t.%w..}.t.A.".TGUU.Z..U........QK.......bDP....0.U......."..!...1.e..6...M).Pc..C.\|y... .J%.'..K....u=..1. .AO.mb......Q..."..Nw..D<..../....N....".\|...H33..b..T.....$.CCp....}.O_\|.Ew....eu.\|k..(..............c_.:s.W.OA$(.J.#..b]k]. A....Q.5.)vA...nn ..AQW.....h.'.....1F..".%...$}..pw.w.......3g.y..U`._D.JI....@.....E.0...tR...:)$ED.t..b.........+!....K!....f(.........#..U>..B...".B.m\|.k}-....._../T..MU.!.J.:N.aT.(....C.).w....\|H....Fu..b]A.....U.. .{l... .@....@....@......%Qq..\.B.{.D..8@..V'A.... ...B@.P.Wr......be..^..}RsD.......].xc..u..j......F..m..<!.....]D.Qq.@..U.....Z.F!...fRaP$w..T..".2G.....Je.}......l..j.....@%P.H.b.<yo=..dt...8.p~kk.w.x4.1..M.E..P .!...e.r...z9\|W.-....J.VK..2. T....42.O1...$.....Z.......Aa../..

Chrome Cache Entry: 967

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 177, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7438
Entropy (8bit):	7.863455923855553
Encrypted:	false
SSDEEP:	192:R0sQJBIzYnSkL9XRYPK9xKqGugO+nAUk3:ysevm6gO+nAP3
MD5:	D761C562AFC7AB8AA5599B7F50B3B501
SHA1:	6C2B8FEA9DC8174B07A62C09DBE7FDB45222FFE1
SHA-256:	D8F62FB0474C387CAF31924FF82CB89282D87F66F2FC7421160E6172EF924144
SHA-512:	6126F853A9C7B02CB63BD5210C65FB53BDC3D5E3B427DEECA3FE1FCAA171B7196E50CC940CD8DD2FAAC1D4E9CD341CFE4770AC025AED1747C36D7C9A2326FC20
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ym/r/qVHcV6wOMVW.png
Preview:	.PNG........IHDR...............Ly....PLTEGpL..........................................................................................................................................................................................................................................(((...........................}................................................................................................................................................x.............................w................................x...................................x..w..w..v.....w......................... ...w..w...................................................................................w...........v..w....................x..x.......................w..w..v..v..w.....x..w..w..x..w..s..{.....w..............g.....tRNS.....>.........Z...f...8.....H...P..N.p$d;.,.....*T.v.\..^...F..'..r....B...@J5.X...2.l,.^a.. ~j.6.yK..........~..z/....6"R......@V...zXs>..R...@.).. ."......hFv..3..........

Chrome Cache Entry: 968

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x403, components 3
Category:	dropped
Size (bytes):	44258
Entropy (8bit):	7.9796607981068455
Encrypted:	false
SSDEEP:	768:raOGrGr55wHYb6y4nOqQkfxoJOTEmPLaj9vJg9ciNBBtdfQB:WOA055vb6y4nx4MNLa5v6OiNBt4B
MD5:	2F9C1601AD3893295534E53D10EB7DE2
SHA1:	CBE3020C0D5C1051AA013D852C019ED4EC691FBE
SHA-256:	5BF2CB81FE659178511A6D20AAB20F2DBE29C00A53DFDFCA2C5D26890B892B95
SHA-512:	16608421CAE7510165EEC9FE1641C37182E9B206AB397583D9FCFBE5C0D36C2322A488BC9EE3A251157DFE41B0116C4E51F2A949701D74684A4C8EF78A96E2D4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............................................!..!..)1(%(1)I9339ITGCGTf[[f.z...................................!..!..)1(%(1)I9339ITGCGTf[[f.z..............."..........5...................................................................\|....a..l..2..X..........V.n....S.MX....SB...@.`3&.....4.fM0..@..P3F...F.q..Ufd...4.fM0..J.h..4..5l.Y.@.9.LIfM0..L...T...6i..@3f.....4.f. ..F.p..4`...P..v.....a..C/..N.1..$.....Qo.oQ.0Y..e..u}A....A.VT....v.DZ...<.@.(.PB..'.<.....=8.W.m.?sN.H..x... .......2<.zY....}[6....ve@.b..T`.$..0.@..P......l@hTT.&_Q...................<.S2..w..f...M.cG%4Bm.....36wGT....E.@...@@.C..UT..k...<}..uu=.u......T..........{.Z....O@.yd.cMU.=h.)D....@........... . ."(.(..1..}.{_^...[..O'...!.8..K....e%.1.B.....p.V:.)vW"..T..hM..".............X~ga...m[..........{f[Q. ..D.g..f..Q2hw......u.5.Y.4^sv@.}.}Y..".....@EE...... . .........g.m..o\.....5........y..9JeS.P..O.=....l3."1/.F......Z..yU@.@@.....T..s.6S...W.....J.U.

Chrome Cache Entry: 969

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 768x403, components 3
Category:	dropped
Size (bytes):	41347
Entropy (8bit):	7.981976156008475
Encrypted:	false
SSDEEP:	768:IvNafwzZd65wapMuIMlb3RB6snTLqFi1QCLur+I7itmfdHnR8:IvNyId8JpEab3RBtx1QP77H+
MD5:	D19980158C02111B6904B19E805AC715
SHA1:	735D183B95FE446F0E22E6642C7DF9428B4A9402
SHA-256:	EE54828AEB38B8D1D7E8AD7B054D6D0C3D5E2708B5455A77CAE7D4F18D6A2632
SHA-512:	60F8BA5E1703CF573D2B76DBAC6E9AC0D9CA4B3D3E06B75422DB61A6E173A3870C1D2587C6C7F41DF9A13D48C9A0572716E0D3C0159C85CA38E5BAB066488F6A
Malicious:	false
Reputation:	low
Preview:	....."Exif..II....................................................................!........'.."#%%%..),($+!$%$...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."..........7.........................................................................+...6... ..............>...F..}.........G..x8.8..6....a'....=....s....B...q......=......b......lTmbLPmbLLmbLP..&&[i.....%..1.....7.W.....F.qp....inb.0.1..71&.71&.71&.71&.{.....I...I.......I...$....x..4..9.V......8...M..W..a...cH.g,^(;s8#...@.p..'p.....O.j.O..OV...<...8.z.y<..........I...rjoY.%.....+...<\...\|..MQ.S...>'...u.6.#.I.5..G...3\|W..G..>V.,.....O.....}Sg............=7..82^..1.n.%...0RQ.~q..=.0G.....u.....5.$26..J....=8<...V...5..4..-o!._oF..kMG.~{.....#W.s]v..D.gVP...Ii^]o.i..Zq.b;v2y....+q..<.P..f..Z.....$)....,...4^.GZd..D4.-F..I...d.r..2W..=...U.......zg.q...@9.[.W..%.w...S....T.T..U.m..N....Cj....w.OY_.).4s.;....v.Y.+`..A1.....A.Q.\........n.....A..[....G..}......KI..=.

Chrome Cache Entry: 970

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7572
Entropy (8bit):	7.900845067462685
Encrypted:	false
SSDEEP:	192:eyc0CF67k382XtCXE2USe8qSLkdtHTpwDjgxTC06ZmrLwhYL04:eycU2sEKLPLW0kT1ZHL
MD5:	D26B227B068AD3C133650B12B8ED65B9
SHA1:	04EB2F1FDBCC591C4489636FB80216AEA84E089C
SHA-256:	E10D71A25089ACDD595EB1AE284F7F37D733FDE53383329A46745BB329D6F671
SHA-512:	D8A0625E08E70214192361EA2C044F648704F448E78A5AD98C305ABF547E94CB810D48A5DD2EB2FF7A1C0A9DABF04B627E5F9B2F257B2BD2030E083DDF6A1C54
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/273677404_3183917308596018_6913957081011163368_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=mLjGL3T1xhgQ7kNvgFeweTn&_nc_ht=scontent-hou1-1.xx&oh=00_AYBEj1xVdAdvALMuTQMQ4463CmqElNdM7s4OC-55c40MWQ&oe=66561599
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000890300001e070000420800001c090000a00d0000ac120000291300008714000096150000941d0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................h.....T.'`.....e?1[..........N..j.)..9.K.wH...9.FI..l....P\.{=.;.yc.=.<.......\;r7...!.%..>..\|.p.@..L.PLVqD.s<E8........3.):..<.......e.}....+.'...h..d.i.....gzB.b..X..Ek....y..M..w..sGK...+..&..<. x3..k.{<b`hn...`...\|^5q._K...P+-=.tdhb.c.0.~... .e..k..k.}..$x..dk......B.^...a.g.a....Dl..y6.P.$.{...y.g2k.......}...a.,..Z.....4.w.._..5..........v....)`.[RU.C....\|..Q...eR.apj....jfc..#6V.H$.<...ZM.D..Kb..+...;..E.iuUL[Y'.)m..H.yZ.[..f.....+...........................1...!"2 3.#A4B..............S.....gr!.....A..J#...2&....f....FG..m...r..?..<.{2...q.V.p.....L........T

Chrome Cache Entry: 971

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219217
Entropy (8bit):	5.418054083421649
Encrypted:	false
SSDEEP:	6144:haGHmZcSadFlTZa8fzYC+vijCOdIqlpawRtpm:LGry/lpb1m
MD5:	B6458A569A70D12F4B60C738067BA729
SHA1:	DA9A362C42111F33A5EA79CECD8CC86445C3FF16
SHA-256:	42BBD0012A46493C1CA8E228B118806D03BB60BB93ECB05D40413DC0401722F0
SHA-512:	B10E146EBA03A1787024CE1F719C5256F4AD8C132A7CE05061B40E7254EB282F19031E4188449C17EA421FA2C9D1B3FC0E36BE8C861F9865DA6F226ADEC12175
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.fh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.fh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 972

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	202375
Entropy (8bit):	5.371158441369364
Encrypted:	false
SSDEEP:	1536:ambBFaA699ihSbvUl5JxKmVjYQbHQw45Wv7xLp8Z6eGFlpVQTDfUwf6H8qkZre5c:aqVjY+Scl/EDfUy6H8qkZr80VsEj
MD5:	98EFD72327C099653147D545E8FCA421
SHA1:	C6989DC46FCD68F6872947FA523C2CCB4AE8054E
SHA-256:	50F2092BB6C0CF6232630BB4564289E5A178F29F05CCA8D20F888357AACBEDAD
SHA-512:	5110BF314886DAEC975385A94626996539003CBF957C002BB354475BF8136B0E847ABB0F2125542E9B0E533613B75F4D48BE2275A64FB8AD30F374CE384FC03B
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.DashMenu~loader.AppModules~bundle.Account~bundle.ReaderMode~bundle.AudioSpaceP.81728fba.js
Preview:	(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.DashMenu~loader.AppModules~bundle.Account~bundle.ReaderMode~bundle.AudioSpaceP","icons/IconPlus-js"],{96138:e=>{e.exports={queryId:"TYpVV9QioZfViHqEqRZxJA",operationName:"BrowseSpaceTopics",operationType:"query",metadata:{featureSwitches:[],fieldToggles:[]}}},96135:e=>{e.exports={queryId:"Sxn4YOlaAwEKjnjWV0h7Mw",operationName:"SubscribeToScheduledSpace",operationType:"mutation",metadata:{featureSwitches:[],fieldToggles:[]}}},2582:e=>{e.exports={queryId:"Zevhh76Msw574ZSs2NQHGQ",operationName:"UnsubscribeFromScheduledSpace",operationType:"mutation",metadata:{featureSwitches:[],fieldToggles:[]}}},89150:(e,t,n)=>{"use strict";n.d(t,{S:()=>i});n(6886);var s=n(15579);function i(e){return(t,n)=>{const i=e.analytics.contextualScribeNamespace,r={...e.details,scribe_context_namespace:i,...n},[,o,a,c,l,d]=t.split(":"),u={page:o,section:a,component:c,element:l,action:d},h=

Chrome Cache Entry: 973

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40618), with no line terminators
Category:	downloaded
Size (bytes):	40618
Entropy (8bit):	5.415118577513859
Encrypted:	false
SSDEEP:	768:GohFZvtPKkSz/SVRffF2CZ8E/n/ru0MUIM6PQcgaCsJ1PwhdUaD/fsP9/rh4b:Gof5ZKDz/lGjuV8EQcgNUk/f8e
MD5:	B49759CC6F2FCE251125449FE702CE79
SHA1:	82A6947127BA668BB3865EBC6958246EB602A21B
SHA-256:	FDDB46E25D20C4BAE1AA2FD8333260A3023D776852A1397421FD6219499BBEAF
SHA-512:	A360163BFCDD11C797B95230D2DCA3287C98D329EF62235BE3B65490FAB4D7AEB5020BD731E234D5FA5ACF088A5CF1B0F1800EAA385672548C8CB518A2743059
Malicious:	false
Reputation:	low
URL:	https://p.ad.gt/api/v1/p/405
Preview:	(()=>{var t={8709:()=>{!function(t,e){"use strict";t=t\|\|"docReady",e=e\|\|window;var n=[],r=!1,s=!1;function i(){if(!r){r=!0;for(var t=0;t<n.length;t++)n[t].fn.call(window,n[t].ctx);n=[]}}function a(){"complete"===document.readyState&&i()}e[t]=function(t,e){if("function"!=typeof t)throw new TypeError("callback for docReady(fn) must be a function");r?setTimeout((function(){t(e)}),1):(n.push({fn:t,ctx:e}),"complete"===document.readyState\|\|!document.attachEvent&&"interactive"===document.readyState?setTimeout(i,1):s\|\|(document.addEventListener?(document.addEventListener("DOMContentLoaded",i,!1),window.addEventListener("load",i,!1)):(document.attachEvent("onreadystatechange",a),window.attachEvent("onload",i)),s=!0))}}("docReady",window)},8249:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&

Chrome Cache Entry: 974

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 975

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	"https://c.mgid.com/c?v=297\|236\|8\|BEGg1nPVshiHjefJrycpm-x0ykPgwMULmOVL7G29losOkpjVsQfs8fvLjPifqjMEksntDCjZorhqhl0LgPP4us_5hbpFeDS30kQ_okEg3gk&v=297\|236\|8\|BEGg1nPVshiHjefJrycpm44GmdCCFY5SIOJ5N-jJNMdSo6m9OLK-wd47isnqmzrPksntDCjZorhqhl0LgPP4upiYEQbpKI9xrdoau1WV0DU&fw=1&f=1&cid=1604063&cbuster=1716532086081937858707&pageImp=1&pvid=18fa948f56ea8b5551e&pv=3&h2=xwIziUS4wo_UT2mUEzXCZgeiD4KdQcpbK56rnhPMeKdaqis2N7xEL3haFLY3LCBO&rid=c78efa6a-1996-11ef-8297-c84bd68370b4&tt=Referral&ts=pjnewsletter.com&iv=11&completion=2,3&muidn=o4n2DX9tTBrn"
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 976

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	downloaded
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-includes/js/wp-emoji-release.min.js?ver=6.4.4
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 977

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 978

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (430), with no line terminators
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	5.367081637533446
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfROx/stFiYSB0Fgdu43o9fk4tFiYG:haoDCfJ2fJfEYF5Kpp3ipF5G
MD5:	5313F10D2B66B788C37015F973A2E54E
SHA1:	48EF43590A85F52FE2F9BD19EEE9461E2A35EEE1
SHA-256:	454FB328A0461666BB04804533CEA7810EF3E46B1EBC482555FEAE4CBBD3AA9B
SHA-512:	5C9DEA4A818C4DF7412AE6797FBDC24896EBDB52FFAD1F148A6F42BBA56935BCCC6755B4AF86CB98C1576350EB44C139BF66B0C69DE15F216F5145D74142CDE0
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9378512249&adk=3988068036&adf=2307578502&pi=t.ma~as.9378512249&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221071&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532078169&bpp=1&bdt=157&idt=660&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&prev_fmts=0x0&nras=1&correlator=2528708288376&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532079&ga_hid=396375652&ga_fc=1&u_tz=-240&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=917&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083639%2C31083822%2C44795922%2C95331983%2C95333409%2C31083940%2C95331712%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2604152591232249&tmod=1068189570&uas=0&nvt=1&ref=https%3A%2F%2Fpjnewsletter.com%2F&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7Co%7CeEbr%7C&abl=NS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=667
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"COyEw6fUpYYDFQizJwIdFpwH-g"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-7666278362879166\\\"]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 979

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NzJhYWMzNTBkZjJiNGE0MDIwMWNhYzFmZDE4ZGZlMWY&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 980

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Ftrump-reveals-amazing-2024%2F&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=2&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=2771157673&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=EC2ABE55-4D9C-4456-8F17-FE4A27A20087&nel=1&eid=44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532113349&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw&gpic=UID%3D00000e2baa71d767%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q&eo_id_str=ID%3D0de722eb110b0792%3AT%3D1716532015%3ART%3D1716532015%3AS%3DAA-AfjZ_Vg53aFh6S_pt_4oSG5A6&correlator=640193989123539&scor=3383351060755818&ged=ve4_td0_tt0_pd0_la0_er1396.182.1699.722_vi0.0.907.1263_vp0_eb16427
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 981

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2766)
Category:	downloaded
Size (bytes):	36003
Entropy (8bit):	4.513267155031365
Encrypted:	false
SSDEEP:	384:VTxcD5T5GFNVJham+lECLPTxr9xys1XICocRdiDah+9sRf9kW7n5rdxOCGhjk:VTmD+RWm+lECLPTfnFPoUh+cO59k
MD5:	2153C7C2BE78AE7B38A4E4651C61A02B
SHA1:	9B211364CDACA37FE1947A26E7440DF7CCCAC134
SHA-256:	94189FF23607D94D26CCD8FAA0927D0F6CBB2E7F8FE904424F6D2D50C755A0CA
SHA-512:	E556C33F99DAFE272F91DCEABCDE52097212BABEEA0EF8231EEB356360F67A65E0FA4D77DD580188E7664D482017BB64A78B3CB2DB4C008E4041AAEEF0A723E5
Malicious:	false
Reputation:	low
URL:	https://tg1.aniview.com/api/adserver/spt?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64
Preview:	.(function (w) {. /tagconfig/. var adConfig = {}. var config =..{"ad":{"display":{"overlay":{},"floating":{}}},"autoLoop":true,"showPauseButton":true,"showPrevButton":true,"showNextButton":true,"showBigPrevNext":true,"showVolumeControl":true,"showFullScreen":true,"playerType":2,"playerDelay":0,"playerVersion":8,"showPlaylistItemTitle":true,"templateId":"6500061ba4211b4fae0a4124","mobile":{"showBigPlayOnPause":true,"showPauseButton":true,"showFullScreen":true,"showPrevButton":true,"showNextButton":true,"showBigPrevNext":true,"showBigPlay":true},"posType":"after","timelineMode":"bottom","targetingDomain":"","volume":{"muted":true,"unmuteOnInteract":false,"startValue":0.2},"width":100,"content":{"breakingAds":10,"commonSlots":[{"time":0,"firstAdTimeOut":10,"preloadAdTime":5,"maxAds":2,"nextAdTimeout":8},{"time":10,"firstAdTimeOut":15,"preloadAdTime":5,"maxAds":1,"nextAdTimeout":8},{"time":20,"firstAdTimeOut":15,"preloadAdTime":5,"maxAds":1,"nextAdTimeout":8}],"firstPrerollSlot"

Chrome Cache Entry: 982

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	355202
Entropy (8bit):	5.315909742593482
Encrypted:	false
SSDEEP:	3072:qv2nFOvROfNp0TwkbEOcljqBPTbjxkUR8mcnigXsF0E+HS1jGw/0C6y:yOgvROfgQOcljwPTPxkUR8jCFGw/wy
MD5:	713B48A4B24EB500610D523352B6EBE1
SHA1:	7F24D93065DFCA4A69EE7BEDBDEE359E1CFCE6F3
SHA-256:	AAD0200D4C7F34AA252CF62980C043B0D8C7481C940C79018ACE2A32E6F49BE1
SHA-512:	510AF5CAD30EA53704ADFF8F80226387A35F07B27D34783AC37ECA959DD6D848662206F6EB9C2BECD4D9E08DAE3AF9B9AD547E44313D67F4824840C34B3FBAC3
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/ab5/libs/prebid/avpb8.48.0.js
Preview:	/! License information is available at LICENSE.txt /(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[814],{9039:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return pd}});var r,i,o=n(885),a=n(2623),u=n(3802),c=n(265),s=n(6475),d=n(4942),f=n(7896),l=n(5992),p=n(4234),v=n(8087),g=n(5644),h=n(4030),m=n(8528),y=n(5740),b=n(9823),w=n(6283),O=(0,w.z3)("sync",(function(e){return'!function(){"use strict";window.render=function({ad:d,adUrl:i,width:n,height:e},{mkFrame:o},r){if(!d&&!i)throw{reason:"noAd",message:"Missing ad markup or URL"};{const t=r.document,s={width:n,height:e};i&&!d?s.src=i:s.srcdoc=d,t.body.appendChild(o(t,s))}}}();'})),I=(r={},function(e){var t=O(e);return r.hasOwnProperty(t)\|\|(r[t]=new b.Z((function(e){var n=(0,u.$u)();n.srcdoc="<script>".concat(t,"<\/script>"),n.onload=function(){return e(n.contentWindow.render)},document.body.appendChild(n)}))),r[t]}),S=p.FP.AD_RENDER_FAILED,E=p.FP.AD_RENDER_SUCCEEDED,A=p.FP.STALE_RENDER,C=

Chrome Cache Entry: 983

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 984

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 985

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	57686
Entropy (8bit):	7.9966293881746715
Encrypted:	true
SSDEEP:	1536:sUc71b2RNuhRnqWfHviXI1zznPfRTqcl5ba80vV2V0:nmbaNuhRqyH6OT5l5TnV0
MD5:	3480490B1B9DAFA252B83A425006A20D
SHA1:	A9518229E175DDCA6B12230A307DBBF8126AA98A
SHA-256:	790303C9AB945C4907268F0460D99BCC56EB192335A09D2D857E84FBF038C4BB
SHA-512:	7B10B7BD4034E486C888D420BF3135855032834B8EEE2407DB4BA5DFFD90A2ABDBF9FDC3B84DC8000E9BF6BB8682842E66D0C57EAD900A67180D3B9626F19A81
Malicious:	false
Reputation:	low
Preview:	RIFFN...WEBPVP8 B...0......s.>m2.G.#&.'..q ..gn)..uI.I..vU.+Ljw._.{{..?@..~ks..I...O....}{...8n..........p......[}{....z{1.,......#.;......Q..........G.<}..?..S).....?.? '.)......-..h:}.g...]Hg....c....._p.0[RZ..,..}.YVu..w..O.........e..u...F..[TI=.t.t.Z.'!..y...).....'\.r..{..........Mk.LP.RN.K.m...?.(...c...H........X.\|.,./....tS.5.{f..%...0.......P._....w:IqbB:...b.!.jm.[...@..%...9.x.k..}...7W.....s........r....t..8..hf.I..u.m.,.....U..!..M/....~X..........*.=...PF..x.}.....P.I.C....2BnC....<.+U.......~.D....t.......t.%Z.3:..R.H......(....u.T.a.?/....2-h..f....P...I,cT..T..8..keR.....pC...V., BK'.H..}...7....e5M..6&M..#.Q<h2.C1Ihf.u...ZF=uSa7.~.i.}2r.....1>H.S.{...eW....g..t..Xn.{u...^2..17 .#g...:5`j._.9.....}.{..\.Jp....-@..$TpY..."z....#..N.....?n33.6<.s7.....)R..7....J6.ooh.._..v.x.:._V1...B.W..xk..".'3...X7...&..@y......E...=..HQ...M.0.).;^.`.n...C.^..`.8..h..6......n...}.:.(...}.........+...1....#..An.......Hd

Chrome Cache Entry: 986

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3184)
Category:	downloaded
Size (bytes):	3407
Entropy (8bit):	5.103482387413591
Encrypted:	false
SSDEEP:	48:iIBxNFjA4Rg3Lo7sh5rS9zGbz2OXiVpK397qXGbzH6Fg+GLABl5Nqh301q9LmFdZ:Z9A48++UW7hHOVl3E3uqRyd1tV
MD5:	FFDEDB1C42FA76B23E0742CFF28E983C
SHA1:	A782717BFBBC63C668BE32A38D23CA960E2BD031
SHA-256:	DD0F2BD4E0A80401DC916A93176E0FD34FDAC2A8B48F5E5F094B833887710BF9
SHA-512:	3CF42D4690CCE98730D7511F9978B9F0616BB94CBDD33C60F04EF60BBD7B91527D10752A9F325C86F2BC9520232625D9E8B3D7915F35DBBCB09565DB90F64008
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l.acdb837a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~loader.AudioDock~loader.HoverCard~loader.DashMenu~loader.SideNav~loader.AppModules~ondemand.Dropdown~l"],{11731:(t,e,i)=>{i.d(e,{Z:()=>u});i(6886);var n=i(2784),a=i(40342),o=i(25686),s=i(40080);const r=Object.freeze({normal:100,long:250,longer:500}),h=Object.freeze({animate:"animate",static:"static",prep:"prep"}),p={height:"auto",opacity:1},m={height:0,opacity:0};class d extends n.Component{constructor(...t){super(...t),this.state={animateStage:h.static,animateProps:this.props.show&&!this.props.animateMount?p:m,renderChildren:this.props.children,componentHeight:0,props:{...this.props,show:!this.props.animateMount&&this.props.show}},this._transitionStart=({componentHeight:t})=>{const{props:{show:e,type:i}}=this.state,n="fade"===i;e?this.setState({animateProps:{height:n?"auto":0,opacity:0},animateStage:h.animate,componentHeight:t},this._requestNewFrame((()=>{this.setState({

Chrome Cache Entry: 987

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 988

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25309)
Category:	downloaded
Size (bytes):	25437
Entropy (8bit):	5.3709839401957895
Encrypted:	false
SSDEEP:	768:0ZIbiW9T+6lT53KpS2LeuwLCaKSpqx/tPzd1:0eOcXF6deFKL
MD5:	5FBABD6A88D50CABA1E78A5E90BF1016
SHA1:	423A37EB87160A9AAABD746F5CB9F35B055D9C3A
SHA-256:	1937922B177C37039D2DBBCB668805FAAD129DAA6305852BF3A9F73B57589847
SHA-512:	B68C586D14152C1BC2227C49688A5A372328422C1F3CDF4CC693A3DC0800250178B94385D86EF0641BD8706F152F2767CC4A8FD090AD3D8E820E05467C0D2725
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/bundle.Compose.94fcb44a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["bundle.Compose","loader.AudioOnlyVideoPlayer","icons/IconChevronDown-js","icons/IconChevronUp-js","shared~bundle.AudioSpacePeek~bundle.AudioSpaceDetail~bundle.AudioSpaceAnalytics~bundle.AudioSpaceReport"],{18892:(e,t,n)=>{n.d(t,{g:()=>a});var o=n(7896),s=(n(36728),n(2784)),i=n(25686);function a(e){const{style:t,type:n,...a}=e,c=[r.container,t];return n===l.transparent&&c.push(r.transparent),s.createElement(i.Z,(0,o.Z)({style:c},a))}const r=n(73186).default.create((e=>({container:{backgroundColor:e.colors.cellBackground,borderWidth:e.borderWidths.small,borderColor:e.colors.borderColor,borderStyle:"solid",borderRadius:e.borderRadii.xLarge,marginBottom:e.spaces.space16,overflow:"hidden"},explore:{backgroundColor:e.colors.gray0,borderColor:e.colors.gray0},transparent:{backgroundColor:"transparent",borderWidth:0}}))),l=Object.freeze({transparent:"transparent"})},51507:(e,t,n)=>{n.d(t

Chrome Cache Entry: 989

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	39882
Entropy (8bit):	5.674216530712266
Encrypted:	false
SSDEEP:	768:CfyxG8Fc8p8nXs6/eE/8iAATA8/838+8a8ujtcDuX2jyJA8m28SDX:QvRm45PMS4nNC8N7
MD5:	1BC20EEFD99558D1B6303EBDEFADA679
SHA1:	F8D0C2BC3466742CF139EB36FB4E32BD2C2F591F
SHA-256:	B9F7B98E5FBC319C10D14CD166415D1F01C8E478E2C7830BDF64AA75236A36FA
SHA-512:	BBDBB16D9997D889B0426A9129DC264877F14D1FDE2A1ADD3CCA45B2FE34A339C477D741266A304B1411ED59724D2DAB8A8E959B2D61AD5CB08FC5A1C0AAD22A
Malicious:	false
Reputation:	low
Preview:	{"id": "244578ccbebd41e3744959cc05d9b210","bidid": "2c23ad38fd1c474292b9f6916461cfb4","cur": "USD","seatbid": [{"seat": "","bid": [{"id": "2c23ad38fd1c474292b9f6916461cfb4_adsservngs2s7fbd5b64nvl8x_6869172_[AVC_WFCYCLE]","impid": "2c23ad38fd1c474292b9f6916461cfb4","adomain": ["nike.com"],"price": 2,"lurl": "https://track1.aniview.com/track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=85662&t=1716532073&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=2c23ad38fd1c474292b9f6916461cfb4&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=66325813709&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f

Chrome Cache Entry: 990

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 375x250, components 3
Category:	dropped
Size (bytes):	32319
Entropy (8bit):	7.966319952763892
Encrypted:	false
SSDEEP:	768:BCAXwwFgFhw2yufneNQSfVZaHF9Y8DjxFUd0:BHgwFgDw2yLZOF+qFi0
MD5:	9ACB0928AF07E2FE0B32DBC328967E9F
SHA1:	B24071C3D38CA07F07E0ABB6CDE05E4973973895
SHA-256:	61543A32057568F7E4BDF80C48E53D5B1ADB118085015165A3B81B3697A41E0B
SHA-512:	607D1A7958B2698A428A2F31E1178CFADD3F3BF81E1CBD95321A63B867FE9D21A892845966CAA15445D3C7EF73146F5CAEE79AE8843DB136077A8662BE376918
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..............O.;o.7[.o.<.$[.......6..n....G q!..s]>...bi7g.Oz.........Ih.#n..>....+C\|..6...i.q.....Z..:.......e..s)..i.x..bF./<..._..{.${..\|9...[.z.=.+_.7W...x<...!Z.'......Q.y.b.(.r.....a.:T9..g...(.{.......a.....-.Z...V.....x..\.......U[..[..l\|..j..........3T..]_............P[.~...\|;h.......;..1.....

Chrome Cache Entry: 991

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33
Entropy (8bit):	4.620151695116031
Encrypted:	false
SSDEEP:	3:YJH/NCe6lqY:YJ/kfqY
MD5:	BC72C51846F13F18EB771A3CBD520E82
SHA1:	B097673248112CAE864559863D1F62C3F1E2DFD8
SHA-256:	EDC1E4A6095FACA13BB6AF8A928E9320748F83C8778E2C5F3E9FC21F802F0089
SHA-512:	23640B391B6D3336CE1C8A6DAD0F775DE332ABBBDD23393B8E27D390E977798B0C22F205373A6BD060CB8B568578B0C1004BE212251A8B99C0A4B3ED947F5630
Malicious:	false
Reputation:	low
URL:	https://lb.eu-1-id5-sync.com/lb/v1
Preview:	{"lb":"upSDx4bmvWh7dgo9JRzePg=="}

Chrome Cache Entry: 992

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1851)
Category:	downloaded
Size (bytes):	65323
Entropy (8bit):	5.578131676474043
Encrypted:	false
SSDEEP:	768:m8PlWveq2ODb8aLax1y2QTrsF9zKJCnaduURHJwTYqZ9bUA+VxyEopp3LyrQ6:m8Plaeqrbje0E9zQKaduWwcqgyEopFs
MD5:	FF9293AE681DC1A12F82E31BD78ECE70
SHA1:	6A382016C89892C6C1E9DB432DD816105BA6B3FA
SHA-256:	1E739B3D176C8E0405111F7D29FC25EE943CB3463B87D1F31209A847804ED2C8
SHA-512:	3AE4A26E430F92B374649D4632F6E733FF52C0B1DB789BD5D4C615A39D1B49E1F8F582FF9D78B6291144B4204E88C26D230810A3FF99F206BD75BF8C7165FC19
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/rum.js?fcd=true
Preview:	(function(){function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),p={},ha={};function r(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in p?f=p:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=fa&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ca(p,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0

Chrome Cache Entry: 993

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 994

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	836
Entropy (8bit):	5.372502073219384
Encrypted:	false
SSDEEP:	12:TMHdPNCGi/nzVJ/KYf3nhWOgvHX0U3uC1065F8Lio8p0NIuviCIhJnTaUx:2dIGATLf3ix3utHOppQIUIfb
MD5:	7D59364B7ED2DF3F02507C9F92560DF9
SHA1:	D2A98D9A83D13D1C22D1DABEFF5D90C93482301B
SHA-256:	7992A4430843EF8B4BBAE534358BE3193AA1AE9C78F273E8E8A70B6AF1244AC5
SHA-512:	3803CD6A8DEC5D28B7D74C76E8305605F4042699DF673DCFB62A2DD2EA2BCB62D6F126AF07E615B2CCF93E3B66265CA0111E82E73FF558A0A499B9FE10E49549
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 83.7 88.2" style="enable-background:new 0 0 83.7 88.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#08AACD;}.</style>.<title>Epeex_by_MGID + Adchoice</title>.<path class="st0" d="M77.3,51.3c7.8-4.2,9.2-9.7,0-15l-63-34.5C6.7-2.5,0,1.1,0,9.9v67.9C0,89,5.9,90.1,13.6,85.9l7.2-4.1..c2.3-1.2,3.5-3.8,3.1-6.3c-0.6-2.4-3-3.9-5.4-3.3l-0.8,0.3c-4.3,2.3-7.1,0-7.1-4.9V18.9c0-4.8,3.5-7.2,7.7-4.5l44.1,25.2..c4.3,2.5,4.3,6.3,0,8.7L35.5,62.6V45.8c0-2.5-2.1-4.6-4.6-4.6s-4.6,2.1-4.6,4.6l0,0V69c0.5,3.5,3.8,5.9,7.3,5.4c0,0,0,0,0,0l1.6-0.5..L77.3,51.3z"/>.</svg>.

Chrome Cache Entry: 995

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73754
Entropy (8bit):	5.385997270186659
Encrypted:	false
SSDEEP:	1536:ZOr55MtTl4rfO+k7PWJDm6FdNjatSKiCv4qre35hN:4LOhPdtwL5n
MD5:	F711AA74639DA74F03A06104C97BB00A
SHA1:	179CA5B4D9D4354DB50D7AF5DF7FCEF3A8464E40
SHA-256:	49B036DC94762849B92B42DC4DF02447B11DA8B8DEB9F4230E68EFA678656233
SHA-512:	657F5A9FC05807032FCE3FE911543A056445836E6A4FF3E274478B052636808D0C50CF2E127A01EEF74EDC34C4B9B155FA47775C04A737B99BE4CBAA0C258220
Malicious:	false
Reputation:	low
URL:	https://player.aniview.com/script/6.1/libs/prebid/avpb8.48.0a6.js
Preview:	/! License information is available at LICENSE.txt /(self.webpackChunk_aniview_player=self.webpackChunk_aniview_player\|\|[]).push([[162],{7695:function(e,r,t){"use strict";t.r(r),t.d(r,{spec:function(){return d}});var n=t(2623),i=t(3802),a=t(4953),o=t(5740),s=t(5992),d={code:"bidscube",supportedMediaTypes:[o.Mk,o.pX,o.B5],isBidRequestValid:function(e){return Boolean(e.bidId&&e.params&&!isNaN(parseInt(e.params.placementId)))},buildRequests:function(e){e=(e=(0,s.lY)(e))\|\|[];var r=window;try{window.top.location.toString(),r=window.top}catch(e){}for(var t=(0,i.bM)(),n=[],a=0;a<e.length;a++){var d=e[a];n.push({placementId:d.params.placementId,bidId:d.bidId,traffic:d.params.traffic\|\|o.Mk,allParams:JSON.stringify(d)})}return{method:"POST",url:"https://supply.bidscube.com/?c=o&m=multi",data:{deviceWidth:r.screen.width,deviceHeight:r.screen.height,language:navigator&&navigator.language?navigator.language:"",secure:+("https:"===t.protocol),host:t.hostname,page:t.pathname,placements:n}}},interpr

Chrome Cache Entry: 996

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	50220
Entropy (8bit):	7.978819374909206
Encrypted:	false
SSDEEP:	768:VVaITa7x2AMG/1aKxGl8hWPokmXXvcdyDaVmC6lKYKtNGg3SUX1nn:aITa12AMmtxG2WPneXraVW4ta0n
MD5:	925CC892C6E17253FEB8F2C9F178C396
SHA1:	59A8357062CFB6AD3573F2DF23D78F4B17C8E876
SHA-256:	4FCCF0B0293B122697A6D08E22728133E4901832839C993DEC682C8FE71C1CA1
SHA-512:	2EDAF28DD001460316CF28EE07E1AF6E6F7D0419BB7EDA2DDB2609D9EC54E39591FCAA75FDAD7452BE44928FEA0AF412F330A31C356BA04393A5FE91DB74B733
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-content/uploads/2023/01/HollywoodPic1FI-768x403.jpg
Preview:	....."Exif..MM............................................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr................................)......)$,$!$,$A3--3AK?<?K[QQ[rlr.............."..........5......................................................................gGM..9....t...t...u...t...t...t...u...u...u...u........t0..tu......C........&K...A.....o.0cvA..P,P.$xQ.&.#Z.$4....G..-..n.8...a..T......v...`.".+#.<@.p..I.....5.....t4...M.....z]...9.X.g..[ f..`....D....jPJI..4.d.[D..H%.......&..6.Qp...,.C!.!...Z,....l..B]K"...h..^bq..L.._YU8...3my....T.dO....{dO...bD....E..z.VR.j..%..:.-...K..ah...A.Y..Q.R..E...=...}/.t.o..4..c.B.^l...@C.#..e!.FS....Il..Gm...i..HHP.nKKNX.r[em6...2..!..Q@. ...A.6K&$.R$..i.M.1...F$[V....5..5.].:.V.9..Q...f8.evxY....v..Uh.i.."I-..$.)..B.J.d..%.....u.\|?..H..&...9.~Z..F...x.@...$..&.M0....#m..N.h...!.."iJ%.....`.n7!.ii.....BB\I&.D..D.D... .L.`...'PI....^...,..4`..u.....7d*..J..b4.:E)".5r.2.L...U"...%.'E.w.. P..u.\|?..

Chrome Cache Entry: 997

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65062)
Category:	downloaded
Size (bytes):	410900
Entropy (8bit):	5.418931422835291
Encrypted:	false
SSDEEP:	12288:8g8S7TZDFRTSYR67cmGugfAnfFU8ualhLMG/R19rLrBYIQPM93bM2uVGTGLhIhOg:83S71DFRTSYR8cmGugfAnfFU8ualhLM0
MD5:	521010BB688D5C4FB8233F5964FD8E26
SHA1:	AAE959B81DF74F7A2C0385954669F25A79FE3A0C
SHA-256:	19AD3112B9E1C4418E64B5AB28B565EE92F4E437376E4C6F14C76B5206F1E8D8
SHA-512:	ACF4E952F5BCBA439D7A1F4F508230B4BA2B8935B38C12B922CF6C8F507F714854CA43BB8264B311CEFC8D702E9E7D89E895852D298AD1184683548B3E14A5E3
Malicious:	false
Reputation:	low
URL:	https://player.avplayer.com/script/8.3/v/ui.js
Preview:	/!. Aniview Content Player v8.5.6. * Build time: 2024-05-22T07:09:28.235Z. * All rights reserved to ANIVIEW LTD 2024. /./! License information is available at LICENSE.txt */(window.webpackChunk_aniview_player=window.webpackChunk_aniview_player\|\|[]).push([[522],{55460:function(t,e,n){"use strict";n.d(e,{w:function(){return kn}});var i=n(68645),o=n.n(i),a=n(15687),r=n.n(a),s=n(5561),l=n.n(s),c=n(67375),u=n.n(c),h=n(80300),d=n.n(h),p=n(58826),f=n.n(p),v=n(92664),g=n.n(v),m=n(7819),_=n.n(m),y=n(84827),S=n.n(y),w=n(8105),b=n.n(w),k=n(82945),x=n.n(k),C=n(86981),P=n.n(C),B=n(13464),A=n.n(B),R=n(90143),I=n.n(R),T=n(39290),F=n.n(T),L=n(8571),z=n.n(L),M=n(35704),V=n.n(M),E=n(72748),W=n(92617),D=n(43063),O=n(42084),N=n(70727),U=n(49941),Z=n(85380),H=n(75921),Y=n(699),q=n(91920),$=n(9222),j=n(25928),X=n(6426),G=n(54847),K=n.n(G),J=n(44016),Q=n.n(J),tt=n(10719),et=n.n(tt),nt=n(47667),it=n.n(nt),ot=n(98186),at=n.n(ot),rt=n(4945),st=n(68326),lt=(n(54877),n(8631)),ct=n(81165),ut=n(60539),ht=n(517

Chrome Cache Entry: 998

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
Reputation:	low
URL:	https://pjnewsletter.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 999

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 24, 2024 08:26:48.265124083 CEST	192.168.2.4	1.1.1.1	0xde1	Standard query (0)	pjnewsletter.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:48.265338898 CEST	192.168.2.4	1.1.1.1	0x8da1	Standard query (0)	pjnewsletter.com	65	IN (0x0001)	false
May 24, 2024 08:26:49.975795031 CEST	192.168.2.4	1.1.1.1	0x3a1c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:49.976349115 CEST	192.168.2.4	1.1.1.1	0x95ca	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 08:26:50.148255110 CEST	192.168.2.4	1.1.1.1	0x70b4	Standard query (0)	ruamupr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.148791075 CEST	192.168.2.4	1.1.1.1	0xe5fc	Standard query (0)	ruamupr.com	65	IN (0x0001)	false
May 24, 2024 08:26:50.155112028 CEST	192.168.2.4	1.1.1.1	0xf9e6	Standard query (0)	tg1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.155678988 CEST	192.168.2.4	1.1.1.1	0x9507	Standard query (0)	tg1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:26:50.163341999 CEST	192.168.2.4	1.1.1.1	0x3496	Standard query (0)	widget.adcovery.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.163557053 CEST	192.168.2.4	1.1.1.1	0x1aec	Standard query (0)	widget.adcovery.com	65	IN (0x0001)	false
May 24, 2024 08:26:50.477940083 CEST	192.168.2.4	1.1.1.1	0x96d9	Standard query (0)	jsc.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.478185892 CEST	192.168.2.4	1.1.1.1	0x27ef	Standard query (0)	jsc.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:26:50.841661930 CEST	192.168.2.4	1.1.1.1	0xd75a	Standard query (0)	thepatriotjournal.disqus.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.841790915 CEST	192.168.2.4	1.1.1.1	0x2ea5	Standard query (0)	thepatriotjournal.disqus.com	65	IN (0x0001)	false
May 24, 2024 08:26:50.897182941 CEST	192.168.2.4	1.1.1.1	0x2e4b	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.897346973 CEST	192.168.2.4	1.1.1.1	0x7b0f	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
May 24, 2024 08:26:50.919986963 CEST	192.168.2.4	1.1.1.1	0xad0c	Standard query (0)	cdn.engine.4dsply.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.920175076 CEST	192.168.2.4	1.1.1.1	0x4671	Standard query (0)	cdn.engine.4dsply.com	65	IN (0x0001)	false
May 24, 2024 08:26:51.193275928 CEST	192.168.2.4	1.1.1.1	0x753a	Standard query (0)	servicer.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.193547964 CEST	192.168.2.4	1.1.1.1	0x95c3	Standard query (0)	servicer.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:26:51.257030964 CEST	192.168.2.4	1.1.1.1	0x1940	Standard query (0)	pjnewsletter.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.257334948 CEST	192.168.2.4	1.1.1.1	0xaa91	Standard query (0)	pjnewsletter.com	65	IN (0x0001)	false
May 24, 2024 08:26:51.272865057 CEST	192.168.2.4	1.1.1.1	0x7631	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.273215055 CEST	192.168.2.4	1.1.1.1	0xb1a7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:26:51.643755913 CEST	192.168.2.4	1.1.1.1	0xb5a8	Standard query (0)	disqus.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.644186020 CEST	192.168.2.4	1.1.1.1	0x81b8	Standard query (0)	disqus.com	65	IN (0x0001)	false
May 24, 2024 08:26:51.645009041 CEST	192.168.2.4	1.1.1.1	0x24e8	Standard query (0)	c.disquscdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.645181894 CEST	192.168.2.4	1.1.1.1	0xf01d	Standard query (0)	c.disquscdn.com	65	IN (0x0001)	false
May 24, 2024 08:26:51.850452900 CEST	192.168.2.4	1.1.1.1	0xa2b9	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.850706100 CEST	192.168.2.4	1.1.1.1	0x4bf6	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 24, 2024 08:26:51.852888107 CEST	192.168.2.4	1.1.1.1	0x88ab	Standard query (0)	souhaija.site	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.853130102 CEST	192.168.2.4	1.1.1.1	0x8e7a	Standard query (0)	souhaija.site	65	IN (0x0001)	false
May 24, 2024 08:26:51.854985952 CEST	192.168.2.4	1.1.1.1	0x1ea0	Standard query (0)	cdn2.decide.dev	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.855209112 CEST	192.168.2.4	1.1.1.1	0xad87	Standard query (0)	cdn2.decide.dev	65	IN (0x0001)	false
May 24, 2024 08:26:52.171416044 CEST	192.168.2.4	1.1.1.1	0x3123	Standard query (0)	dotsply.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.171514988 CEST	192.168.2.4	1.1.1.1	0xe885	Standard query (0)	dotsply.com	65	IN (0x0001)	false
May 24, 2024 08:26:53.121706009 CEST	192.168.2.4	1.1.1.1	0x7a99	Standard query (0)	player.avplayer.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:53.121828079 CEST	192.168.2.4	1.1.1.1	0x4512	Standard query (0)	player.avplayer.com	65	IN (0x0001)	false
May 24, 2024 08:26:53.152692080 CEST	192.168.2.4	1.1.1.1	0x7364	Standard query (0)	track1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:53.152934074 CEST	192.168.2.4	1.1.1.1	0x2dfc	Standard query (0)	track1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:26:53.321758032 CEST	192.168.2.4	1.1.1.1	0xe361	Standard query (0)	c.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:53.322180986 CEST	192.168.2.4	1.1.1.1	0xafed	Standard query (0)	c.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:53.492239952 CEST	192.168.2.4	1.1.1.1	0xefd2	Standard query (0)	decide.dev	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:53.492239952 CEST	192.168.2.4	1.1.1.1	0xbc8b	Standard query (0)	decide.dev	65	IN (0x0001)	false
May 24, 2024 08:26:54.414570093 CEST	192.168.2.4	1.1.1.1	0x50d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.414722919 CEST	192.168.2.4	1.1.1.1	0x2acf	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:26:54.428098917 CEST	192.168.2.4	1.1.1.1	0x60b2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.428239107 CEST	192.168.2.4	1.1.1.1	0x877b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:26:54.577198982 CEST	192.168.2.4	1.1.1.1	0xbcea	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.577299118 CEST	192.168.2.4	1.1.1.1	0x3282	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:26:55.028518915 CEST	192.168.2.4	1.1.1.1	0x9156	Standard query (0)	engine.4dsply.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.029879093 CEST	192.168.2.4	1.1.1.1	0x738	Standard query (0)	engine.4dsply.com	65	IN (0x0001)	false
May 24, 2024 08:26:55.200911045 CEST	192.168.2.4	1.1.1.1	0x8253	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.201364040 CEST	192.168.2.4	1.1.1.1	0x6672	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 24, 2024 08:26:55.468708992 CEST	192.168.2.4	1.1.1.1	0xa91c	Standard query (0)	adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.469479084 CEST	192.168.2.4	1.1.1.1	0xac2a	Standard query (0)	adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:55.535096884 CEST	192.168.2.4	1.1.1.1	0x2f12	Standard query (0)	c.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.535217047 CEST	192.168.2.4	1.1.1.1	0x63fa	Standard query (0)	c.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:26:55.542313099 CEST	192.168.2.4	1.1.1.1	0x3abc	Standard query (0)	6.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.542674065 CEST	192.168.2.4	1.1.1.1	0x77c6	Standard query (0)	6.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:55.544003963 CEST	192.168.2.4	1.1.1.1	0x3949	Standard query (0)	4.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.544938087 CEST	192.168.2.4	1.1.1.1	0xe94f	Standard query (0)	4.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:55.865582943 CEST	192.168.2.4	1.1.1.1	0xcf96	Standard query (0)	track1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.865945101 CEST	192.168.2.4	1.1.1.1	0xdbf3	Standard query (0)	track1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:26:55.867211103 CEST	192.168.2.4	1.1.1.1	0xa235	Standard query (0)	ruamupr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.867479086 CEST	192.168.2.4	1.1.1.1	0xade0	Standard query (0)	ruamupr.com	65	IN (0x0001)	false
May 24, 2024 08:26:55.871995926 CEST	192.168.2.4	1.1.1.1	0x2a05	Standard query (0)	souhaija.site	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.872133970 CEST	192.168.2.4	1.1.1.1	0x278	Standard query (0)	souhaija.site	65	IN (0x0001)	false
May 24, 2024 08:26:55.896799088 CEST	192.168.2.4	1.1.1.1	0xf35	Standard query (0)	widget.adcovery.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.896800041 CEST	192.168.2.4	1.1.1.1	0x4b80	Standard query (0)	widget.adcovery.com	65	IN (0x0001)	false
May 24, 2024 08:26:55.919704914 CEST	192.168.2.4	1.1.1.1	0x6baa	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.920085907 CEST	192.168.2.4	1.1.1.1	0x4880	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:26:56.192240000 CEST	192.168.2.4	1.1.1.1	0xb5a0	Standard query (0)	gu2nbmodgvw2.l4.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.192418098 CEST	192.168.2.4	1.1.1.1	0x54a8	Standard query (0)	gu2nbmodgvw2.l4.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:56.193336010 CEST	192.168.2.4	1.1.1.1	0xa591	Standard query (0)	gu2nbmodgvw2.n4.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.193795919 CEST	192.168.2.4	1.1.1.1	0x5333	Standard query (0)	gu2nbmodgvw2.n4.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:56.194422007 CEST	192.168.2.4	1.1.1.1	0x2826	Standard query (0)	gu2nbmodgvw2.s4.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.194777966 CEST	192.168.2.4	1.1.1.1	0x7cb1	Standard query (0)	gu2nbmodgvw2.s4.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:56.289041042 CEST	192.168.2.4	1.1.1.1	0x3dcb	Standard query (0)	4.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.289175034 CEST	192.168.2.4	1.1.1.1	0xb804	Standard query (0)	_2087._https.4.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:56.289614916 CEST	192.168.2.4	1.1.1.1	0xf76d	Standard query (0)	6.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.289731026 CEST	192.168.2.4	1.1.1.1	0x92c0	Standard query (0)	_2087._https.6.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:56.290138960 CEST	192.168.2.4	1.1.1.1	0x46da	Standard query (0)	c.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.290286064 CEST	192.168.2.4	1.1.1.1	0xa3c1	Standard query (0)	c.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:57.243190050 CEST	192.168.2.4	1.1.1.1	0xc83	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.243324041 CEST	192.168.2.4	1.1.1.1	0xf81d	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 24, 2024 08:26:57.245098114 CEST	192.168.2.4	1.1.1.1	0xd0b7	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.245366096 CEST	192.168.2.4	1.1.1.1	0xe38f	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:26:57.245677948 CEST	192.168.2.4	1.1.1.1	0x57a1	Standard query (0)	ad.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.245863914 CEST	192.168.2.4	1.1.1.1	0xc3f8	Standard query (0)	ad.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:26:57.290739059 CEST	192.168.2.4	1.1.1.1	0xf837	Standard query (0)	adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.290855885 CEST	192.168.2.4	1.1.1.1	0xa3e6	Standard query (0)	adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:57.299909115 CEST	192.168.2.4	1.1.1.1	0x6727	Standard query (0)	6.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.300121069 CEST	192.168.2.4	1.1.1.1	0x1744	Standard query (0)	6.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:57.300787926 CEST	192.168.2.4	1.1.1.1	0xc51c	Standard query (0)	4.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.300961971 CEST	192.168.2.4	1.1.1.1	0x41ee	Standard query (0)	4.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:26:57.301214933 CEST	192.168.2.4	1.1.1.1	0x3918	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.301337957 CEST	192.168.2.4	1.1.1.1	0xfcbe	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:26:59.938811064 CEST	192.168.2.4	1.1.1.1	0xeb52	Standard query (0)	cdn.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.939093113 CEST	192.168.2.4	1.1.1.1	0x99e6	Standard query (0)	cdn.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:26:59.939740896 CEST	192.168.2.4	1.1.1.1	0x1212	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.939928055 CEST	192.168.2.4	1.1.1.1	0x25f9	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
May 24, 2024 08:27:02.121052980 CEST	192.168.2.4	1.1.1.1	0x9ead	Standard query (0)	player.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:02.121149063 CEST	192.168.2.4	1.1.1.1	0x71d4	Standard query (0)	player.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:04.032561064 CEST	192.168.2.4	1.1.1.1	0x129a	Standard query (0)	rtb-use.mfadsrvr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.032934904 CEST	192.168.2.4	1.1.1.1	0x9c30	Standard query (0)	rtb-use.mfadsrvr.com	65	IN (0x0001)	false
May 24, 2024 08:27:04.033591986 CEST	192.168.2.4	1.1.1.1	0x145d	Standard query (0)	c.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.033711910 CEST	192.168.2.4	1.1.1.1	0xc0a6	Standard query (0)	c.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:04.035064936 CEST	192.168.2.4	1.1.1.1	0xbf17	Standard query (0)	s-img.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.035618067 CEST	192.168.2.4	1.1.1.1	0x6154	Standard query (0)	s-img.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:04.036494017 CEST	192.168.2.4	1.1.1.1	0xa3a4	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.036720037 CEST	192.168.2.4	1.1.1.1	0x3fea	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
May 24, 2024 08:27:04.037273884 CEST	192.168.2.4	1.1.1.1	0x3798	Standard query (0)	cm.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.037570953 CEST	192.168.2.4	1.1.1.1	0x7182	Standard query (0)	cm.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:04.038121939 CEST	192.168.2.4	1.1.1.1	0xaab0	Standard query (0)	cdn.id5-sync.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.038254023 CEST	192.168.2.4	1.1.1.1	0x1996	Standard query (0)	cdn.id5-sync.com	65	IN (0x0001)	false
May 24, 2024 08:27:04.041692972 CEST	192.168.2.4	1.1.1.1	0xc96c	Standard query (0)	6.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.042457104 CEST	192.168.2.4	1.1.1.1	0xf184	Standard query (0)	6.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:27:04.044337988 CEST	192.168.2.4	1.1.1.1	0xb0bb	Standard query (0)	4.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.044656992 CEST	192.168.2.4	1.1.1.1	0x2773	Standard query (0)	4.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:27:04.045619965 CEST	192.168.2.4	1.1.1.1	0xe806	Standard query (0)	adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.046205997 CEST	192.168.2.4	1.1.1.1	0xbca4	Standard query (0)	adsco.re	65	IN (0x0001)	false
May 24, 2024 08:27:04.048147917 CEST	192.168.2.4	1.1.1.1	0xbd99	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.048616886 CEST	192.168.2.4	1.1.1.1	0x7539	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 24, 2024 08:27:04.050503969 CEST	192.168.2.4	1.1.1.1	0xd4f4	Standard query (0)	c.adsco.re	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.050663948 CEST	192.168.2.4	1.1.1.1	0xa05	Standard query (0)	c.adsco.re	65	IN (0x0001)	false
May 24, 2024 08:27:05.074467897 CEST	192.168.2.4	1.1.1.1	0x55bd	Standard query (0)	go1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.074670076 CEST	192.168.2.4	1.1.1.1	0xe56c	Standard query (0)	go1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.077733040 CEST	192.168.2.4	1.1.1.1	0x75ab	Standard query (0)	a.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.077892065 CEST	192.168.2.4	1.1.1.1	0x6174	Standard query (0)	a.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.582163095 CEST	192.168.2.4	1.1.1.1	0xf263	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.582163095 CEST	192.168.2.4	1.1.1.1	0xa293	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.809758902 CEST	192.168.2.4	1.1.1.1	0x6132	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.809758902 CEST	192.168.2.4	1.1.1.1	0x7079	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.810524940 CEST	192.168.2.4	1.1.1.1	0xcdf6	Standard query (0)	cdn.connectad.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.810673952 CEST	192.168.2.4	1.1.1.1	0x8d66	Standard query (0)	cdn.connectad.io	65	IN (0x0001)	false
May 24, 2024 08:27:05.811168909 CEST	192.168.2.4	1.1.1.1	0x3758	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.811168909 CEST	192.168.2.4	1.1.1.1	0x2442	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.815023899 CEST	192.168.2.4	1.1.1.1	0x6834	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.815437078 CEST	192.168.2.4	1.1.1.1	0x466e	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.815437078 CEST	192.168.2.4	1.1.1.1	0x3017	Standard query (0)	rtb-usw.mfadsrvr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.815896988 CEST	192.168.2.4	1.1.1.1	0xa74e	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.815896988 CEST	192.168.2.4	1.1.1.1	0x81fb	Standard query (0)	rtb-usw.mfadsrvr.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.816176891 CEST	192.168.2.4	1.1.1.1	0xf566	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:05.889261961 CEST	192.168.2.4	1.1.1.1	0x381c	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.889436960 CEST	192.168.2.4	1.1.1.1	0x2b4	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:27:05.890228033 CEST	192.168.2.4	1.1.1.1	0x6efa	Standard query (0)	cdn.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.890963078 CEST	192.168.2.4	1.1.1.1	0x95c7	Standard query (0)	cdn.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.902117014 CEST	192.168.2.4	1.1.1.1	0xb617	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.902762890 CEST	192.168.2.4	1.1.1.1	0x7e47	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.947418928 CEST	192.168.2.4	1.1.1.1	0x249f	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.947792053 CEST	192.168.2.4	1.1.1.1	0x4ea5	Standard query (0)	tracker.direct.e-volution.ai	65	IN (0x0001)	false
May 24, 2024 08:27:05.952470064 CEST	192.168.2.4	1.1.1.1	0x48bf	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.954848051 CEST	192.168.2.4	1.1.1.1	0x77e3	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
May 24, 2024 08:27:05.954848051 CEST	192.168.2.4	1.1.1.1	0x12d0	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:06.126214027 CEST	192.168.2.4	1.1.1.1	0x4a72	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
May 24, 2024 08:27:06.619587898 CEST	192.168.2.4	1.1.1.1	0x2b88	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:06.619946957 CEST	192.168.2.4	1.1.1.1	0x220a	Standard query (0)	tracker.direct.e-volution.ai	65	IN (0x0001)	false
May 24, 2024 08:27:06.665879965 CEST	192.168.2.4	1.1.1.1	0x7564	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:06.666232109 CEST	192.168.2.4	1.1.1.1	0x7fe9	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
May 24, 2024 08:27:07.325292110 CEST	192.168.2.4	1.1.1.1	0x81b5	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.325443029 CEST	192.168.2.4	1.1.1.1	0x6cfc	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
May 24, 2024 08:27:07.336227894 CEST	192.168.2.4	1.1.1.1	0xa54f	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.336409092 CEST	192.168.2.4	1.1.1.1	0xc641	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
May 24, 2024 08:27:07.385821104 CEST	192.168.2.4	1.1.1.1	0x301e	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.392482042 CEST	192.168.2.4	1.1.1.1	0xbfb2	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.392654896 CEST	192.168.2.4	1.1.1.1	0x32ef	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
May 24, 2024 08:27:07.393702030 CEST	192.168.2.4	1.1.1.1	0x40d2	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.394016981 CEST	192.168.2.4	1.1.1.1	0xc10c	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:07.481125116 CEST	192.168.2.4	1.1.1.1	0xbf4	Standard query (0)	sync-eu.connectad.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.481218100 CEST	192.168.2.4	1.1.1.1	0x9f04	Standard query (0)	sync-eu.connectad.io	65	IN (0x0001)	false
May 24, 2024 08:27:07.498043060 CEST	192.168.2.4	1.1.1.1	0x808e	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.498389006 CEST	192.168.2.4	1.1.1.1	0x6e1d	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
May 24, 2024 08:27:08.131169081 CEST	192.168.2.4	1.1.1.1	0x213e	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.131408930 CEST	192.168.2.4	1.1.1.1	0xb2b9	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.132435083 CEST	192.168.2.4	1.1.1.1	0x75ba	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.132755995 CEST	192.168.2.4	1.1.1.1	0x6628	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.133450031 CEST	192.168.2.4	1.1.1.1	0xf10f	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.133598089 CEST	192.168.2.4	1.1.1.1	0xdd4	Standard query (0)	u.openx.net	65	IN (0x0001)	false
May 24, 2024 08:27:08.134264946 CEST	192.168.2.4	1.1.1.1	0x7589	Standard query (0)	s2s.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.134543896 CEST	192.168.2.4	1.1.1.1	0xecbe	Standard query (0)	s2s.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.135174990 CEST	192.168.2.4	1.1.1.1	0x5d60	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.135395050 CEST	192.168.2.4	1.1.1.1	0xe4da	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.136502981 CEST	192.168.2.4	1.1.1.1	0x87f9	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.138659000 CEST	192.168.2.4	1.1.1.1	0xfb39	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.139098883 CEST	192.168.2.4	1.1.1.1	0x3f0d	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.139313936 CEST	192.168.2.4	1.1.1.1	0x5ba6	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
May 24, 2024 08:27:08.139792919 CEST	192.168.2.4	1.1.1.1	0xbb2e	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.140475988 CEST	192.168.2.4	1.1.1.1	0x863c	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 24, 2024 08:27:08.274724960 CEST	192.168.2.4	1.1.1.1	0x9cd3	Standard query (0)	cm.rtbsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.275026083 CEST	192.168.2.4	1.1.1.1	0xe858	Standard query (0)	cm.rtbsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.384567022 CEST	192.168.2.4	1.1.1.1	0x800d	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.384876013 CEST	192.168.2.4	1.1.1.1	0x9dc2	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.402684927 CEST	192.168.2.4	1.1.1.1	0xd185	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.402848959 CEST	192.168.2.4	1.1.1.1	0x53a0	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.405612946 CEST	192.168.2.4	1.1.1.1	0x301e	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.414671898 CEST	192.168.2.4	1.1.1.1	0xb682	Standard query (0)	cm.idealmedia.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.415501118 CEST	192.168.2.4	1.1.1.1	0xa4de	Standard query (0)	cm.idealmedia.io	65	IN (0x0001)	false
May 24, 2024 08:27:08.538458109 CEST	192.168.2.4	1.1.1.1	0xc921	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.538606882 CEST	192.168.2.4	1.1.1.1	0x8f05	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.651565075 CEST	192.168.2.4	1.1.1.1	0x359a	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.651941061 CEST	192.168.2.4	1.1.1.1	0x46ee	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.857491970 CEST	192.168.2.4	1.1.1.1	0x8778	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.857625008 CEST	192.168.2.4	1.1.1.1	0x89bd	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.858242989 CEST	192.168.2.4	1.1.1.1	0x2c62	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.858652115 CEST	192.168.2.4	1.1.1.1	0x8a65	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.896723986 CEST	192.168.2.4	1.1.1.1	0xab40	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.896876097 CEST	192.168.2.4	1.1.1.1	0xa3dc	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.917995930 CEST	192.168.2.4	1.1.1.1	0x50f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.918160915 CEST	192.168.2.4	1.1.1.1	0x6d85	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:27:08.932596922 CEST	192.168.2.4	1.1.1.1	0xd715	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.932718992 CEST	192.168.2.4	1.1.1.1	0xb7dd	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
May 24, 2024 08:27:08.957732916 CEST	192.168.2.4	1.1.1.1	0xdfb0	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.957859039 CEST	192.168.2.4	1.1.1.1	0xe126	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 08:27:09.140484095 CEST	192.168.2.4	1.1.1.1	0xf16e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.140742064 CEST	192.168.2.4	1.1.1.1	0x5cad	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 08:27:09.141670942 CEST	192.168.2.4	1.1.1.1	0x70	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.141798019 CEST	192.168.2.4	1.1.1.1	0x427c	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.200158119 CEST	192.168.2.4	1.1.1.1	0xc9e7	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.200377941 CEST	192.168.2.4	1.1.1.1	0xc957	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.287933111 CEST	192.168.2.4	1.1.1.1	0x3da5	Standard query (0)	sync.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.287933111 CEST	192.168.2.4	1.1.1.1	0xa416	Standard query (0)	sync.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.386826992 CEST	192.168.2.4	1.1.1.1	0x1638	Standard query (0)	cm.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.387157917 CEST	192.168.2.4	1.1.1.1	0xd185	Standard query (0)	cm.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.427104950 CEST	192.168.2.4	1.1.1.1	0x301e	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.501802921 CEST	192.168.2.4	1.1.1.1	0x5fbe	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.501979113 CEST	192.168.2.4	1.1.1.1	0x3e13	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:27:09.517568111 CEST	192.168.2.4	1.1.1.1	0x5548	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.517678022 CEST	192.168.2.4	1.1.1.1	0x2954	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.597937107 CEST	192.168.2.4	1.1.1.1	0xe493	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.598243952 CEST	192.168.2.4	1.1.1.1	0xe6f1	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.608449936 CEST	192.168.2.4	1.1.1.1	0x733f	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.608783960 CEST	192.168.2.4	1.1.1.1	0xffa1	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.638792992 CEST	192.168.2.4	1.1.1.1	0x6edb	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.638916016 CEST	192.168.2.4	1.1.1.1	0x730b	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.893945932 CEST	192.168.2.4	1.1.1.1	0x100a	Standard query (0)	match.360yield.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.894088030 CEST	192.168.2.4	1.1.1.1	0x9b29	Standard query (0)	match.360yield.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.918765068 CEST	192.168.2.4	1.1.1.1	0x2388	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.918894053 CEST	192.168.2.4	1.1.1.1	0xb9a4	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.944186926 CEST	192.168.2.4	1.1.1.1	0x1c8e	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.944385052 CEST	192.168.2.4	1.1.1.1	0xb82	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 24, 2024 08:27:09.951651096 CEST	192.168.2.4	1.1.1.1	0xcb38	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.951797009 CEST	192.168.2.4	1.1.1.1	0x7c98	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.004909039 CEST	192.168.2.4	1.1.1.1	0x8b7	Standard query (0)	player.avplayer.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.005040884 CEST	192.168.2.4	1.1.1.1	0x5bc2	Standard query (0)	player.avplayer.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.120404005 CEST	192.168.2.4	1.1.1.1	0x8e33	Standard query (0)	sync.connectad.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.121304035 CEST	192.168.2.4	1.1.1.1	0x813e	Standard query (0)	sync.connectad.io	65	IN (0x0001)	false
May 24, 2024 08:27:10.127007008 CEST	192.168.2.4	1.1.1.1	0xa900	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.127341986 CEST	192.168.2.4	1.1.1.1	0x92ac	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
May 24, 2024 08:27:10.127922058 CEST	192.168.2.4	1.1.1.1	0x8488	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.129821062 CEST	192.168.2.4	1.1.1.1	0x9d6e	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.130238056 CEST	192.168.2.4	1.1.1.1	0xaffd	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.130371094 CEST	192.168.2.4	1.1.1.1	0x317f	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.130752087 CEST	192.168.2.4	1.1.1.1	0x1e85	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.130868912 CEST	192.168.2.4	1.1.1.1	0x3a1e	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 24, 2024 08:27:10.153276920 CEST	192.168.2.4	1.1.1.1	0xaddb	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.153393030 CEST	192.168.2.4	1.1.1.1	0x1865	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:10.210331917 CEST	192.168.2.4	1.1.1.1	0xf369	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.210470915 CEST	192.168.2.4	1.1.1.1	0x8cc2	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
May 24, 2024 08:27:10.227973938 CEST	192.168.2.4	1.1.1.1	0x88d3	Standard query (0)	sync.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.228203058 CEST	192.168.2.4	1.1.1.1	0x45b8	Standard query (0)	sync.e-volution.ai	65	IN (0x0001)	false
May 24, 2024 08:27:10.342550039 CEST	192.168.2.4	1.1.1.1	0x26ff	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.342550039 CEST	192.168.2.4	1.1.1.1	0xb4a3	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
May 24, 2024 08:27:10.358478069 CEST	192.168.2.4	1.1.1.1	0xc3e	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.358602047 CEST	192.168.2.4	1.1.1.1	0x6b41	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.631535053 CEST	192.168.2.4	1.1.1.1	0xff18	Standard query (0)	s-img.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.631666899 CEST	192.168.2.4	1.1.1.1	0x9ba4	Standard query (0)	s-img.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.634934902 CEST	192.168.2.4	1.1.1.1	0xff01	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.635159016 CEST	192.168.2.4	1.1.1.1	0xabcb	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
May 24, 2024 08:27:10.648284912 CEST	192.168.2.4	1.1.1.1	0x35f3	Standard query (0)	a.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.648430109 CEST	192.168.2.4	1.1.1.1	0xbfaf	Standard query (0)	a.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.649238110 CEST	192.168.2.4	1.1.1.1	0xc8b0	Standard query (0)	go1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.649501085 CEST	192.168.2.4	1.1.1.1	0x385a	Standard query (0)	go1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.651967049 CEST	192.168.2.4	1.1.1.1	0xce17	Standard query (0)	engine.4dsply.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.652142048 CEST	192.168.2.4	1.1.1.1	0x4add	Standard query (0)	engine.4dsply.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.653485060 CEST	192.168.2.4	1.1.1.1	0xe049	Standard query (0)	cm.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.653841019 CEST	192.168.2.4	1.1.1.1	0x5d28	Standard query (0)	cm.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.701617002 CEST	192.168.2.4	1.1.1.1	0xd737	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.701776981 CEST	192.168.2.4	1.1.1.1	0x4ff4	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.703445911 CEST	192.168.2.4	1.1.1.1	0x61b4	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.703661919 CEST	192.168.2.4	1.1.1.1	0x6ea0	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
May 24, 2024 08:27:10.705210924 CEST	192.168.2.4	1.1.1.1	0x6df7	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.705599070 CEST	192.168.2.4	1.1.1.1	0x8e0	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.105869055 CEST	192.168.2.4	1.1.1.1	0xabdb	Standard query (0)	pixel-us-west.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.106515884 CEST	192.168.2.4	1.1.1.1	0xab14	Standard query (0)	pixel-us-west.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.140444040 CEST	192.168.2.4	1.1.1.1	0x76c4	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.141257048 CEST	192.168.2.4	1.1.1.1	0x3d6d	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.170511007 CEST	192.168.2.4	1.1.1.1	0xede	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.170658112 CEST	192.168.2.4	1.1.1.1	0x894e	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.175026894 CEST	192.168.2.4	1.1.1.1	0xb48d	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.175307989 CEST	192.168.2.4	1.1.1.1	0xac8a	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.182056904 CEST	192.168.2.4	1.1.1.1	0xd8e9	Standard query (0)	srv.aso1.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.182382107 CEST	192.168.2.4	1.1.1.1	0x2cf3	Standard query (0)	srv.aso1.net	65	IN (0x0001)	false
May 24, 2024 08:27:11.182941914 CEST	192.168.2.4	1.1.1.1	0x3d56	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.183094978 CEST	192.168.2.4	1.1.1.1	0xa5da	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.212691069 CEST	192.168.2.4	1.1.1.1	0x8877	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.212903976 CEST	192.168.2.4	1.1.1.1	0x5bf5	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 24, 2024 08:27:11.311301947 CEST	192.168.2.4	1.1.1.1	0xdc12	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.311559916 CEST	192.168.2.4	1.1.1.1	0x7678	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:11.321165085 CEST	192.168.2.4	1.1.1.1	0x461b	Standard query (0)	digiadsply.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.321440935 CEST	192.168.2.4	1.1.1.1	0xb93d	Standard query (0)	digiadsply.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.471254110 CEST	192.168.2.4	1.1.1.1	0x301e	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.532042027 CEST	192.168.2.4	1.1.1.1	0xeae7	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.532816887 CEST	192.168.2.4	1.1.1.1	0x3a2f	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.602562904 CEST	192.168.2.4	1.1.1.1	0x3a54	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.602705002 CEST	192.168.2.4	1.1.1.1	0x42d8	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 24, 2024 08:27:11.607803106 CEST	192.168.2.4	1.1.1.1	0x57aa	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.607992887 CEST	192.168.2.4	1.1.1.1	0xf365	Standard query (0)	assets.a-mo.net	65	IN (0x0001)	false
May 24, 2024 08:27:11.837224007 CEST	192.168.2.4	1.1.1.1	0x2d23	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.837425947 CEST	192.168.2.4	1.1.1.1	0xeeeb	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.246279001 CEST	192.168.2.4	1.1.1.1	0x5d8	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.246522903 CEST	192.168.2.4	1.1.1.1	0x5e58	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
May 24, 2024 08:27:12.270210028 CEST	192.168.2.4	1.1.1.1	0x4e78	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.270401001 CEST	192.168.2.4	1.1.1.1	0x2ffc	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.273822069 CEST	192.168.2.4	1.1.1.1	0x2a38	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.273951054 CEST	192.168.2.4	1.1.1.1	0xabf9	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:12.279418945 CEST	192.168.2.4	1.1.1.1	0x70a4	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.279418945 CEST	192.168.2.4	1.1.1.1	0xd476	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.310717106 CEST	192.168.2.4	1.1.1.1	0x8918	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.311192036 CEST	192.168.2.4	1.1.1.1	0xf5b9	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.421040058 CEST	192.168.2.4	1.1.1.1	0x11fd	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.422525883 CEST	192.168.2.4	1.1.1.1	0x8579	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 24, 2024 08:27:12.428673029 CEST	192.168.2.4	1.1.1.1	0x2882	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.428842068 CEST	192.168.2.4	1.1.1.1	0x2167	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.430191994 CEST	192.168.2.4	1.1.1.1	0xff9b	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.430191994 CEST	192.168.2.4	1.1.1.1	0xcf24	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.449093103 CEST	192.168.2.4	1.1.1.1	0x9d11	Standard query (0)	digiadsply.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.449246883 CEST	192.168.2.4	1.1.1.1	0x582a	Standard query (0)	digiadsply.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.452510118 CEST	192.168.2.4	1.1.1.1	0x1fe4	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.452653885 CEST	192.168.2.4	1.1.1.1	0x2f4d	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.566993952 CEST	192.168.2.4	1.1.1.1	0xf1fe	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.567174911 CEST	192.168.2.4	1.1.1.1	0x204d	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.757968903 CEST	192.168.2.4	1.1.1.1	0x8bad	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.758126020 CEST	192.168.2.4	1.1.1.1	0xa021	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.765664101 CEST	192.168.2.4	1.1.1.1	0x1606	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.766088963 CEST	192.168.2.4	1.1.1.1	0xa54	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.824728966 CEST	192.168.2.4	1.1.1.1	0x4e27	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.824729919 CEST	192.168.2.4	1.1.1.1	0xad5	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.958235979 CEST	192.168.2.4	1.1.1.1	0x7c9b	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.958431959 CEST	192.168.2.4	1.1.1.1	0xc87b	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:12.958931923 CEST	192.168.2.4	1.1.1.1	0x5e4b	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.959424973 CEST	192.168.2.4	1.1.1.1	0xbbba	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.961961985 CEST	192.168.2.4	1.1.1.1	0xf2ec	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.961962938 CEST	192.168.2.4	1.1.1.1	0xbd8a	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:27:12.998384953 CEST	192.168.2.4	1.1.1.1	0x2d23	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.998581886 CEST	192.168.2.4	1.1.1.1	0x771b	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.063540936 CEST	192.168.2.4	1.1.1.1	0xc0d6	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.063848019 CEST	192.168.2.4	1.1.1.1	0x90d8	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.130270004 CEST	192.168.2.4	1.1.1.1	0x3a2	Standard query (0)	sonata-notifications.taptapnetworks.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.130270004 CEST	192.168.2.4	1.1.1.1	0xa1a8	Standard query (0)	sonata-notifications.taptapnetworks.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.246994019 CEST	192.168.2.4	1.1.1.1	0x943f	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.247829914 CEST	192.168.2.4	1.1.1.1	0x58cb	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.247829914 CEST	192.168.2.4	1.1.1.1	0xef49	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.248029947 CEST	192.168.2.4	1.1.1.1	0x42f5	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.256620884 CEST	192.168.2.4	1.1.1.1	0x1acc	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.256889105 CEST	192.168.2.4	1.1.1.1	0xd06b	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.276320934 CEST	192.168.2.4	1.1.1.1	0x4ab4	Standard query (0)	pa.openx.net	65	IN (0x0001)	false
May 24, 2024 08:27:13.276321888 CEST	192.168.2.4	1.1.1.1	0xe833	Standard query (0)	pa.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.751564980 CEST	192.168.2.4	1.1.1.1	0xcba7	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.751709938 CEST	192.168.2.4	1.1.1.1	0x8d70	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.818141937 CEST	192.168.2.4	1.1.1.1	0xf162	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.818402052 CEST	192.168.2.4	1.1.1.1	0xcb78	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.831803083 CEST	192.168.2.4	1.1.1.1	0xa8fd	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.832226038 CEST	192.168.2.4	1.1.1.1	0xfd58	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.915576935 CEST	192.168.2.4	1.1.1.1	0xb63	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.915844917 CEST	192.168.2.4	1.1.1.1	0x6b6e	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:13.917591095 CEST	192.168.2.4	1.1.1.1	0x640d	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.917898893 CEST	192.168.2.4	1.1.1.1	0x24f9	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:14.331319094 CEST	192.168.2.4	1.1.1.1	0x45df	Standard query (0)	dis.eu.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:14.331782103 CEST	192.168.2.4	1.1.1.1	0xb628	Standard query (0)	dis.eu.criteo.com	65	IN (0x0001)	false
May 24, 2024 08:27:15.644181013 CEST	192.168.2.4	1.1.1.1	0x301e	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.796298981 CEST	192.168.2.4	1.1.1.1	0x75b0	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.796515942 CEST	192.168.2.4	1.1.1.1	0xabd6	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:15.798686981 CEST	192.168.2.4	1.1.1.1	0xddf1	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.799098969 CEST	192.168.2.4	1.1.1.1	0x3f8f	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:15.802377939 CEST	192.168.2.4	1.1.1.1	0xea94	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.802679062 CEST	192.168.2.4	1.1.1.1	0x57bc	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 24, 2024 08:27:15.868472099 CEST	192.168.2.4	1.1.1.1	0x4a2f	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.868982077 CEST	192.168.2.4	1.1.1.1	0x9e62	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
May 24, 2024 08:27:15.873249054 CEST	192.168.2.4	1.1.1.1	0xb4fb	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.873481035 CEST	192.168.2.4	1.1.1.1	0x1ff9	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 08:27:15.874993086 CEST	192.168.2.4	1.1.1.1	0x6133	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875327110 CEST	192.168.2.4	1.1.1.1	0xe130	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
May 24, 2024 08:27:15.880985022 CEST	192.168.2.4	1.1.1.1	0xda36	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.881364107 CEST	192.168.2.4	1.1.1.1	0x1a7f	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
May 24, 2024 08:27:15.884388924 CEST	192.168.2.4	1.1.1.1	0x5dfc	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.884641886 CEST	192.168.2.4	1.1.1.1	0xd4ce	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
May 24, 2024 08:27:15.885302067 CEST	192.168.2.4	1.1.1.1	0xe8b1	Standard query (0)	us.ck-ie.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.885682106 CEST	192.168.2.4	1.1.1.1	0x6bfa	Standard query (0)	us.ck-ie.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.003575087 CEST	192.168.2.4	1.1.1.1	0xf49f	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.003751040 CEST	192.168.2.4	1.1.1.1	0x7652	Standard query (0)	d.turn.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.014417887 CEST	192.168.2.4	1.1.1.1	0x299	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.014552116 CEST	192.168.2.4	1.1.1.1	0xabe	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 24, 2024 08:27:16.214390039 CEST	192.168.2.4	1.1.1.1	0xaf32	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.214653015 CEST	192.168.2.4	1.1.1.1	0xb418	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.349318981 CEST	192.168.2.4	1.1.1.1	0x944e	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.349469900 CEST	192.168.2.4	1.1.1.1	0x55b4	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.363404989 CEST	192.168.2.4	1.1.1.1	0x976a	Standard query (0)	d5p.de17a.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.365633965 CEST	192.168.2.4	1.1.1.1	0x9c2	Standard query (0)	d5p.de17a.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.454948902 CEST	192.168.2.4	1.1.1.1	0xb789	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.454950094 CEST	192.168.2.4	1.1.1.1	0x9137	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
May 24, 2024 08:27:16.467099905 CEST	192.168.2.4	1.1.1.1	0xc719	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.469629049 CEST	192.168.2.4	1.1.1.1	0xfe2a	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.559339046 CEST	192.168.2.4	1.1.1.1	0x39c3	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.559580088 CEST	192.168.2.4	1.1.1.1	0x91b4	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.591747999 CEST	192.168.2.4	1.1.1.1	0xabc2	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.591990948 CEST	192.168.2.4	1.1.1.1	0x56f	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
May 24, 2024 08:27:16.665427923 CEST	192.168.2.4	1.1.1.1	0xbb3	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.666066885 CEST	192.168.2.4	1.1.1.1	0x1fed	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.679554939 CEST	192.168.2.4	1.1.1.1	0xa650	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.679800034 CEST	192.168.2.4	1.1.1.1	0x6690	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.692956924 CEST	192.168.2.4	1.1.1.1	0x43b2	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.692956924 CEST	192.168.2.4	1.1.1.1	0x8b30	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.795834064 CEST	192.168.2.4	1.1.1.1	0x7181	Standard query (0)	cr.frontend.weborama.fr	65	IN (0x0001)	false
May 24, 2024 08:27:16.795834064 CEST	192.168.2.4	1.1.1.1	0x62c	Standard query (0)	cr.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.797167063 CEST	192.168.2.4	1.1.1.1	0xbaad	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.797466040 CEST	192.168.2.4	1.1.1.1	0x529d	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 24, 2024 08:27:16.799068928 CEST	192.168.2.4	1.1.1.1	0xf1c6	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.799283028 CEST	192.168.2.4	1.1.1.1	0x623f	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
May 24, 2024 08:27:16.802248001 CEST	192.168.2.4	1.1.1.1	0xce9b	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.802654028 CEST	192.168.2.4	1.1.1.1	0x60ce	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
May 24, 2024 08:27:17.028295994 CEST	192.168.2.4	1.1.1.1	0x4c93	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.028295994 CEST	192.168.2.4	1.1.1.1	0xf89b	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
May 24, 2024 08:27:17.069010019 CEST	192.168.2.4	1.1.1.1	0x411a	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.069207907 CEST	192.168.2.4	1.1.1.1	0x7af8	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
May 24, 2024 08:27:17.199906111 CEST	192.168.2.4	1.1.1.1	0x831d	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.200068951 CEST	192.168.2.4	1.1.1.1	0xb4d3	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 24, 2024 08:27:17.202248096 CEST	192.168.2.4	1.1.1.1	0x9210	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.202572107 CEST	192.168.2.4	1.1.1.1	0x6b5f	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:17.203910112 CEST	192.168.2.4	1.1.1.1	0x5e2	Standard query (0)	ssum.casalemedia.com	65	IN (0x0001)	false
May 24, 2024 08:27:17.203911066 CEST	192.168.2.4	1.1.1.1	0xd42f	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.431749105 CEST	192.168.2.4	1.1.1.1	0x6789	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.432008982 CEST	192.168.2.4	1.1.1.1	0x7284	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
May 24, 2024 08:27:17.684617043 CEST	192.168.2.4	1.1.1.1	0x9e34	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.685015917 CEST	192.168.2.4	1.1.1.1	0x5d1b	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:17.688410997 CEST	192.168.2.4	1.1.1.1	0x924c	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.688679934 CEST	192.168.2.4	1.1.1.1	0x67fb	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 24, 2024 08:27:18.068217039 CEST	192.168.2.4	1.1.1.1	0x4f91	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.069175005 CEST	192.168.2.4	1.1.1.1	0xab02	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 08:27:18.160819054 CEST	192.168.2.4	1.1.1.1	0xacbc	Standard query (0)	ow.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.161093950 CEST	192.168.2.4	1.1.1.1	0x9089	Standard query (0)	ow.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:18.163743019 CEST	192.168.2.4	1.1.1.1	0x56f2	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.163865089 CEST	192.168.2.4	1.1.1.1	0xf07b	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
May 24, 2024 08:27:18.215691090 CEST	192.168.2.4	1.1.1.1	0x5f6c	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.217350960 CEST	192.168.2.4	1.1.1.1	0x4ad	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
May 24, 2024 08:27:18.322809935 CEST	192.168.2.4	1.1.1.1	0xbc29	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:18.322809935 CEST	192.168.2.4	1.1.1.1	0x140f	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.419596910 CEST	192.168.2.4	1.1.1.1	0x50d4	Standard query (0)	sync.a-mo.net	65	IN (0x0001)	false
May 24, 2024 08:27:18.419596910 CEST	192.168.2.4	1.1.1.1	0x8a93	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.421772957 CEST	192.168.2.4	1.1.1.1	0xdb1d	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.422087908 CEST	192.168.2.4	1.1.1.1	0x4a27	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:18.689609051 CEST	192.168.2.4	1.1.1.1	0x90ee	Standard query (0)	green.erne.co	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.689610004 CEST	192.168.2.4	1.1.1.1	0xd442	Standard query (0)	green.erne.co	65	IN (0x0001)	false
May 24, 2024 08:27:18.750796080 CEST	192.168.2.4	1.1.1.1	0x3162	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.750936031 CEST	192.168.2.4	1.1.1.1	0x2c47	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
May 24, 2024 08:27:18.976777077 CEST	192.168.2.4	1.1.1.1	0x7f35	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.976941109 CEST	192.168.2.4	1.1.1.1	0xf26e	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
May 24, 2024 08:27:18.980679989 CEST	192.168.2.4	1.1.1.1	0xbfd7	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.980679989 CEST	192.168.2.4	1.1.1.1	0x1c3f	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
May 24, 2024 08:27:18.982434988 CEST	192.168.2.4	1.1.1.1	0x7445	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.982434988 CEST	192.168.2.4	1.1.1.1	0xd712	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.093110085 CEST	192.168.2.4	1.1.1.1	0x7157	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.093110085 CEST	192.168.2.4	1.1.1.1	0x5020	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.101110935 CEST	192.168.2.4	1.1.1.1	0x8c8e	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.101358891 CEST	192.168.2.4	1.1.1.1	0x55e8	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.103559971 CEST	192.168.2.4	1.1.1.1	0x7867	Standard query (0)	sync.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.103936911 CEST	192.168.2.4	1.1.1.1	0xe8df	Standard query (0)	sync.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.111088037 CEST	192.168.2.4	1.1.1.1	0xc2d1	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.111433983 CEST	192.168.2.4	1.1.1.1	0x2439	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:19.113790035 CEST	192.168.2.4	1.1.1.1	0xc12e	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.113939047 CEST	192.168.2.4	1.1.1.1	0x7ea8	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.115782022 CEST	192.168.2.4	1.1.1.1	0xcbf8	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.115911007 CEST	192.168.2.4	1.1.1.1	0xb10	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.120028973 CEST	192.168.2.4	1.1.1.1	0x87a3	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.120028973 CEST	192.168.2.4	1.1.1.1	0xf318	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.123950958 CEST	192.168.2.4	1.1.1.1	0xefcb	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.124527931 CEST	192.168.2.4	1.1.1.1	0x5d65	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.126585007 CEST	192.168.2.4	1.1.1.1	0x885d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.126802921 CEST	192.168.2.4	1.1.1.1	0xd444	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:19.128576040 CEST	192.168.2.4	1.1.1.1	0xfd04	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.128856897 CEST	192.168.2.4	1.1.1.1	0x37c1	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.129538059 CEST	192.168.2.4	1.1.1.1	0x2904	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.129538059 CEST	192.168.2.4	1.1.1.1	0x1c9c	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.174526930 CEST	192.168.2.4	1.1.1.1	0x5e73	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.174750090 CEST	192.168.2.4	1.1.1.1	0x8901	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.197578907 CEST	192.168.2.4	1.1.1.1	0x2a1e	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.197848082 CEST	192.168.2.4	1.1.1.1	0x2175	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.204756021 CEST	192.168.2.4	1.1.1.1	0x5ddc	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.205035925 CEST	192.168.2.4	1.1.1.1	0xd31e	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.279620886 CEST	192.168.2.4	1.1.1.1	0xb7a6	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.279622078 CEST	192.168.2.4	1.1.1.1	0xaab0	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:27:19.285809040 CEST	192.168.2.4	1.1.1.1	0x46	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.286083937 CEST	192.168.2.4	1.1.1.1	0xcb84	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
May 24, 2024 08:27:19.293082952 CEST	192.168.2.4	1.1.1.1	0xd1e4	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.293389082 CEST	192.168.2.4	1.1.1.1	0xa085	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.294651985 CEST	192.168.2.4	1.1.1.1	0x6f4	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.295164108 CEST	192.168.2.4	1.1.1.1	0x27c8	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.420340061 CEST	192.168.2.4	1.1.1.1	0xd06b	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.420564890 CEST	192.168.2.4	1.1.1.1	0xc143	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.728612900 CEST	192.168.2.4	1.1.1.1	0x9e13	Standard query (0)	pixel-eu.onaudience.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.728760004 CEST	192.168.2.4	1.1.1.1	0x5640	Standard query (0)	pixel-eu.onaudience.com	65	IN (0x0001)	false
May 24, 2024 08:27:19.808077097 CEST	192.168.2.4	1.1.1.1	0x6547	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.808317900 CEST	192.168.2.4	1.1.1.1	0xb77b	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:20.241216898 CEST	192.168.2.4	1.1.1.1	0x6266	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.241343021 CEST	192.168.2.4	1.1.1.1	0x245b	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 24, 2024 08:27:20.257211924 CEST	192.168.2.4	1.1.1.1	0xa7b7	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.257455111 CEST	192.168.2.4	1.1.1.1	0x93d	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
May 24, 2024 08:27:20.522185087 CEST	192.168.2.4	1.1.1.1	0x57f9	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.522530079 CEST	192.168.2.4	1.1.1.1	0xc64c	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:20.802150965 CEST	192.168.2.4	1.1.1.1	0xe4c3	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.802150965 CEST	192.168.2.4	1.1.1.1	0x3ac9	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
May 24, 2024 08:27:21.107721090 CEST	192.168.2.4	1.1.1.1	0x8cd5	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
May 24, 2024 08:27:21.107721090 CEST	192.168.2.4	1.1.1.1	0x5179	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.257141113 CEST	192.168.2.4	1.1.1.1	0xa6d1	Standard query (0)	pb-am.a-mo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.257141113 CEST	192.168.2.4	1.1.1.1	0x587a	Standard query (0)	pb-am.a-mo.net	65	IN (0x0001)	false
May 24, 2024 08:27:21.318248034 CEST	192.168.2.4	1.1.1.1	0x73c	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.318378925 CEST	192.168.2.4	1.1.1.1	0x18cf	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 08:27:21.461831093 CEST	192.168.2.4	1.1.1.1	0x7735	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.462127924 CEST	192.168.2.4	1.1.1.1	0x7ef2	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 08:27:21.738531113 CEST	192.168.2.4	1.1.1.1	0xb565	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.738668919 CEST	192.168.2.4	1.1.1.1	0x41e8	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 24, 2024 08:27:22.077096939 CEST	192.168.2.4	1.1.1.1	0x1eb7	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:22.077217102 CEST	192.168.2.4	1.1.1.1	0xa829	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 24, 2024 08:27:22.449812889 CEST	192.168.2.4	1.1.1.1	0x4088	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:22.450006008 CEST	192.168.2.4	1.1.1.1	0x2518	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
May 24, 2024 08:27:23.056974888 CEST	192.168.2.4	1.1.1.1	0x5d63	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.057307959 CEST	192.168.2.4	1.1.1.1	0xd9eb	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
May 24, 2024 08:27:24.062077045 CEST	192.168.2.4	1.1.1.1	0x1515	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:24.062647104 CEST	192.168.2.4	1.1.1.1	0xadb	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
May 24, 2024 08:27:24.893904924 CEST	192.168.2.4	1.1.1.1	0xc49	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:24.893904924 CEST	192.168.2.4	1.1.1.1	0xe378	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
May 24, 2024 08:27:25.162419081 CEST	192.168.2.4	1.1.1.1	0xf429	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:25.164916992 CEST	192.168.2.4	1.1.1.1	0xf4f4	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:27:26.045556068 CEST	192.168.2.4	1.1.1.1	0x8d8	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.045725107 CEST	192.168.2.4	1.1.1.1	0xed87	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
May 24, 2024 08:27:27.319525003 CEST	192.168.2.4	1.1.1.1	0x8df9	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.319787979 CEST	192.168.2.4	1.1.1.1	0xe184	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 24, 2024 08:27:27.361884117 CEST	192.168.2.4	1.1.1.1	0x282d	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.362313032 CEST	192.168.2.4	1.1.1.1	0x29	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
May 24, 2024 08:27:29.059407949 CEST	192.168.2.4	1.1.1.1	0x3b88	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.059408903 CEST	192.168.2.4	1.1.1.1	0x2aca	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
May 24, 2024 08:27:29.996812105 CEST	192.168.2.4	1.1.1.1	0xba96	Standard query (0)	grid.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.997184992 CEST	192.168.2.4	1.1.1.1	0x787	Standard query (0)	grid.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 08:27:30.004076958 CEST	192.168.2.4	1.1.1.1	0x54ba	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.004221916 CEST	192.168.2.4	1.1.1.1	0x32	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
May 24, 2024 08:27:30.011641979 CEST	192.168.2.4	1.1.1.1	0xbf44	Standard query (0)	targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.011884928 CEST	192.168.2.4	1.1.1.1	0x7fc	Standard query (0)	targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 08:27:30.014375925 CEST	192.168.2.4	1.1.1.1	0x84e4	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.014513016 CEST	192.168.2.4	1.1.1.1	0xd7e7	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:30.751643896 CEST	192.168.2.4	1.1.1.1	0x8659	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.752897978 CEST	192.168.2.4	1.1.1.1	0xc5e7	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:30.901717901 CEST	192.168.2.4	1.1.1.1	0x23ad	Standard query (0)	rtb-useast.rtbserve.io	65	IN (0x0001)	false
May 24, 2024 08:27:30.901717901 CEST	192.168.2.4	1.1.1.1	0x506d	Standard query (0)	rtb-useast.rtbserve.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.903639078 CEST	192.168.2.4	1.1.1.1	0xf4e5	Standard query (0)	s2s.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.903816938 CEST	192.168.2.4	1.1.1.1	0x7403	Standard query (0)	s2s.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:30.904232025 CEST	192.168.2.4	1.1.1.1	0xc3cd	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.904232025 CEST	192.168.2.4	1.1.1.1	0xad03	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
May 24, 2024 08:27:31.205766916 CEST	192.168.2.4	1.1.1.1	0x1532	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.206065893 CEST	192.168.2.4	1.1.1.1	0xd83e	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:31.207437038 CEST	192.168.2.4	1.1.1.1	0xa21b	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.207844973 CEST	192.168.2.4	1.1.1.1	0x937b	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:31.282537937 CEST	192.168.2.4	1.1.1.1	0xb8bf	Standard query (0)	grid.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.282819986 CEST	192.168.2.4	1.1.1.1	0x6e8b	Standard query (0)	grid.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 08:27:32.439702988 CEST	192.168.2.4	1.1.1.1	0x5eb1	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.439800978 CEST	192.168.2.4	1.1.1.1	0x933c	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:32.441392899 CEST	192.168.2.4	1.1.1.1	0xd0e8	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.441725969 CEST	192.168.2.4	1.1.1.1	0xdb19	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
May 24, 2024 08:27:32.443090916 CEST	192.168.2.4	1.1.1.1	0x11d5	Standard query (0)	cdn.hadronid.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.443216085 CEST	192.168.2.4	1.1.1.1	0xd5c9	Standard query (0)	cdn.hadronid.net	65	IN (0x0001)	false
May 24, 2024 08:27:32.443909883 CEST	192.168.2.4	1.1.1.1	0xa2b6	Standard query (0)	cdn.browsiprod.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.444123983 CEST	192.168.2.4	1.1.1.1	0xf8ad	Standard query (0)	cdn.browsiprod.com	65	IN (0x0001)	false
May 24, 2024 08:27:32.640573025 CEST	192.168.2.4	1.1.1.1	0x6ed5	Standard query (0)	rtb-useast.rtbserve.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.640939951 CEST	192.168.2.4	1.1.1.1	0x18a5	Standard query (0)	rtb-useast.rtbserve.io	65	IN (0x0001)	false
May 24, 2024 08:27:32.642972946 CEST	192.168.2.4	1.1.1.1	0x911b	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.643254995 CEST	192.168.2.4	1.1.1.1	0x8cb6	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:32.644120932 CEST	192.168.2.4	1.1.1.1	0xfe62	Standard query (0)	targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.644355059 CEST	192.168.2.4	1.1.1.1	0xedc4	Standard query (0)	targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 08:27:32.647424936 CEST	192.168.2.4	1.1.1.1	0xfa24	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.647618055 CEST	192.168.2.4	1.1.1.1	0xbf9c	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:27:33.032094002 CEST	192.168.2.4	1.1.1.1	0x4487	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.032294989 CEST	192.168.2.4	1.1.1.1	0x7ef1	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:33.283278942 CEST	192.168.2.4	1.1.1.1	0xb133	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.283389091 CEST	192.168.2.4	1.1.1.1	0x5019	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
May 24, 2024 08:27:33.776216984 CEST	192.168.2.4	1.1.1.1	0x3398	Standard query (0)	events.browsiprod.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.777538061 CEST	192.168.2.4	1.1.1.1	0x3fd7	Standard query (0)	events.browsiprod.com	65	IN (0x0001)	false
May 24, 2024 08:27:33.899708986 CEST	192.168.2.4	1.1.1.1	0x4b04	Standard query (0)	yield-manager.browsiprod.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.900082111 CEST	192.168.2.4	1.1.1.1	0xd9d	Standard query (0)	yield-manager.browsiprod.com	65	IN (0x0001)	false
May 24, 2024 08:27:33.991755962 CEST	192.168.2.4	1.1.1.1	0xf9d4	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.991971970 CEST	192.168.2.4	1.1.1.1	0xcdb0	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
May 24, 2024 08:27:34.178037882 CEST	192.168.2.4	1.1.1.1	0xf858	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.178232908 CEST	192.168.2.4	1.1.1.1	0x3dd7	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
May 24, 2024 08:27:34.213393927 CEST	192.168.2.4	1.1.1.1	0xeabd	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.213541985 CEST	192.168.2.4	1.1.1.1	0xd3d9	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:34.215034008 CEST	192.168.2.4	1.1.1.1	0xa13f	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.215162039 CEST	192.168.2.4	1.1.1.1	0xb3cc	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
May 24, 2024 08:27:34.279443979 CEST	192.168.2.4	1.1.1.1	0x8eb4	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.279540062 CEST	192.168.2.4	1.1.1.1	0x3e8c	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 08:27:34.290222883 CEST	192.168.2.4	1.1.1.1	0xb30e	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.290321112 CEST	192.168.2.4	1.1.1.1	0x9c2a	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
May 24, 2024 08:27:34.790175915 CEST	192.168.2.4	1.1.1.1	0x3e21	Standard query (0)	proc.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.790465117 CEST	192.168.2.4	1.1.1.1	0xe4e8	Standard query (0)	proc.ad.cpe.dotomi.com	65	IN (0x0001)	false
May 24, 2024 08:27:34.795042992 CEST	192.168.2.4	1.1.1.1	0x50c1	Standard query (0)	a.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.795222044 CEST	192.168.2.4	1.1.1.1	0xb5cc	Standard query (0)	a.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:34.888650894 CEST	192.168.2.4	1.1.1.1	0xb260	Standard query (0)	trace-eu.mediago.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.888747931 CEST	192.168.2.4	1.1.1.1	0xbdd1	Standard query (0)	trace-eu.mediago.io	65	IN (0x0001)	false
May 24, 2024 08:27:34.896858931 CEST	192.168.2.4	1.1.1.1	0xb4a6	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.897247076 CEST	192.168.2.4	1.1.1.1	0xeb9a	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:35.147330999 CEST	192.168.2.4	1.1.1.1	0xf45e	Standard query (0)	amazon-tam-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.147490025 CEST	192.168.2.4	1.1.1.1	0xf432	Standard query (0)	amazon-tam-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 08:27:35.227027893 CEST	192.168.2.4	1.1.1.1	0x412e	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.227245092 CEST	192.168.2.4	1.1.1.1	0x773a	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
May 24, 2024 08:27:35.285264969 CEST	192.168.2.4	1.1.1.1	0x17f4	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.285376072 CEST	192.168.2.4	1.1.1.1	0x7226	Standard query (0)	cs.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:35.523956060 CEST	192.168.2.4	1.1.1.1	0x6eb7	Standard query (0)	p.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:35.523956060 CEST	192.168.2.4	1.1.1.1	0x67f	Standard query (0)	p.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.526216030 CEST	192.168.2.4	1.1.1.1	0xcbea	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.526381969 CEST	192.168.2.4	1.1.1.1	0x77a4	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:35.735774040 CEST	192.168.2.4	1.1.1.1	0xa752	Standard query (0)	proc.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.735774994 CEST	192.168.2.4	1.1.1.1	0x9d09	Standard query (0)	proc.ad.cpe.dotomi.com	65	IN (0x0001)	false
May 24, 2024 08:27:36.538229942 CEST	192.168.2.4	1.1.1.1	0x9df6	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.538395882 CEST	192.168.2.4	1.1.1.1	0x12d9	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:36.579421997 CEST	192.168.2.4	1.1.1.1	0xdaa3	Standard query (0)	seg.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.579850912 CEST	192.168.2.4	1.1.1.1	0x7abe	Standard query (0)	seg.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:36.591968060 CEST	192.168.2.4	1.1.1.1	0xccf8	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.592092037 CEST	192.168.2.4	1.1.1.1	0x7534	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
May 24, 2024 08:27:36.604360104 CEST	192.168.2.4	1.1.1.1	0x9f54	Standard query (0)	ids.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.604489088 CEST	192.168.2.4	1.1.1.1	0xe425	Standard query (0)	ids.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:36.961342096 CEST	192.168.2.4	1.1.1.1	0x9d6f	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.961441040 CEST	192.168.2.4	1.1.1.1	0xb832	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:27:37.077672958 CEST	192.168.2.4	1.1.1.1	0x56bc	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.077825069 CEST	192.168.2.4	1.1.1.1	0xfee2	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:37.214097023 CEST	192.168.2.4	1.1.1.1	0x75e5	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.214302063 CEST	192.168.2.4	1.1.1.1	0xbb6a	Standard query (0)	cs.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:37.233587027 CEST	192.168.2.4	1.1.1.1	0xfcf5	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.233725071 CEST	192.168.2.4	1.1.1.1	0x98a9	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 08:27:37.447784901 CEST	192.168.2.4	1.1.1.1	0x1028	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.447786093 CEST	192.168.2.4	1.1.1.1	0x6e5	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
May 24, 2024 08:27:37.503494978 CEST	192.168.2.4	1.1.1.1	0x1691	Standard query (0)	facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.503937006 CEST	192.168.2.4	1.1.1.1	0xa57b	Standard query (0)	facebook.com	65	IN (0x0001)	false
May 24, 2024 08:27:37.538528919 CEST	192.168.2.4	1.1.1.1	0x9581	Standard query (0)	pixels.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.538659096 CEST	192.168.2.4	1.1.1.1	0xface	Standard query (0)	pixels.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:37.631264925 CEST	192.168.2.4	1.1.1.1	0xeecd	Standard query (0)	rtb2-useast.xaprio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.631469965 CEST	192.168.2.4	1.1.1.1	0x2517	Standard query (0)	rtb2-useast.xaprio.net	65	IN (0x0001)	false
May 24, 2024 08:27:38.283273935 CEST	192.168.2.4	1.1.1.1	0x7cb6	Standard query (0)	proton.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.283478975 CEST	192.168.2.4	1.1.1.1	0x2ff3	Standard query (0)	proton.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:38.290961027 CEST	192.168.2.4	1.1.1.1	0xd90a	Standard query (0)	inv-nets-nyc-s1.admixer.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.291208029 CEST	192.168.2.4	1.1.1.1	0x5cc	Standard query (0)	inv-nets-nyc-s1.admixer.net	65	IN (0x0001)	false
May 24, 2024 08:27:38.525845051 CEST	192.168.2.4	1.1.1.1	0xcaa6	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.525991917 CEST	192.168.2.4	1.1.1.1	0x84de	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 24, 2024 08:27:38.967673063 CEST	192.168.2.4	1.1.1.1	0x42e5	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.967813969 CEST	192.168.2.4	1.1.1.1	0xe1c5	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
May 24, 2024 08:27:39.278125048 CEST	192.168.2.4	1.1.1.1	0xd346	Standard query (0)	p.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.278263092 CEST	192.168.2.4	1.1.1.1	0x892a	Standard query (0)	p.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:39.446525097 CEST	192.168.2.4	1.1.1.1	0xa580	Standard query (0)	ids.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.446743965 CEST	192.168.2.4	1.1.1.1	0xd2b8	Standard query (0)	ids.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:39.462281942 CEST	192.168.2.4	1.1.1.1	0xd3c7	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.462431908 CEST	192.168.2.4	1.1.1.1	0x800d	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
May 24, 2024 08:27:39.485713005 CEST	192.168.2.4	1.1.1.1	0x7e00	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.486062050 CEST	192.168.2.4	1.1.1.1	0xcde1	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 24, 2024 08:27:39.506835938 CEST	192.168.2.4	1.1.1.1	0x91db	Standard query (0)	seg.ad.gt	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.506997108 CEST	192.168.2.4	1.1.1.1	0x95df	Standard query (0)	seg.ad.gt	65	IN (0x0001)	false
May 24, 2024 08:27:39.510242939 CEST	192.168.2.4	1.1.1.1	0x7af3	Standard query (0)	rtb2-useast.xaprio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.510379076 CEST	192.168.2.4	1.1.1.1	0x112d	Standard query (0)	rtb2-useast.xaprio.net	65	IN (0x0001)	false
May 24, 2024 08:27:39.554985046 CEST	192.168.2.4	1.1.1.1	0xf418	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.555320024 CEST	192.168.2.4	1.1.1.1	0xe0f4	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:39.655051947 CEST	192.168.2.4	1.1.1.1	0xc8d5	Standard query (0)	inv-nets-nyc-s1.admixer.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.655251026 CEST	192.168.2.4	1.1.1.1	0x2197	Standard query (0)	inv-nets-nyc-s1.admixer.net	65	IN (0x0001)	false
May 24, 2024 08:27:39.900788069 CEST	192.168.2.4	1.1.1.1	0x1349	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.900940895 CEST	192.168.2.4	1.1.1.1	0x36ba	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:39.901335001 CEST	192.168.2.4	1.1.1.1	0xa63f	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.901453972 CEST	192.168.2.4	1.1.1.1	0xa3a7	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:39.902764082 CEST	192.168.2.4	1.1.1.1	0x8731	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.902952909 CEST	192.168.2.4	1.1.1.1	0x5d88	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:45.074217081 CEST	192.168.2.4	1.1.1.1	0xcd3	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:45.074345112 CEST	192.168.2.4	1.1.1.1	0x89ce	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:46.428088903 CEST	192.168.2.4	1.1.1.1	0x2054	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:46.428378105 CEST	192.168.2.4	1.1.1.1	0xb6b2	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:47.275137901 CEST	192.168.2.4	1.1.1.1	0x504b	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:47.275454044 CEST	192.168.2.4	1.1.1.1	0xe62	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:49.007612944 CEST	192.168.2.4	1.1.1.1	0x15f1	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.007752895 CEST	192.168.2.4	1.1.1.1	0xb0b	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:27:49.744519949 CEST	192.168.2.4	1.1.1.1	0xc09c	Standard query (0)	external-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.744676113 CEST	192.168.2.4	1.1.1.1	0x517a	Standard query (0)	external-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:53.641951084 CEST	192.168.2.4	1.1.1.1	0x5299	Standard query (0)	external-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:53.645993948 CEST	192.168.2.4	1.1.1.1	0x24e6	Standard query (0)	external-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:27:55.375876904 CEST	192.168.2.4	1.1.1.1	0x509f	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.381207943 CEST	192.168.2.4	1.1.1.1	0x4636	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 24, 2024 08:27:55.385173082 CEST	192.168.2.4	1.1.1.1	0xbfa7	Standard query (0)	track1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.385751009 CEST	192.168.2.4	1.1.1.1	0x59ff	Standard query (0)	track1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:27:55.472229958 CEST	192.168.2.4	1.1.1.1	0x210f	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.472814083 CEST	192.168.2.4	1.1.1.1	0x5bc	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:55.477713108 CEST	192.168.2.4	1.1.1.1	0x86f0	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.477900982 CEST	192.168.2.4	1.1.1.1	0x7fc9	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:27:55.651559114 CEST	192.168.2.4	1.1.1.1	0xb515	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.651662111 CEST	192.168.2.4	1.1.1.1	0xaac	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 24, 2024 08:27:57.121040106 CEST	192.168.2.4	1.1.1.1	0x66c1	Standard query (0)	dmp.truoptik.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:57.121397018 CEST	192.168.2.4	1.1.1.1	0x692c	Standard query (0)	dmp.truoptik.com	65	IN (0x0001)	false
May 24, 2024 08:27:58.345452070 CEST	192.168.2.4	1.1.1.1	0x725e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.345804930 CEST	192.168.2.4	1.1.1.1	0xbbec	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:27:58.418443918 CEST	192.168.2.4	1.1.1.1	0x90a7	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.418760061 CEST	192.168.2.4	1.1.1.1	0x9795	Standard query (0)	d.turn.com	65	IN (0x0001)	false
May 24, 2024 08:27:58.941883087 CEST	192.168.2.4	1.1.1.1	0xe6d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.942128897 CEST	192.168.2.4	1.1.1.1	0xbc5	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 08:27:59.867038012 CEST	192.168.2.4	1.1.1.1	0xfa4c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 24, 2024 08:27:59.867038012 CEST	192.168.2.4	1.1.1.1	0x6394	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.250565052 CEST	192.168.2.4	1.1.1.1	0x36d1	Standard query (0)	c.disquscdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.250565052 CEST	192.168.2.4	1.1.1.1	0xb0b8	Standard query (0)	c.disquscdn.com	65	IN (0x0001)	false
May 24, 2024 08:28:00.257266045 CEST	192.168.2.4	1.1.1.1	0x8342	Standard query (0)	servicer.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.257523060 CEST	192.168.2.4	1.1.1.1	0x707	Standard query (0)	servicer.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:28:01.041798115 CEST	192.168.2.4	1.1.1.1	0xf936	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:01.041990042 CEST	192.168.2.4	1.1.1.1	0x2d35	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.213989973 CEST	192.168.2.4	1.1.1.1	0x794	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.214339972 CEST	192.168.2.4	1.1.1.1	0x3b6e	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.221792936 CEST	192.168.2.4	1.1.1.1	0x68be	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.222136974 CEST	192.168.2.4	1.1.1.1	0x9dfe	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:28:02.222729921 CEST	192.168.2.4	1.1.1.1	0xc805	Standard query (0)	track1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.223062992 CEST	192.168.2.4	1.1.1.1	0xc4bc	Standard query (0)	track1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.482683897 CEST	192.168.2.4	1.1.1.1	0x1cc2	Standard query (0)	thepatriotjournal.disqus.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.483052969 CEST	192.168.2.4	1.1.1.1	0x7689	Standard query (0)	thepatriotjournal.disqus.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.597732067 CEST	192.168.2.4	1.1.1.1	0xe917	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.597903013 CEST	192.168.2.4	1.1.1.1	0x15ef	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.598203897 CEST	192.168.2.4	1.1.1.1	0x945e	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.598551035 CEST	192.168.2.4	1.1.1.1	0xff4	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
May 24, 2024 08:28:02.598656893 CEST	192.168.2.4	1.1.1.1	0xa4d6	Standard query (0)	track1.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.598841906 CEST	192.168.2.4	1.1.1.1	0x8bab	Standard query (0)	track1.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.813328981 CEST	192.168.2.4	1.1.1.1	0x5c10	Standard query (0)	dsp-media.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.813718081 CEST	192.168.2.4	1.1.1.1	0x9372	Standard query (0)	dsp-media.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.815013885 CEST	192.168.2.4	1.1.1.1	0x1e23	Standard query (0)	dsp-trk.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.815185070 CEST	192.168.2.4	1.1.1.1	0x7c48	Standard query (0)	dsp-trk.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:02.895472050 CEST	192.168.2.4	1.1.1.1	0xb05d	Standard query (0)	player.aniview.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.895601034 CEST	192.168.2.4	1.1.1.1	0x8301	Standard query (0)	player.aniview.com	65	IN (0x0001)	false
May 24, 2024 08:28:03.052567959 CEST	192.168.2.4	1.1.1.1	0xcf7d	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:03.052680969 CEST	192.168.2.4	1.1.1.1	0xa3fd	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
May 24, 2024 08:28:03.513000011 CEST	192.168.2.4	1.1.1.1	0x3d66	Standard query (0)	c.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:03.513318062 CEST	192.168.2.4	1.1.1.1	0xc52e	Standard query (0)	c.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:28:04.782912016 CEST	192.168.2.4	1.1.1.1	0xa029	Standard query (0)	ad.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.783062935 CEST	192.168.2.4	1.1.1.1	0xcd4b	Standard query (0)	ad.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:28:05.373244047 CEST	192.168.2.4	1.1.1.1	0xe469	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.373378038 CEST	192.168.2.4	1.1.1.1	0x3266	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.428643942 CEST	192.168.2.4	1.1.1.1	0x6677	Standard query (0)	win.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.429356098 CEST	192.168.2.4	1.1.1.1	0x373e	Standard query (0)	win.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.465004921 CEST	192.168.2.4	1.1.1.1	0x671e	Standard query (0)	dsp-ap.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.465203047 CEST	192.168.2.4	1.1.1.1	0x343b	Standard query (0)	dsp-ap.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.467717886 CEST	192.168.2.4	1.1.1.1	0xbf8f	Standard query (0)	dclk-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.467818022 CEST	192.168.2.4	1.1.1.1	0xf9fa	Standard query (0)	dclk-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.471678019 CEST	192.168.2.4	1.1.1.1	0xfc21	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.471678019 CEST	192.168.2.4	1.1.1.1	0x1dd9	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.472989082 CEST	192.168.2.4	1.1.1.1	0x9068	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.472989082 CEST	192.168.2.4	1.1.1.1	0xd527	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.489871979 CEST	192.168.2.4	1.1.1.1	0x362	Standard query (0)	dsp-trvm.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.489872932 CEST	192.168.2.4	1.1.1.1	0x5aae	Standard query (0)	dsp-trvm.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.566031933 CEST	192.168.2.4	1.1.1.1	0xa72c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.566235065 CEST	192.168.2.4	1.1.1.1	0x824c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.806965113 CEST	192.168.2.4	1.1.1.1	0xfee0	Standard query (0)	s-img.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.809946060 CEST	192.168.2.4	1.1.1.1	0xa9b4	Standard query (0)	s-img.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:28:05.809946060 CEST	192.168.2.4	1.1.1.1	0x467	Standard query (0)	img.rtbsystem.org	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.810455084 CEST	192.168.2.4	1.1.1.1	0x2c01	Standard query (0)	img.rtbsystem.org	65	IN (0x0001)	false
May 24, 2024 08:28:06.643416882 CEST	192.168.2.4	1.1.1.1	0xf00b	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:06.643742085 CEST	192.168.2.4	1.1.1.1	0xe1a5	Standard query (0)	twitter.com	65	IN (0x0001)	false
May 24, 2024 08:28:06.805845022 CEST	192.168.2.4	1.1.1.1	0x74a2	Standard query (0)	us2.rtbsystem.org	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:06.805946112 CEST	192.168.2.4	1.1.1.1	0x16ba	Standard query (0)	us2.rtbsystem.org	65	IN (0x0001)	false
May 24, 2024 08:28:07.268404007 CEST	192.168.2.4	1.1.1.1	0xe80f	Standard query (0)	dsp-trk.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.268775940 CEST	192.168.2.4	1.1.1.1	0x4b83	Standard query (0)	dsp-trk.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:07.273034096 CEST	192.168.2.4	1.1.1.1	0xf056	Standard query (0)	dsp-media.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.273670912 CEST	192.168.2.4	1.1.1.1	0x87b8	Standard query (0)	dsp-media.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:07.276263952 CEST	192.168.2.4	1.1.1.1	0x96ed	Standard query (0)	c.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.276722908 CEST	192.168.2.4	1.1.1.1	0x13d0	Standard query (0)	c.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:28:07.503458023 CEST	192.168.2.4	1.1.1.1	0xc3ae	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.503634930 CEST	192.168.2.4	1.1.1.1	0xd196	Standard query (0)	x.com	65	IN (0x0001)	false
May 24, 2024 08:28:08.548682928 CEST	192.168.2.4	1.1.1.1	0x8e66	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.549253941 CEST	192.168.2.4	1.1.1.1	0x9e68	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
May 24, 2024 08:28:08.553143024 CEST	192.168.2.4	1.1.1.1	0xc135	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.553718090 CEST	192.168.2.4	1.1.1.1	0xdd6a	Standard query (0)	t.co	65	IN (0x0001)	false
May 24, 2024 08:28:08.563489914 CEST	192.168.2.4	1.1.1.1	0x4f25	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.566353083 CEST	192.168.2.4	1.1.1.1	0xe57b	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
May 24, 2024 08:28:08.572707891 CEST	192.168.2.4	1.1.1.1	0x8c87	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.572844028 CEST	192.168.2.4	1.1.1.1	0xfde8	Standard query (0)	api.x.com	65	IN (0x0001)	false
May 24, 2024 08:28:08.581285000 CEST	192.168.2.4	1.1.1.1	0xc3bf	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.581334114 CEST	192.168.2.4	1.1.1.1	0x1a0d	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
May 24, 2024 08:28:08.619373083 CEST	192.168.2.4	1.1.1.1	0x740c	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.619544029 CEST	192.168.2.4	1.1.1.1	0x8d10	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
May 24, 2024 08:28:08.621417046 CEST	192.168.2.4	1.1.1.1	0xdff9	Standard query (0)	win.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.621761084 CEST	192.168.2.4	1.1.1.1	0x12c6	Standard query (0)	win.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:09.006287098 CEST	192.168.2.4	1.1.1.1	0xa26c	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.006383896 CEST	192.168.2.4	1.1.1.1	0xfe39	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
May 24, 2024 08:28:09.369776011 CEST	192.168.2.4	1.1.1.1	0x4762	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.370245934 CEST	192.168.2.4	1.1.1.1	0xf13d	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:28:09.575190067 CEST	192.168.2.4	1.1.1.1	0xad90	Standard query (0)	dsp-ap.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.575323105 CEST	192.168.2.4	1.1.1.1	0xa1c2	Standard query (0)	dsp-ap.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:09.576601982 CEST	192.168.2.4	1.1.1.1	0x375c	Standard query (0)	dsp-trvm.eskimi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.576740980 CEST	192.168.2.4	1.1.1.1	0x458d	Standard query (0)	dsp-trvm.eskimi.com	65	IN (0x0001)	false
May 24, 2024 08:28:09.694247007 CEST	192.168.2.4	1.1.1.1	0x50c6	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.694381952 CEST	192.168.2.4	1.1.1.1	0xc1fc	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
May 24, 2024 08:28:10.126703024 CEST	192.168.2.4	1.1.1.1	0x815b	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.126842976 CEST	192.168.2.4	1.1.1.1	0x7368	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:28:10.143488884 CEST	192.168.2.4	1.1.1.1	0xacd8	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.143683910 CEST	192.168.2.4	1.1.1.1	0x2849	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
May 24, 2024 08:28:10.184231997 CEST	192.168.2.4	1.1.1.1	0x25ed	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.184334993 CEST	192.168.2.4	1.1.1.1	0xa4de	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
May 24, 2024 08:28:10.304416895 CEST	192.168.2.4	1.1.1.1	0xe222	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.304596901 CEST	192.168.2.4	1.1.1.1	0x3a6a	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 08:28:10.511759043 CEST	192.168.2.4	1.1.1.1	0xbcee	Standard query (0)	33across-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.512033939 CEST	192.168.2.4	1.1.1.1	0x5892	Standard query (0)	33across-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 08:28:11.105427027 CEST	192.168.2.4	1.1.1.1	0xd034	Standard query (0)	img.rtbsystem.org	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:11.105684042 CEST	192.168.2.4	1.1.1.1	0x4d0e	Standard query (0)	img.rtbsystem.org	65	IN (0x0001)	false
May 24, 2024 08:28:11.264758110 CEST	192.168.2.4	1.1.1.1	0x32a1	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:11.265189886 CEST	192.168.2.4	1.1.1.1	0x97a3	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
May 24, 2024 08:28:12.519418955 CEST	192.168.2.4	1.1.1.1	0x321c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.519639969 CEST	192.168.2.4	1.1.1.1	0x517e	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 24, 2024 08:28:12.590116978 CEST	192.168.2.4	1.1.1.1	0x7c43	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.590187073 CEST	192.168.2.4	1.1.1.1	0xb45a	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:28:12.672910929 CEST	192.168.2.4	1.1.1.1	0xaa64	Standard query (0)	us2.rtbsystem.org	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.673064947 CEST	192.168.2.4	1.1.1.1	0x6b3	Standard query (0)	us2.rtbsystem.org	65	IN (0x0001)	false
May 24, 2024 08:28:13.197686911 CEST	192.168.2.4	1.1.1.1	0x45ef	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.198271036 CEST	192.168.2.4	1.1.1.1	0x8e5d	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.202635050 CEST	192.168.2.4	1.1.1.1	0xcc65	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.203111887 CEST	192.168.2.4	1.1.1.1	0xf5c	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.214123964 CEST	192.168.2.4	1.1.1.1	0x4ab9	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.214262009 CEST	192.168.2.4	1.1.1.1	0x793b	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.410165071 CEST	192.168.2.4	1.1.1.1	0x4df3	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.410301924 CEST	192.168.2.4	1.1.1.1	0x9e04	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 24, 2024 08:28:13.410895109 CEST	192.168.2.4	1.1.1.1	0xb9f5	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.411106110 CEST	192.168.2.4	1.1.1.1	0xe229	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.908236980 CEST	192.168.2.4	1.1.1.1	0xc3d1	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.908370018 CEST	192.168.2.4	1.1.1.1	0x1915	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.939245939 CEST	192.168.2.4	1.1.1.1	0x45f7	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.939245939 CEST	192.168.2.4	1.1.1.1	0x7526	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.945611000 CEST	192.168.2.4	1.1.1.1	0x7013	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.945764065 CEST	192.168.2.4	1.1.1.1	0xb2cd	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.983294964 CEST	192.168.2.4	1.1.1.1	0x9a3	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.983427048 CEST	192.168.2.4	1.1.1.1	0xb454	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:28:13.986721039 CEST	192.168.2.4	1.1.1.1	0xb7b4	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.986933947 CEST	192.168.2.4	1.1.1.1	0xaaa5	Standard query (0)	tracker.direct.e-volution.ai	65	IN (0x0001)	false
May 24, 2024 08:28:13.987634897 CEST	192.168.2.4	1.1.1.1	0x30cd	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.987751961 CEST	192.168.2.4	1.1.1.1	0x4d4d	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
May 24, 2024 08:28:13.989530087 CEST	192.168.2.4	1.1.1.1	0xbdd5	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.989690065 CEST	192.168.2.4	1.1.1.1	0xb8e6	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
May 24, 2024 08:28:14.001821041 CEST	192.168.2.4	1.1.1.1	0xec2f	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.002290964 CEST	192.168.2.4	1.1.1.1	0xc661	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
May 24, 2024 08:28:14.352385044 CEST	192.168.2.4	1.1.1.1	0xe1d2	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.352518082 CEST	192.168.2.4	1.1.1.1	0xe5b5	Standard query (0)	tracker.direct.e-volution.ai	65	IN (0x0001)	false
May 24, 2024 08:28:14.502628088 CEST	192.168.2.4	1.1.1.1	0x8f7a	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.502893925 CEST	192.168.2.4	1.1.1.1	0xb5a3	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 08:28:14.563092947 CEST	192.168.2.4	1.1.1.1	0xe2dd	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.563220978 CEST	192.168.2.4	1.1.1.1	0xfcac	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
May 24, 2024 08:28:14.569812059 CEST	192.168.2.4	1.1.1.1	0x65b	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.569962978 CEST	192.168.2.4	1.1.1.1	0x7fc2	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
May 24, 2024 08:28:14.572113991 CEST	192.168.2.4	1.1.1.1	0x72e3	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.572357893 CEST	192.168.2.4	1.1.1.1	0xd989	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
May 24, 2024 08:28:14.596143007 CEST	192.168.2.4	1.1.1.1	0x7d39	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.596210003 CEST	192.168.2.4	1.1.1.1	0xb00f	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 08:28:14.950028896 CEST	192.168.2.4	1.1.1.1	0x8a2d	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.950244904 CEST	192.168.2.4	1.1.1.1	0x40c3	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
May 24, 2024 08:28:15.085299969 CEST	192.168.2.4	1.1.1.1	0xec94	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.823422909 CEST	192.168.2.4	1.1.1.1	0x94cb	Standard query (0)	a.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.823849916 CEST	192.168.2.4	1.1.1.1	0xd49b	Standard query (0)	a.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:28:15.828236103 CEST	192.168.2.4	1.1.1.1	0xcdb1	Standard query (0)	cm.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.828790903 CEST	192.168.2.4	1.1.1.1	0x8a71	Standard query (0)	cm.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:28:15.831063032 CEST	192.168.2.4	1.1.1.1	0x1493	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.831410885 CEST	192.168.2.4	1.1.1.1	0x370c	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
May 24, 2024 08:28:15.858453035 CEST	192.168.2.4	1.1.1.1	0x30c3	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.864976883 CEST	192.168.2.4	1.1.1.1	0x7f4f	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:28:16.135195971 CEST	192.168.2.4	1.1.1.1	0xec94	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.215837955 CEST	192.168.2.4	1.1.1.1	0xca4d	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.216258049 CEST	192.168.2.4	1.1.1.1	0xfe07	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:28:16.549010038 CEST	192.168.2.4	1.1.1.1	0x938	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.549290895 CEST	192.168.2.4	1.1.1.1	0x6282	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
May 24, 2024 08:28:16.549720049 CEST	192.168.2.4	1.1.1.1	0x9cf2	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.549940109 CEST	192.168.2.4	1.1.1.1	0x9784	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 08:28:16.582190990 CEST	192.168.2.4	1.1.1.1	0x6445	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.596182108 CEST	192.168.2.4	1.1.1.1	0xb8c8	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.596476078 CEST	192.168.2.4	1.1.1.1	0x483d	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
May 24, 2024 08:28:16.817146063 CEST	192.168.2.4	1.1.1.1	0x7569	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.818607092 CEST	192.168.2.4	1.1.1.1	0x82e7	Standard query (0)	pippio.com	65	IN (0x0001)	false
May 24, 2024 08:28:16.844901085 CEST	192.168.2.4	1.1.1.1	0xcf23	Standard query (0)	cms-xch-chicago.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.845407963 CEST	192.168.2.4	1.1.1.1	0x6079	Standard query (0)	cms-xch-chicago.33across.com	65	IN (0x0001)	false
May 24, 2024 08:28:16.858652115 CEST	192.168.2.4	1.1.1.1	0xa92f	Standard query (0)	cms-xch.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.861534119 CEST	192.168.2.4	1.1.1.1	0x1a11	Standard query (0)	cms-xch.33across.com	65	IN (0x0001)	false
May 24, 2024 08:28:17.144212961 CEST	192.168.2.4	1.1.1.1	0xec94	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.396924973 CEST	192.168.2.4	1.1.1.1	0x50	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.397197008 CEST	192.168.2.4	1.1.1.1	0x92e7	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 08:28:17.628106117 CEST	192.168.2.4	1.1.1.1	0xcc56	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.628412008 CEST	192.168.2.4	1.1.1.1	0xe75f	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:28:17.632154942 CEST	192.168.2.4	1.1.1.1	0xbf38	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.632384062 CEST	192.168.2.4	1.1.1.1	0x53f2	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 24, 2024 08:28:18.099848986 CEST	192.168.2.4	1.1.1.1	0x5121	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.101139069 CEST	192.168.2.4	1.1.1.1	0xb260	Standard query (0)	bttrack.com	65	IN (0x0001)	false
May 24, 2024 08:28:18.104626894 CEST	192.168.2.4	1.1.1.1	0x474a	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.104777098 CEST	192.168.2.4	1.1.1.1	0xc2d3	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
May 24, 2024 08:28:18.107551098 CEST	192.168.2.4	1.1.1.1	0xf338	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.108800888 CEST	192.168.2.4	1.1.1.1	0x2fbe	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 24, 2024 08:28:18.838515997 CEST	192.168.2.4	1.1.1.1	0x7588	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.838901043 CEST	192.168.2.4	1.1.1.1	0x7f2c	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
May 24, 2024 08:28:19.159671068 CEST	192.168.2.4	1.1.1.1	0xec94	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.704849005 CEST	192.168.2.4	1.1.1.1	0xf1f7	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.705329895 CEST	192.168.2.4	1.1.1.1	0x8344	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.718807936 CEST	192.168.2.4	1.1.1.1	0x6af0	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.719722986 CEST	192.168.2.4	1.1.1.1	0xb170	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.785517931 CEST	192.168.2.4	1.1.1.1	0x7a1f	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.785944939 CEST	192.168.2.4	1.1.1.1	0xc270	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.789748907 CEST	192.168.2.4	1.1.1.1	0x22c3	Standard query (0)	cm.mgid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.790059090 CEST	192.168.2.4	1.1.1.1	0xae9	Standard query (0)	cm.mgid.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.792032957 CEST	192.168.2.4	1.1.1.1	0x5233	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.792318106 CEST	192.168.2.4	1.1.1.1	0x1e32	Standard query (0)	api.x.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.800755024 CEST	192.168.2.4	1.1.1.1	0xee87	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.801173925 CEST	192.168.2.4	1.1.1.1	0xe036	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.812022924 CEST	192.168.2.4	1.1.1.1	0x37af	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.842729092 CEST	192.168.2.4	1.1.1.1	0xfaab	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 24, 2024 08:28:20.844364882 CEST	192.168.2.4	1.1.1.1	0x3a54	Standard query (0)	cms-xch-chicago.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.846236944 CEST	192.168.2.4	1.1.1.1	0x1956	Standard query (0)	cms-xch-chicago.33across.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.849023104 CEST	192.168.2.4	1.1.1.1	0xbec4	Standard query (0)	cms-xch.33across.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.849343061 CEST	192.168.2.4	1.1.1.1	0xaed2	Standard query (0)	cms-xch.33across.com	65	IN (0x0001)	false
May 24, 2024 08:28:20.910173893 CEST	192.168.2.4	1.1.1.1	0x8022	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.910434961 CEST	192.168.2.4	1.1.1.1	0x8584	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 08:28:21.560008049 CEST	192.168.2.4	1.1.1.1	0xd57	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.560214043 CEST	192.168.2.4	1.1.1.1	0x708f	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
May 24, 2024 08:28:21.647593975 CEST	192.168.2.4	1.1.1.1	0xe6e3	Standard query (0)	ws.rqtrk.eu	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.648004055 CEST	192.168.2.4	1.1.1.1	0xb203	Standard query (0)	ws.rqtrk.eu	65	IN (0x0001)	false
May 24, 2024 08:28:21.902707100 CEST	192.168.2.4	1.1.1.1	0x2d78	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.903109074 CEST	192.168.2.4	1.1.1.1	0x4db8	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:28:22.122958899 CEST	192.168.2.4	1.1.1.1	0xf55e	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:22.123147011 CEST	192.168.2.4	1.1.1.1	0xa4b4	Standard query (0)	u.openx.net	65	IN (0x0001)	false
May 24, 2024 08:28:22.553009987 CEST	192.168.2.4	1.1.1.1	0xa2b6	Standard query (0)	analytics.x.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:22.553282022 CEST	192.168.2.4	1.1.1.1	0x2237	Standard query (0)	analytics.x.com	65	IN (0x0001)	false
May 24, 2024 08:28:23.170355082 CEST	192.168.2.4	1.1.1.1	0xec94	Standard query (0)	tracker.direct.e-volution.ai	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.192831993 CEST	192.168.2.4	1.1.1.1	0xe4b9	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.192831993 CEST	192.168.2.4	1.1.1.1	0x126e	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
May 24, 2024 08:28:23.193272114 CEST	192.168.2.4	1.1.1.1	0x37c0	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.193420887 CEST	192.168.2.4	1.1.1.1	0xafc5	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false
May 24, 2024 08:28:23.199080944 CEST	192.168.2.4	1.1.1.1	0x8868	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.199266911 CEST	192.168.2.4	1.1.1.1	0x2849	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
May 24, 2024 08:28:23.200999022 CEST	192.168.2.4	1.1.1.1	0x2fc8	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.201342106 CEST	192.168.2.4	1.1.1.1	0x1278	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
May 24, 2024 08:28:24.423212051 CEST	192.168.2.4	1.1.1.1	0xfb6e	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.423713923 CEST	192.168.2.4	1.1.1.1	0xbb77	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
May 24, 2024 08:28:24.796621084 CEST	192.168.2.4	1.1.1.1	0xf23a	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.796821117 CEST	192.168.2.4	1.1.1.1	0xc598	Standard query (0)	t.co	65	IN (0x0001)	false
May 24, 2024 08:28:24.899701118 CEST	192.168.2.4	1.1.1.1	0x148c	Standard query (0)	analytics.x.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.900265932 CEST	192.168.2.4	1.1.1.1	0x1bd8	Standard query (0)	analytics.x.com	65	IN (0x0001)	false
May 24, 2024 08:28:24.941500902 CEST	192.168.2.4	1.1.1.1	0xda64	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.941500902 CEST	192.168.2.4	1.1.1.1	0x285d	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
May 24, 2024 08:28:24.989253044 CEST	192.168.2.4	1.1.1.1	0xb306	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.989253044 CEST	192.168.2.4	1.1.1.1	0xa514	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
May 24, 2024 08:28:24.990942955 CEST	192.168.2.4	1.1.1.1	0x1b20	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.990942955 CEST	192.168.2.4	1.1.1.1	0x66b	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
May 24, 2024 08:28:26.541296959 CEST	192.168.2.4	1.1.1.1	0x7a31	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:26.549125910 CEST	192.168.2.4	1.1.1.1	0xcf85	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 08:28:29.285316944 CEST	192.168.2.4	1.1.1.1	0xca08	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.285676956 CEST	192.168.2.4	1.1.1.1	0x53c5	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
May 24, 2024 08:28:29.286714077 CEST	192.168.2.4	1.1.1.1	0x7e00	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.286972046 CEST	192.168.2.4	1.1.1.1	0x1e75	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
May 24, 2024 08:28:29.484778881 CEST	192.168.2.4	1.1.1.1	0xec13	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.485039949 CEST	192.168.2.4	1.1.1.1	0xebeb	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:28:30.134094954 CEST	192.168.2.4	1.1.1.1	0x3695	Standard query (0)	global.ib-ibi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.134565115 CEST	192.168.2.4	1.1.1.1	0xa822	Standard query (0)	global.ib-ibi.com	65	IN (0x0001)	false
May 24, 2024 08:28:30.137586117 CEST	192.168.2.4	1.1.1.1	0xebad	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.139225960 CEST	192.168.2.4	1.1.1.1	0xc707	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
May 24, 2024 08:28:32.417968035 CEST	192.168.2.4	1.1.1.1	0x5b3	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.418113947 CEST	192.168.2.4	1.1.1.1	0x8bfc	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:28:32.900806904 CEST	192.168.2.4	1.1.1.1	0x852d	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.900979042 CEST	192.168.2.4	1.1.1.1	0xd36e	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
May 24, 2024 08:28:32.902932882 CEST	192.168.2.4	1.1.1.1	0x1771	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.903130054 CEST	192.168.2.4	1.1.1.1	0xf19	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
May 24, 2024 08:28:32.906173944 CEST	192.168.2.4	1.1.1.1	0x815	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.906569004 CEST	192.168.2.4	1.1.1.1	0x2cc1	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 08:28:33.083154917 CEST	192.168.2.4	1.1.1.1	0xbcec	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.083492041 CEST	192.168.2.4	1.1.1.1	0x5604	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
May 24, 2024 08:28:33.095752954 CEST	192.168.2.4	1.1.1.1	0xfb21	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.096168041 CEST	192.168.2.4	1.1.1.1	0xc3c2	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
May 24, 2024 08:28:33.096956015 CEST	192.168.2.4	1.1.1.1	0xc16a	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.097342968 CEST	192.168.2.4	1.1.1.1	0x9f7	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
May 24, 2024 08:28:33.916515112 CEST	192.168.2.4	1.1.1.1	0x6e1f	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.916661024 CEST	192.168.2.4	1.1.1.1	0x22f4	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 08:28:34.524179935 CEST	192.168.2.4	1.1.1.1	0x1c47	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.524286985 CEST	192.168.2.4	1.1.1.1	0x798	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 08:28:34.576999903 CEST	192.168.2.4	1.1.1.1	0x4e98	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.577100039 CEST	192.168.2.4	1.1.1.1	0xe42f	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
May 24, 2024 08:28:34.720987082 CEST	192.168.2.4	1.1.1.1	0xb8ee	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.721215963 CEST	192.168.2.4	1.1.1.1	0x7d2	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
May 24, 2024 08:28:35.967427015 CEST	192.168.2.4	1.1.1.1	0x170	Standard query (0)	rtb-useast.rtbserve.io	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:35.967525005 CEST	192.168.2.4	1.1.1.1	0x5b88	Standard query (0)	rtb-useast.rtbserve.io	65	IN (0x0001)	false
May 24, 2024 08:28:36.195684910 CEST	192.168.2.4	1.1.1.1	0xe1a1	Standard query (0)	us.ck-ie.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.195784092 CEST	192.168.2.4	1.1.1.1	0xb0b3	Standard query (0)	us.ck-ie.com	65	IN (0x0001)	false
May 24, 2024 08:28:36.257046938 CEST	192.168.2.4	1.1.1.1	0x3c3b	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.257128954 CEST	192.168.2.4	1.1.1.1	0x5487	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
May 24, 2024 08:28:36.487415075 CEST	192.168.2.4	1.1.1.1	0xf205	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.487536907 CEST	192.168.2.4	1.1.1.1	0x3db6	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 24, 2024 08:28:38.157773018 CEST	192.168.2.4	1.1.1.1	0xdde7	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:38.157995939 CEST	192.168.2.4	1.1.1.1	0x8ee2	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
May 24, 2024 08:28:39.858217001 CEST	192.168.2.4	1.1.1.1	0x4716	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:39.858366013 CEST	192.168.2.4	1.1.1.1	0xb2f1	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 24, 2024 08:28:39.949665070 CEST	192.168.2.4	1.1.1.1	0x60fa	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:39.949774981 CEST	192.168.2.4	1.1.1.1	0xdd6b	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 08:28:42.760936975 CEST	192.168.2.4	1.1.1.1	0x8c72	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:42.760936975 CEST	192.168.2.4	1.1.1.1	0xda00	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
May 24, 2024 08:28:44.284096956 CEST	192.168.2.4	1.1.1.1	0xff5c	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:44.284204960 CEST	192.168.2.4	1.1.1.1	0xf212	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 24, 2024 08:26:48.274738073 CEST	1.1.1.1	192.168.2.4	0xde1	No error (0)	pjnewsletter.com		104.26.3.234	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:48.274738073 CEST	1.1.1.1	192.168.2.4	0xde1	No error (0)	pjnewsletter.com		172.67.72.19	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:48.274738073 CEST	1.1.1.1	192.168.2.4	0xde1	No error (0)	pjnewsletter.com		104.26.2.234	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:48.285701990 CEST	1.1.1.1	192.168.2.4	0x8da1	No error (0)	pjnewsletter.com			65	IN (0x0001)	false
May 24, 2024 08:26:49.991956949 CEST	1.1.1.1	192.168.2.4	0x3a1c	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:49.991991997 CEST	1.1.1.1	192.168.2.4	0x95ca	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 08:26:50.158663034 CEST	1.1.1.1	192.168.2.4	0x70b4	No error (0)	ruamupr.com		104.21.73.79	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.158663034 CEST	1.1.1.1	192.168.2.4	0x70b4	No error (0)	ruamupr.com		172.67.189.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.159651995 CEST	1.1.1.1	192.168.2.4	0xe5fc	No error (0)	ruamupr.com			65	IN (0x0001)	false
May 24, 2024 08:26:50.169661999 CEST	1.1.1.1	192.168.2.4	0x9507	No error (0)	tg1.aniview.com	wildcard.aniview.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:50.169692993 CEST	1.1.1.1	192.168.2.4	0xf9e6	No error (0)	tg1.aniview.com	wildcard.aniview.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:50.181942940 CEST	1.1.1.1	192.168.2.4	0x1aec	No error (0)	widget.adcovery.com			65	IN (0x0001)	false
May 24, 2024 08:26:50.181972980 CEST	1.1.1.1	192.168.2.4	0x3496	No error (0)	widget.adcovery.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.181972980 CEST	1.1.1.1	192.168.2.4	0x3496	No error (0)	widget.adcovery.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.512114048 CEST	1.1.1.1	192.168.2.4	0x27ef	No error (0)	jsc.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:26:50.520497084 CEST	1.1.1.1	192.168.2.4	0x96d9	No error (0)	jsc.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.520497084 CEST	1.1.1.1	192.168.2.4	0x96d9	No error (0)	jsc.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.520497084 CEST	1.1.1.1	192.168.2.4	0x96d9	No error (0)	jsc.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.520497084 CEST	1.1.1.1	192.168.2.4	0x96d9	No error (0)	jsc.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.520497084 CEST	1.1.1.1	192.168.2.4	0x96d9	No error (0)	jsc.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.864696026 CEST	1.1.1.1	192.168.2.4	0xd75a	No error (0)	thepatriotjournal.disqus.com	prod.disqus.map.fastlylb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:50.864696026 CEST	1.1.1.1	192.168.2.4	0xd75a	No error (0)	prod.disqus.map.fastlylb.net		199.232.192.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.864696026 CEST	1.1.1.1	192.168.2.4	0xd75a	No error (0)	prod.disqus.map.fastlylb.net		199.232.196.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.864710093 CEST	1.1.1.1	192.168.2.4	0x2ea5	No error (0)	thepatriotjournal.disqus.com	prod.disqus.map.fastlylb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:50.923506021 CEST	1.1.1.1	192.168.2.4	0x2e4b	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.923506021 CEST	1.1.1.1	192.168.2.4	0x2e4b	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.923520088 CEST	1.1.1.1	192.168.2.4	0x7b0f	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
May 24, 2024 08:26:50.971425056 CEST	1.1.1.1	192.168.2.4	0xad0c	No error (0)	cdn.engine.4dsply.com		104.16.202.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.971425056 CEST	1.1.1.1	192.168.2.4	0xad0c	No error (0)	cdn.engine.4dsply.com		104.16.203.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:50.971438885 CEST	1.1.1.1	192.168.2.4	0x4671	No error (0)	cdn.engine.4dsply.com			65	IN (0x0001)	false
May 24, 2024 08:26:51.204705954 CEST	1.1.1.1	192.168.2.4	0x753a	No error (0)	servicer.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.204705954 CEST	1.1.1.1	192.168.2.4	0x753a	No error (0)	servicer.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.204705954 CEST	1.1.1.1	192.168.2.4	0x753a	No error (0)	servicer.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.204705954 CEST	1.1.1.1	192.168.2.4	0x753a	No error (0)	servicer.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.204705954 CEST	1.1.1.1	192.168.2.4	0x753a	No error (0)	servicer.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.204761982 CEST	1.1.1.1	192.168.2.4	0x95c3	No error (0)	servicer.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:26:51.289333105 CEST	1.1.1.1	192.168.2.4	0x1940	No error (0)	pjnewsletter.com		104.26.3.234	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.289333105 CEST	1.1.1.1	192.168.2.4	0x1940	No error (0)	pjnewsletter.com		172.67.72.19	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.289333105 CEST	1.1.1.1	192.168.2.4	0x1940	No error (0)	pjnewsletter.com		104.26.2.234	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.324742079 CEST	1.1.1.1	192.168.2.4	0xaa91	No error (0)	pjnewsletter.com			65	IN (0x0001)	false
May 24, 2024 08:26:51.343307018 CEST	1.1.1.1	192.168.2.4	0xb1a7	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:26:51.343338966 CEST	1.1.1.1	192.168.2.4	0x7631	No error (0)	googleads.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957808971 CEST	1.1.1.1	192.168.2.4	0xb5a8	No error (0)	disqus.com		151.101.128.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957808971 CEST	1.1.1.1	192.168.2.4	0xb5a8	No error (0)	disqus.com		151.101.192.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957808971 CEST	1.1.1.1	192.168.2.4	0xb5a8	No error (0)	disqus.com		151.101.64.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957808971 CEST	1.1.1.1	192.168.2.4	0xb5a8	No error (0)	disqus.com		151.101.0.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957851887 CEST	1.1.1.1	192.168.2.4	0xf01d	No error (0)	c.disquscdn.com	d231vab146qzfb.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:51.957865000 CEST	1.1.1.1	192.168.2.4	0x24e8	No error (0)	c.disquscdn.com	d231vab146qzfb.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:51.957865000 CEST	1.1.1.1	192.168.2.4	0x24e8	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.41	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957865000 CEST	1.1.1.1	192.168.2.4	0x24e8	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.23	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957865000 CEST	1.1.1.1	192.168.2.4	0x24e8	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.54	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957865000 CEST	1.1.1.1	192.168.2.4	0x24e8	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.43	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957890034 CEST	1.1.1.1	192.168.2.4	0xa2b9	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:51.957890034 CEST	1.1.1.1	192.168.2.4	0xa2b9	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.957914114 CEST	1.1.1.1	192.168.2.4	0x4bf6	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:51.958728075 CEST	1.1.1.1	192.168.2.4	0x88ab	No error (0)	souhaija.site		134.122.109.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.958728075 CEST	1.1.1.1	192.168.2.4	0x88ab	No error (0)	souhaija.site		165.232.114.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:51.958728075 CEST	1.1.1.1	192.168.2.4	0x88ab	No error (0)	souhaija.site		165.22.209.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.007904053 CEST	1.1.1.1	192.168.2.4	0xad87	No error (0)	cdn2.decide.dev	d3ujymc7jhx0ev.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:52.008189917 CEST	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	cdn2.decide.dev	d3ujymc7jhx0ev.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:52.008189917 CEST	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	d3ujymc7jhx0ev.cloudfront.net		99.86.4.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.008189917 CEST	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	d3ujymc7jhx0ev.cloudfront.net		99.86.4.121	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.008189917 CEST	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	d3ujymc7jhx0ev.cloudfront.net		99.86.4.96	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.008189917 CEST	1.1.1.1	192.168.2.4	0x1ea0	No error (0)	d3ujymc7jhx0ev.cloudfront.net		99.86.4.79	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.196960926 CEST	1.1.1.1	192.168.2.4	0x3123	No error (0)	dotsply.com		172.66.43.213	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.196960926 CEST	1.1.1.1	192.168.2.4	0x3123	No error (0)	dotsply.com		172.66.40.43	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:52.201812983 CEST	1.1.1.1	192.168.2.4	0xe885	No error (0)	dotsply.com			65	IN (0x0001)	false
May 24, 2024 08:26:53.134824991 CEST	1.1.1.1	192.168.2.4	0x7a99	No error (0)	player.avplayer.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:53.147212982 CEST	1.1.1.1	192.168.2.4	0x4512	No error (0)	player.avplayer.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:53.165236950 CEST	1.1.1.1	192.168.2.4	0x2dfc	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:53.165236950 CEST	1.1.1.1	192.168.2.4	0x2dfc	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:53.165628910 CEST	1.1.1.1	192.168.2.4	0x7364	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:53.165628910 CEST	1.1.1.1	192.168.2.4	0x7364	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:53.165628910 CEST	1.1.1.1	192.168.2.4	0x7364	No error (0)	track-sc-was.aniview.com		96.46.186.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:53.334052086 CEST	1.1.1.1	192.168.2.4	0xe361	No error (0)	c.adsco.re		104.17.166.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:53.334052086 CEST	1.1.1.1	192.168.2.4	0xe361	No error (0)	c.adsco.re		104.17.167.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:53.503406048 CEST	1.1.1.1	192.168.2.4	0xefd2	No error (0)	decide.dev		34.149.139.129	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.426675081 CEST	1.1.1.1	192.168.2.4	0x50d	No error (0)	td.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.443250895 CEST	1.1.1.1	192.168.2.4	0x877b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:26:54.443268061 CEST	1.1.1.1	192.168.2.4	0x60b2	No error (0)	googleads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.587584019 CEST	1.1.1.1	192.168.2.4	0xbcea	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.587584019 CEST	1.1.1.1	192.168.2.4	0xbcea	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.587584019 CEST	1.1.1.1	192.168.2.4	0xbcea	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:54.587584019 CEST	1.1.1.1	192.168.2.4	0xbcea	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.043401957 CEST	1.1.1.1	192.168.2.4	0x9156	No error (0)	engine.4dsply.com		104.16.203.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.043401957 CEST	1.1.1.1	192.168.2.4	0x9156	No error (0)	engine.4dsply.com		104.16.202.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.043442965 CEST	1.1.1.1	192.168.2.4	0x738	No error (0)	engine.4dsply.com			65	IN (0x0001)	false
May 24, 2024 08:26:55.211064100 CEST	1.1.1.1	192.168.2.4	0x8253	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:55.211064100 CEST	1.1.1.1	192.168.2.4	0x8253	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.211064100 CEST	1.1.1.1	192.168.2.4	0x8253	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.211064100 CEST	1.1.1.1	192.168.2.4	0x8253	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.211064100 CEST	1.1.1.1	192.168.2.4	0x8253	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.216144085 CEST	1.1.1.1	192.168.2.4	0x6672	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:55.503664970 CEST	1.1.1.1	192.168.2.4	0xa91c	No error (0)	adsco.re		162.252.214.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.543926954 CEST	1.1.1.1	192.168.2.4	0x2f12	No error (0)	c.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.543926954 CEST	1.1.1.1	192.168.2.4	0x2f12	No error (0)	c.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.543926954 CEST	1.1.1.1	192.168.2.4	0x2f12	No error (0)	c.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.543926954 CEST	1.1.1.1	192.168.2.4	0x2f12	No error (0)	c.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.543926954 CEST	1.1.1.1	192.168.2.4	0x2f12	No error (0)	c.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.548711061 CEST	1.1.1.1	192.168.2.4	0x63fa	No error (0)	c.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:26:55.553544998 CEST	1.1.1.1	192.168.2.4	0x3abc	No error (0)	6.adsco.re		104.17.167.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.553544998 CEST	1.1.1.1	192.168.2.4	0x3abc	No error (0)	6.adsco.re		104.17.166.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.558283091 CEST	1.1.1.1	192.168.2.4	0x3949	No error (0)	4.adsco.re		162.252.214.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.884316921 CEST	1.1.1.1	192.168.2.4	0xcf96	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:55.884316921 CEST	1.1.1.1	192.168.2.4	0xcf96	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:55.884316921 CEST	1.1.1.1	192.168.2.4	0xcf96	No error (0)	track-sc-was.aniview.com		96.46.186.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.884332895 CEST	1.1.1.1	192.168.2.4	0xdbf3	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:55.884332895 CEST	1.1.1.1	192.168.2.4	0xdbf3	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:55.884346008 CEST	1.1.1.1	192.168.2.4	0xade0	No error (0)	ruamupr.com			65	IN (0x0001)	false
May 24, 2024 08:26:55.884358883 CEST	1.1.1.1	192.168.2.4	0xa235	No error (0)	ruamupr.com		104.21.73.79	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.884358883 CEST	1.1.1.1	192.168.2.4	0xa235	No error (0)	ruamupr.com		172.67.189.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.889281988 CEST	1.1.1.1	192.168.2.4	0x2a05	No error (0)	souhaija.site		165.22.209.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.889281988 CEST	1.1.1.1	192.168.2.4	0x2a05	No error (0)	souhaija.site		134.122.109.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.889281988 CEST	1.1.1.1	192.168.2.4	0x2a05	No error (0)	souhaija.site		165.232.114.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.908593893 CEST	1.1.1.1	192.168.2.4	0x4b80	No error (0)	widget.adcovery.com			65	IN (0x0001)	false
May 24, 2024 08:26:55.913392067 CEST	1.1.1.1	192.168.2.4	0xf35	No error (0)	widget.adcovery.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.913392067 CEST	1.1.1.1	192.168.2.4	0xf35	No error (0)	widget.adcovery.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.932861090 CEST	1.1.1.1	192.168.2.4	0x6baa	No error (0)	stats.g.doubleclick.net		142.251.5.157	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.932861090 CEST	1.1.1.1	192.168.2.4	0x6baa	No error (0)	stats.g.doubleclick.net		142.251.5.155	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.932861090 CEST	1.1.1.1	192.168.2.4	0x6baa	No error (0)	stats.g.doubleclick.net		142.251.5.156	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:55.932861090 CEST	1.1.1.1	192.168.2.4	0x6baa	No error (0)	stats.g.doubleclick.net		142.251.5.154	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.214632034 CEST	1.1.1.1	192.168.2.4	0xb5a0	No error (0)	gu2nbmodgvw2.l4.adsco.re		185.200.118.51	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.293960094 CEST	1.1.1.1	192.168.2.4	0xa591	No error (0)	gu2nbmodgvw2.n4.adsco.re		38.132.109.115	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.298716068 CEST	1.1.1.1	192.168.2.4	0x3dcb	No error (0)	4.adsco.re		162.252.214.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.316730022 CEST	1.1.1.1	192.168.2.4	0xf76d	No error (0)	6.adsco.re		104.17.166.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.316730022 CEST	1.1.1.1	192.168.2.4	0xf76d	No error (0)	6.adsco.re		104.17.167.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.316776037 CEST	1.1.1.1	192.168.2.4	0x46da	No error (0)	c.adsco.re		104.17.167.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.316776037 CEST	1.1.1.1	192.168.2.4	0x46da	No error (0)	c.adsco.re		104.17.166.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:56.553342104 CEST	1.1.1.1	192.168.2.4	0x2826	No error (0)	gu2nbmodgvw2.s4.adsco.re		185.200.116.51	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.252950907 CEST	1.1.1.1	192.168.2.4	0xc83	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:57.252950907 CEST	1.1.1.1	192.168.2.4	0xc83	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.252969980 CEST	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tags.crwdcntrl.net		108.138.128.28	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.252969980 CEST	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tags.crwdcntrl.net		108.138.128.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.252969980 CEST	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tags.crwdcntrl.net		108.138.128.34	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.252969980 CEST	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tags.crwdcntrl.net		108.138.128.124	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.252984047 CEST	1.1.1.1	192.168.2.4	0xf81d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.269767046 CEST	1.1.1.1	192.168.2.4	0x57a1	No error (0)	ad.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.304807901 CEST	1.1.1.1	192.168.2.4	0xf837	No error (0)	adsco.re		162.252.214.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.309484959 CEST	1.1.1.1	192.168.2.4	0x6727	No error (0)	6.adsco.re		104.17.166.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.309484959 CEST	1.1.1.1	192.168.2.4	0x6727	No error (0)	6.adsco.re		104.17.167.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314253092 CEST	1.1.1.1	192.168.2.4	0x3918	No error (0)	bcp.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:57.314284086 CEST	1.1.1.1	192.168.2.4	0xc51c	No error (0)	4.adsco.re		162.252.214.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.949150085 CEST	1.1.1.1	192.168.2.4	0x25f9	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:59.953931093 CEST	1.1.1.1	192.168.2.4	0x1212	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:26:59.953931093 CEST	1.1.1.1	192.168.2.4	0x1212	No error (0)	www3.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.953946114 CEST	1.1.1.1	192.168.2.4	0x99e6	No error (0)	cdn.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:26:59.953958035 CEST	1.1.1.1	192.168.2.4	0xeb52	No error (0)	cdn.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.953958035 CEST	1.1.1.1	192.168.2.4	0xeb52	No error (0)	cdn.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.953958035 CEST	1.1.1.1	192.168.2.4	0xeb52	No error (0)	cdn.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.953958035 CEST	1.1.1.1	192.168.2.4	0xeb52	No error (0)	cdn.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:26:59.953958035 CEST	1.1.1.1	192.168.2.4	0xeb52	No error (0)	cdn.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:02.131182909 CEST	1.1.1.1	192.168.2.4	0x71d4	No error (0)	player.aniview.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:02.131196022 CEST	1.1.1.1	192.168.2.4	0x9ead	No error (0)	player.aniview.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:04.047008991 CEST	1.1.1.1	192.168.2.4	0x3798	No error (0)	cm.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.047008991 CEST	1.1.1.1	192.168.2.4	0x3798	No error (0)	cm.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.047008991 CEST	1.1.1.1	192.168.2.4	0x3798	No error (0)	cm.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.047008991 CEST	1.1.1.1	192.168.2.4	0x3798	No error (0)	cm.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.047008991 CEST	1.1.1.1	192.168.2.4	0x3798	No error (0)	cm.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052478075 CEST	1.1.1.1	192.168.2.4	0x7182	No error (0)	cm.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:04.052489996 CEST	1.1.1.1	192.168.2.4	0x6154	No error (0)	s-img.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:04.052500010 CEST	1.1.1.1	192.168.2.4	0x1996	No error (0)	cdn.id5-sync.com			65	IN (0x0001)	false
May 24, 2024 08:27:04.052510023 CEST	1.1.1.1	192.168.2.4	0x145d	No error (0)	c.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052510023 CEST	1.1.1.1	192.168.2.4	0x145d	No error (0)	c.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052510023 CEST	1.1.1.1	192.168.2.4	0x145d	No error (0)	c.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052510023 CEST	1.1.1.1	192.168.2.4	0x145d	No error (0)	c.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052510023 CEST	1.1.1.1	192.168.2.4	0x145d	No error (0)	c.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052520037 CEST	1.1.1.1	192.168.2.4	0xbf17	No error (0)	s-img.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052520037 CEST	1.1.1.1	192.168.2.4	0xbf17	No error (0)	s-img.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052520037 CEST	1.1.1.1	192.168.2.4	0xbf17	No error (0)	s-img.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052520037 CEST	1.1.1.1	192.168.2.4	0xbf17	No error (0)	s-img.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052520037 CEST	1.1.1.1	192.168.2.4	0xbf17	No error (0)	s-img.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052530050 CEST	1.1.1.1	192.168.2.4	0xc0a6	No error (0)	c.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:04.052539110 CEST	1.1.1.1	192.168.2.4	0xaab0	No error (0)	cdn.id5-sync.com		172.67.38.106	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052539110 CEST	1.1.1.1	192.168.2.4	0xaab0	No error (0)	cdn.id5-sync.com		104.22.53.86	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.052539110 CEST	1.1.1.1	192.168.2.4	0xaab0	No error (0)	cdn.id5-sync.com		104.22.52.86	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.053031921 CEST	1.1.1.1	192.168.2.4	0xa3a4	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.102	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.053031921 CEST	1.1.1.1	192.168.2.4	0xa3a4	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.204	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.053031921 CEST	1.1.1.1	192.168.2.4	0xa3a4	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.053031921 CEST	1.1.1.1	192.168.2.4	0xa3a4	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.058693886 CEST	1.1.1.1	192.168.2.4	0xe806	No error (0)	adsco.re		162.252.214.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.058723927 CEST	1.1.1.1	192.168.2.4	0xb0bb	No error (0)	4.adsco.re		162.252.214.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.058779955 CEST	1.1.1.1	192.168.2.4	0xc96c	No error (0)	6.adsco.re		104.17.167.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.058779955 CEST	1.1.1.1	192.168.2.4	0xc96c	No error (0)	6.adsco.re		104.17.166.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.066517115 CEST	1.1.1.1	192.168.2.4	0xbd99	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:04.066517115 CEST	1.1.1.1	192.168.2.4	0xbd99	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.066593885 CEST	1.1.1.1	192.168.2.4	0x7539	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:04.066703081 CEST	1.1.1.1	192.168.2.4	0xd4f4	No error (0)	c.adsco.re		104.17.166.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.066703081 CEST	1.1.1.1	192.168.2.4	0xd4f4	No error (0)	c.adsco.re		104.17.167.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:04.071280956 CEST	1.1.1.1	192.168.2.4	0x9c30	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:04.071314096 CEST	1.1.1.1	192.168.2.4	0x129a	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:04.071314096 CEST	1.1.1.1	192.168.2.4	0x129a	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.084635973 CEST	1.1.1.1	192.168.2.4	0x55bd	No error (0)	go1.aniview.com	go1sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.084635973 CEST	1.1.1.1	192.168.2.4	0x55bd	No error (0)	go1sc.aniview.com		173.0.146.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.089628935 CEST	1.1.1.1	192.168.2.4	0xe56c	No error (0)	go1.aniview.com	go1sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.089643002 CEST	1.1.1.1	192.168.2.4	0x75ab	No error (0)	a.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.089643002 CEST	1.1.1.1	192.168.2.4	0x75ab	No error (0)	a.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.089643002 CEST	1.1.1.1	192.168.2.4	0x75ab	No error (0)	a.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.089643002 CEST	1.1.1.1	192.168.2.4	0x75ab	No error (0)	a.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.089643002 CEST	1.1.1.1	192.168.2.4	0x75ab	No error (0)	a.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.089656115 CEST	1.1.1.1	192.168.2.4	0x6174	No error (0)	a.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:05.599225044 CEST	1.1.1.1	192.168.2.4	0xf263	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.599240065 CEST	1.1.1.1	192.168.2.4	0xa293	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.823546886 CEST	1.1.1.1	192.168.2.4	0xcdf6	No error (0)	cdn.connectad.io		104.22.55.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823546886 CEST	1.1.1.1	192.168.2.4	0xcdf6	No error (0)	cdn.connectad.io		172.67.8.174	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823546886 CEST	1.1.1.1	192.168.2.4	0xcdf6	No error (0)	cdn.connectad.io		104.22.54.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823585033 CEST	1.1.1.1	192.168.2.4	0x2442	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.823610067 CEST	1.1.1.1	192.168.2.4	0x3758	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.823610067 CEST	1.1.1.1	192.168.2.4	0x3758	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823610067 CEST	1.1.1.1	192.168.2.4	0x3758	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823635101 CEST	1.1.1.1	192.168.2.4	0x6132	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823635101 CEST	1.1.1.1	192.168.2.4	0x6132	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823635101 CEST	1.1.1.1	192.168.2.4	0x6132	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823635101 CEST	1.1.1.1	192.168.2.4	0x6132	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823635101 CEST	1.1.1.1	192.168.2.4	0x6132	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.823635101 CEST	1.1.1.1	192.168.2.4	0x6132	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828331947 CEST	1.1.1.1	192.168.2.4	0x6834	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828372002 CEST	1.1.1.1	192.168.2.4	0x81fb	No error (0)	rtb-usw.mfadsrvr.com	pool-usw.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.828383923 CEST	1.1.1.1	192.168.2.4	0xa74e	No error (0)	cm.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.828396082 CEST	1.1.1.1	192.168.2.4	0x3017	No error (0)	rtb-usw.mfadsrvr.com	pool-usw.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:05.828396082 CEST	1.1.1.1	192.168.2.4	0x3017	No error (0)	pool-usw.dorpat.iponweb.net		35.212.212.222	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.898861885 CEST	1.1.1.1	192.168.2.4	0x381c	No error (0)	bcp.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.903956890 CEST	1.1.1.1	192.168.2.4	0x6efa	No error (0)	cdn.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.903956890 CEST	1.1.1.1	192.168.2.4	0x6efa	No error (0)	cdn.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.903956890 CEST	1.1.1.1	192.168.2.4	0x6efa	No error (0)	cdn.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.903956890 CEST	1.1.1.1	192.168.2.4	0x6efa	No error (0)	cdn.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.903956890 CEST	1.1.1.1	192.168.2.4	0x6efa	No error (0)	cdn.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:05.908757925 CEST	1.1.1.1	192.168.2.4	0x95c7	No error (0)	cdn.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:05.913569927 CEST	1.1.1.1	192.168.2.4	0xb617	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:06.015388966 CEST	1.1.1.1	192.168.2.4	0x12d0	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:06.067464113 CEST	1.1.1.1	192.168.2.4	0x48bf	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:06.691320896 CEST	1.1.1.1	192.168.2.4	0x7564	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.375740051 CEST	1.1.1.1	192.168.2.4	0xa54f	No error (0)	sync.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.375740051 CEST	1.1.1.1	192.168.2.4	0xa54f	No error (0)	sync.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.375740051 CEST	1.1.1.1	192.168.2.4	0xa54f	No error (0)	sync.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.375740051 CEST	1.1.1.1	192.168.2.4	0xa54f	No error (0)	sync.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.392951012 CEST	1.1.1.1	192.168.2.4	0x81b5	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.392951012 CEST	1.1.1.1	192.168.2.4	0x81b5	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409290075 CEST	1.1.1.1	192.168.2.4	0x32ef	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409290075 CEST	1.1.1.1	192.168.2.4	0x32ef	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409290075 CEST	1.1.1.1	192.168.2.4	0x32ef	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409290075 CEST	1.1.1.1	192.168.2.4	0x32ef	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.255.174.236	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.77.113.197	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.252.158.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		63.35.40.142	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		108.128.7.33	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.220.253.172	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.154.116.95	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.409297943 CEST	1.1.1.1	192.168.2.4	0xbfb2	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.240.192.124	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.416405916 CEST	1.1.1.1	192.168.2.4	0xc10c	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.416419029 CEST	1.1.1.1	192.168.2.4	0x40d2	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.520194054 CEST	1.1.1.1	192.168.2.4	0x6e1d	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.520205975 CEST	1.1.1.1	192.168.2.4	0x808e	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:07.520205975 CEST	1.1.1.1	192.168.2.4	0x808e	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.520205975 CEST	1.1.1.1	192.168.2.4	0x808e	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.520205975 CEST	1.1.1.1	192.168.2.4	0x808e	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.520215034 CEST	1.1.1.1	192.168.2.4	0xbf4	No error (0)	sync-eu.connectad.io		104.22.54.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.520215034 CEST	1.1.1.1	192.168.2.4	0xbf4	No error (0)	sync-eu.connectad.io		172.67.8.174	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:07.520215034 CEST	1.1.1.1	192.168.2.4	0xbf4	No error (0)	sync-eu.connectad.io		104.22.55.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.146635056 CEST	1.1.1.1	192.168.2.4	0x55d2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.146635056 CEST	1.1.1.1	192.168.2.4	0x55d2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147322893 CEST	1.1.1.1	192.168.2.4	0x5d60	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147351980 CEST	1.1.1.1	192.168.2.4	0x213e	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.147380114 CEST	1.1.1.1	192.168.2.4	0xb2b9	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147437096 CEST	1.1.1.1	192.168.2.4	0x87f9	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.147464037 CEST	1.1.1.1	192.168.2.4	0x3f0d	No error (0)	inv-nets.admixer.net		116.202.167.133	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.94.218.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		18.211.141.230	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.193.116.50	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.23.63.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.225.184.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.237.25.101	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.200.71.144	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151496887 CEST	1.1.1.1	192.168.2.4	0x75ba	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		18.208.18.19	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151530027 CEST	1.1.1.1	192.168.2.4	0xecbe	No error (0)	s2s.aniview.com	s2s-sc-main-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.151557922 CEST	1.1.1.1	192.168.2.4	0x7589	No error (0)	s2s.aniview.com	s2s-sc-main-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.151557922 CEST	1.1.1.1	192.168.2.4	0x7589	No error (0)	s2s-sc-main-was.aniview.com		172.240.45.70	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151586056 CEST	1.1.1.1	192.168.2.4	0xf10f	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151586056 CEST	1.1.1.1	192.168.2.4	0xf10f	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.151613951 CEST	1.1.1.1	192.168.2.4	0x6628	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.156341076 CEST	1.1.1.1	192.168.2.4	0xbb2e	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.285192013 CEST	1.1.1.1	192.168.2.4	0x9cd3	No error (0)	cm.rtbsystem.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.285192013 CEST	1.1.1.1	192.168.2.4	0x9cd3	No error (0)	cm.rtbsystem.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.316950083 CEST	1.1.1.1	192.168.2.4	0xe858	No error (0)	cm.rtbsystem.com			65	IN (0x0001)	false
May 24, 2024 08:27:08.400110960 CEST	1.1.1.1	192.168.2.4	0x800d	No error (0)	hde.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.400110960 CEST	1.1.1.1	192.168.2.4	0x800d	No error (0)	hde.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466893911 CEST	1.1.1.1	192.168.2.4	0xb682	No error (0)	cm.idealmedia.io		104.18.140.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466893911 CEST	1.1.1.1	192.168.2.4	0xb682	No error (0)	cm.idealmedia.io		104.18.164.66	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466923952 CEST	1.1.1.1	192.168.2.4	0x53a0	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.466923952 CEST	1.1.1.1	192.168.2.4	0x53a0	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.466952085 CEST	1.1.1.1	192.168.2.4	0xa4de	No error (0)	cm.idealmedia.io			65	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		108.128.49.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		54.246.180.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		34.246.225.92	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		52.209.124.52	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		52.51.146.36	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		52.211.81.74	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		52.213.20.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.466979027 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	euw-ice.360yield.com		54.216.157.131	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.590852022 CEST	1.1.1.1	192.168.2.4	0xc921	No error (0)	sync1.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.590852022 CEST	1.1.1.1	192.168.2.4	0xc921	No error (0)	sync1.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.590852022 CEST	1.1.1.1	192.168.2.4	0xc921	No error (0)	sync1.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.590852022 CEST	1.1.1.1	192.168.2.4	0xc921	No error (0)	sync1.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.662610054 CEST	1.1.1.1	192.168.2.4	0x359a	No error (0)	id.a-mx.com		79.127.227.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.662610054 CEST	1.1.1.1	192.168.2.4	0x359a	No error (0)	id.a-mx.com		79.127.216.47	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869498014 CEST	1.1.1.1	192.168.2.4	0x8778	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.869535923 CEST	1.1.1.1	192.168.2.4	0x2c62	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.911312103 CEST	1.1.1.1	192.168.2.4	0xa3dc	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.911312103 CEST	1.1.1.1	192.168.2.4	0xa3dc	No error (0)	image8-v2.pubmnet.com	imgsync-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.911329031 CEST	1.1.1.1	192.168.2.4	0xab40	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.911329031 CEST	1.1.1.1	192.168.2.4	0xab40	No error (0)	image8-v2.pubmnet.com	imagesync-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.911329031 CEST	1.1.1.1	192.168.2.4	0xab40	No error (0)	imagesync-lhrc.pubmnet.com		185.64.190.79	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.925478935 CEST	1.1.1.1	192.168.2.4	0x50f	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:08.947844028 CEST	1.1.1.1	192.168.2.4	0xd715	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.947859049 CEST	1.1.1.1	192.168.2.4	0xb7dd	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.967813969 CEST	1.1.1.1	192.168.2.4	0xe126	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.967828989 CEST	1.1.1.1	192.168.2.4	0xdfb0	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:08.967828989 CEST	1.1.1.1	192.168.2.4	0xdfb0	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.155076981 CEST	1.1.1.1	192.168.2.4	0xf16e	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.155076981 CEST	1.1.1.1	192.168.2.4	0xf16e	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.155092955 CEST	1.1.1.1	192.168.2.4	0x70	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.155092955 CEST	1.1.1.1	192.168.2.4	0x70	No error (0)	1.cpm.ak-is2.net		77.245.57.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.155105114 CEST	1.1.1.1	192.168.2.4	0x5cad	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.155117035 CEST	1.1.1.1	192.168.2.4	0x427c	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.219610929 CEST	1.1.1.1	192.168.2.4	0xc9e7	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.219610929 CEST	1.1.1.1	192.168.2.4	0xc9e7	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.219626904 CEST	1.1.1.1	192.168.2.4	0xc957	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.306593895 CEST	1.1.1.1	192.168.2.4	0x3da5	No error (0)	sync.aniview.com	sync-sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.306593895 CEST	1.1.1.1	192.168.2.4	0x3da5	No error (0)	sync-sc.aniview.com		96.46.186.182	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.306612015 CEST	1.1.1.1	192.168.2.4	0xa416	No error (0)	sync.aniview.com	sync-sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.432929993 CEST	1.1.1.1	192.168.2.4	0x1638	No error (0)	cm.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.432929993 CEST	1.1.1.1	192.168.2.4	0x1638	No error (0)	cm.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.432929993 CEST	1.1.1.1	192.168.2.4	0x1638	No error (0)	cm.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.432929993 CEST	1.1.1.1	192.168.2.4	0x1638	No error (0)	cm.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.432929993 CEST	1.1.1.1	192.168.2.4	0x1638	No error (0)	cm.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.432946920 CEST	1.1.1.1	192.168.2.4	0xd185	No error (0)	cm.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.522624969 CEST	1.1.1.1	192.168.2.4	0x5fbe	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.527554989 CEST	1.1.1.1	192.168.2.4	0x5548	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.608879089 CEST	1.1.1.1	192.168.2.4	0xe493	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.608895063 CEST	1.1.1.1	192.168.2.4	0xe6f1	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.626632929 CEST	1.1.1.1	192.168.2.4	0xffa1	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.626647949 CEST	1.1.1.1	192.168.2.4	0x733f	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.17.205.185	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.241.57.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		18.203.179.220	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.51.203.212	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		18.202.187.230	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.211.60.126	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.248.74.69	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651555061 CEST	1.1.1.1	192.168.2.4	0x6edb	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.213.158.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.651576996 CEST	1.1.1.1	192.168.2.4	0x730b	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651576996 CEST	1.1.1.1	192.168.2.4	0x730b	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651576996 CEST	1.1.1.1	192.168.2.4	0x730b	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.651576996 CEST	1.1.1.1	192.168.2.4	0x730b	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.905807018 CEST	1.1.1.1	192.168.2.4	0x9b29	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.905807018 CEST	1.1.1.1	192.168.2.4	0x9b29	No error (0)	ice.360yield.com	eu2-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		54.171.20.81	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		54.246.180.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		52.211.130.211	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		34.255.242.185	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		52.209.247.91	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		176.34.130.130	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		34.250.191.7	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.905827999 CEST	1.1.1.1	192.168.2.4	0x100a	No error (0)	euw-ice.360yield.com		63.32.35.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.942821980 CEST	1.1.1.1	192.168.2.4	0x2388	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.942821980 CEST	1.1.1.1	192.168.2.4	0x2388	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.942821980 CEST	1.1.1.1	192.168.2.4	0x2388	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.942821980 CEST	1.1.1.1	192.168.2.4	0x2388	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.942821980 CEST	1.1.1.1	192.168.2.4	0x2388	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.942838907 CEST	1.1.1.1	192.168.2.4	0xb9a4	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.942838907 CEST	1.1.1.1	192.168.2.4	0xb9a4	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.942838907 CEST	1.1.1.1	192.168.2.4	0xb9a4	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.958444118 CEST	1.1.1.1	192.168.2.4	0xb82	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.958465099 CEST	1.1.1.1	192.168.2.4	0x1c8e	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:09.958465099 CEST	1.1.1.1	192.168.2.4	0x1c8e	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.958465099 CEST	1.1.1.1	192.168.2.4	0x1c8e	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:09.967163086 CEST	1.1.1.1	192.168.2.4	0xcb38	No error (0)	cs.admanmedia.com		80.77.87.166	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.017333031 CEST	1.1.1.1	192.168.2.4	0x5bc2	No error (0)	player.avplayer.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.024342060 CEST	1.1.1.1	192.168.2.4	0x8b7	No error (0)	player.avplayer.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.135656118 CEST	1.1.1.1	192.168.2.4	0x8e33	No error (0)	sync.connectad.io		104.22.55.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.135656118 CEST	1.1.1.1	192.168.2.4	0x8e33	No error (0)	sync.connectad.io		172.67.8.174	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.135656118 CEST	1.1.1.1	192.168.2.4	0x8e33	No error (0)	sync.connectad.io		104.22.54.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.138825893 CEST	1.1.1.1	192.168.2.4	0x8488	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.138825893 CEST	1.1.1.1	192.168.2.4	0x8488	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.195.158.29	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.138825893 CEST	1.1.1.1	192.168.2.4	0x8488	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.31.50.141	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.138825893 CEST	1.1.1.1	192.168.2.4	0x8488	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		63.34.207.242	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.138825893 CEST	1.1.1.1	192.168.2.4	0x8488	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.48.182.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.138842106 CEST	1.1.1.1	192.168.2.4	0xa900	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.138842106 CEST	1.1.1.1	192.168.2.4	0xa900	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.138842106 CEST	1.1.1.1	192.168.2.4	0xa900	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.138873100 CEST	1.1.1.1	192.168.2.4	0x9d6e	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.141218901 CEST	1.1.1.1	192.168.2.4	0x92ac	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.141218901 CEST	1.1.1.1	192.168.2.4	0x92ac	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.141218901 CEST	1.1.1.1	192.168.2.4	0x92ac	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.146028042 CEST	1.1.1.1	192.168.2.4	0x1e85	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.146028042 CEST	1.1.1.1	192.168.2.4	0x1e85	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.146028042 CEST	1.1.1.1	192.168.2.4	0x1e85	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.146028042 CEST	1.1.1.1	192.168.2.4	0x1e85	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.146043062 CEST	1.1.1.1	192.168.2.4	0xaffd	No error (0)	s.amazon-adsystem.com		52.46.128.147	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.160186052 CEST	1.1.1.1	192.168.2.4	0xaddb	No error (0)	cm.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.239084005 CEST	1.1.1.1	192.168.2.4	0xf369	No error (0)	ps.eyeota.net		52.57.150.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.243798971 CEST	1.1.1.1	192.168.2.4	0x88d3	No error (0)	sync.e-volution.ai		109.206.161.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.243798971 CEST	1.1.1.1	192.168.2.4	0x88d3	No error (0)	sync.e-volution.ai		91.227.144.188	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.243798971 CEST	1.1.1.1	192.168.2.4	0x88d3	No error (0)	sync.e-volution.ai		91.227.144.189	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.366067886 CEST	1.1.1.1	192.168.2.4	0x26ff	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.366067886 CEST	1.1.1.1	192.168.2.4	0x26ff	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.366067886 CEST	1.1.1.1	192.168.2.4	0x26ff	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.366067886 CEST	1.1.1.1	192.168.2.4	0x26ff	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.366082907 CEST	1.1.1.1	192.168.2.4	0xb4a3	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.372945070 CEST	1.1.1.1	192.168.2.4	0xc3e	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.372958899 CEST	1.1.1.1	192.168.2.4	0x6b41	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.643738985 CEST	1.1.1.1	192.168.2.4	0x9ba4	No error (0)	s-img.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:10.643764019 CEST	1.1.1.1	192.168.2.4	0xff18	No error (0)	s-img.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.643764019 CEST	1.1.1.1	192.168.2.4	0xff18	No error (0)	s-img.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.643764019 CEST	1.1.1.1	192.168.2.4	0xff18	No error (0)	s-img.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.643764019 CEST	1.1.1.1	192.168.2.4	0xff18	No error (0)	s-img.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.643764019 CEST	1.1.1.1	192.168.2.4	0xff18	No error (0)	s-img.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.653428078 CEST	1.1.1.1	192.168.2.4	0xff01	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.204	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.653428078 CEST	1.1.1.1	192.168.2.4	0xff01	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.653428078 CEST	1.1.1.1	192.168.2.4	0xff01	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.653428078 CEST	1.1.1.1	192.168.2.4	0xff01	No error (0)	de9a11s35xj3d.cloudfront.net		65.9.7.102	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.658282995 CEST	1.1.1.1	192.168.2.4	0xbfaf	No error (0)	a.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:10.658293962 CEST	1.1.1.1	192.168.2.4	0x35f3	No error (0)	a.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.658293962 CEST	1.1.1.1	192.168.2.4	0x35f3	No error (0)	a.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.658293962 CEST	1.1.1.1	192.168.2.4	0x35f3	No error (0)	a.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.658293962 CEST	1.1.1.1	192.168.2.4	0x35f3	No error (0)	a.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.658293962 CEST	1.1.1.1	192.168.2.4	0x35f3	No error (0)	a.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663351059 CEST	1.1.1.1	192.168.2.4	0xe049	No error (0)	cm.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663351059 CEST	1.1.1.1	192.168.2.4	0xe049	No error (0)	cm.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663351059 CEST	1.1.1.1	192.168.2.4	0xe049	No error (0)	cm.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663351059 CEST	1.1.1.1	192.168.2.4	0xe049	No error (0)	cm.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663351059 CEST	1.1.1.1	192.168.2.4	0xe049	No error (0)	cm.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663361073 CEST	1.1.1.1	192.168.2.4	0xc8b0	No error (0)	go1.aniview.com	go1sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.663361073 CEST	1.1.1.1	192.168.2.4	0xc8b0	No error (0)	go1sc.aniview.com		173.0.146.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663368940 CEST	1.1.1.1	192.168.2.4	0x385a	No error (0)	go1.aniview.com	go1sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:10.663377047 CEST	1.1.1.1	192.168.2.4	0xce17	No error (0)	engine.4dsply.com		104.16.202.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.663377047 CEST	1.1.1.1	192.168.2.4	0xce17	No error (0)	engine.4dsply.com		104.16.203.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.668550968 CEST	1.1.1.1	192.168.2.4	0x4add	No error (0)	engine.4dsply.com			65	IN (0x0001)	false
May 24, 2024 08:27:10.668560028 CEST	1.1.1.1	192.168.2.4	0x5d28	No error (0)	cm.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712637901 CEST	1.1.1.1	192.168.2.4	0x61b4	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.712666035 CEST	1.1.1.1	192.168.2.4	0xd737	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.737503052 CEST	1.1.1.1	192.168.2.4	0x6df7	No error (0)	sync1.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.737503052 CEST	1.1.1.1	192.168.2.4	0x6df7	No error (0)	sync1.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.737503052 CEST	1.1.1.1	192.168.2.4	0x6df7	No error (0)	sync1.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:10.737503052 CEST	1.1.1.1	192.168.2.4	0x6df7	No error (0)	sync1.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.120263100 CEST	1.1.1.1	192.168.2.4	0xab14	No error (0)	pixel-us-west.rubiconproject.com	pixel-us-west.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.120276928 CEST	1.1.1.1	192.168.2.4	0xabdb	No error (0)	pixel-us-west.rubiconproject.com	pixel-us-west.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.157556057 CEST	1.1.1.1	192.168.2.4	0x76c4	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.182127953 CEST	1.1.1.1	192.168.2.4	0xede	No error (0)	aax-eu.amazon-adsystem.com		52.95.115.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.189328909 CEST	1.1.1.1	192.168.2.4	0xac8a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.189368963 CEST	1.1.1.1	192.168.2.4	0xb48d	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.193165064 CEST	1.1.1.1	192.168.2.4	0xa5da	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.193187952 CEST	1.1.1.1	192.168.2.4	0x3d56	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.193917990 CEST	1.1.1.1	192.168.2.4	0x2cf3	No error (0)	srv.aso1.net			65	IN (0x0001)	false
May 24, 2024 08:27:11.196180105 CEST	1.1.1.1	192.168.2.4	0xd8e9	No error (0)	srv.aso1.net		104.21.234.154	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.196180105 CEST	1.1.1.1	192.168.2.4	0xd8e9	No error (0)	srv.aso1.net		104.21.234.155	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.225636959 CEST	1.1.1.1	192.168.2.4	0x8877	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.225636959 CEST	1.1.1.1	192.168.2.4	0x8877	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.324357033 CEST	1.1.1.1	192.168.2.4	0xdc12	No error (0)	contextual.media.net		95.101.148.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.343218088 CEST	1.1.1.1	192.168.2.4	0x461b	No error (0)	digiadsply.com		104.18.38.11	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.343218088 CEST	1.1.1.1	192.168.2.4	0x461b	No error (0)	digiadsply.com		172.64.149.245	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.374126911 CEST	1.1.1.1	192.168.2.4	0xb93d	No error (0)	digiadsply.com			65	IN (0x0001)	false
May 24, 2024 08:27:11.552803993 CEST	1.1.1.1	192.168.2.4	0xeae7	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.552803993 CEST	1.1.1.1	192.168.2.4	0xeae7	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.552803993 CEST	1.1.1.1	192.168.2.4	0xeae7	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:11.555788994 CEST	1.1.1.1	192.168.2.4	0x3a2f	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.555788994 CEST	1.1.1.1	192.168.2.4	0x3a2f	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.615075111 CEST	1.1.1.1	192.168.2.4	0x3a54	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.615075111 CEST	1.1.1.1	192.168.2.4	0x3a54	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.615094900 CEST	1.1.1.1	192.168.2.4	0x42d8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.615094900 CEST	1.1.1.1	192.168.2.4	0x42d8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.620480061 CEST	1.1.1.1	192.168.2.4	0x57aa	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.620495081 CEST	1.1.1.1	192.168.2.4	0xf365	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.847203970 CEST	1.1.1.1	192.168.2.4	0xeeeb	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.847203970 CEST	1.1.1.1	192.168.2.4	0xeeeb	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.847214937 CEST	1.1.1.1	192.168.2.4	0x2d23	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.847214937 CEST	1.1.1.1	192.168.2.4	0x2d23	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:11.847214937 CEST	1.1.1.1	192.168.2.4	0x2d23	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		34.246.206.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		34.249.65.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		34.255.48.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		52.210.242.228	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		34.240.216.83	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		34.254.84.230	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		52.48.246.250	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.258579016 CEST	1.1.1.1	192.168.2.4	0x5d8	No error (0)	match.prod.bidr.io		34.241.112.102	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.281299114 CEST	1.1.1.1	192.168.2.4	0x2ffc	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.281311035 CEST	1.1.1.1	192.168.2.4	0x4e78	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.286084890 CEST	1.1.1.1	192.168.2.4	0x2a38	No error (0)	cm.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.290946960 CEST	1.1.1.1	192.168.2.4	0x70a4	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.323995113 CEST	1.1.1.1	192.168.2.4	0x8918	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.323995113 CEST	1.1.1.1	192.168.2.4	0x8918	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.195.158.29	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.323995113 CEST	1.1.1.1	192.168.2.4	0x8918	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.250.199.34	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.323995113 CEST	1.1.1.1	192.168.2.4	0x8918	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.249.60.18	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.323995113 CEST	1.1.1.1	192.168.2.4	0x8918	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.246.18.125	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.324017048 CEST	1.1.1.1	192.168.2.4	0xf5b9	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.430865049 CEST	1.1.1.1	192.168.2.4	0x11fd	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.430865049 CEST	1.1.1.1	192.168.2.4	0x11fd	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.439558029 CEST	1.1.1.1	192.168.2.4	0x2882	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.439558029 CEST	1.1.1.1	192.168.2.4	0x2882	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.439568996 CEST	1.1.1.1	192.168.2.4	0xff9b	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.439588070 CEST	1.1.1.1	192.168.2.4	0x2167	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.468030930 CEST	1.1.1.1	192.168.2.4	0x1fe4	No error (0)	aax-eu.amazon-adsystem.com		52.95.122.74	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.468055010 CEST	1.1.1.1	192.168.2.4	0x582a	No error (0)	digiadsply.com			65	IN (0x0001)	false
May 24, 2024 08:27:12.468064070 CEST	1.1.1.1	192.168.2.4	0x9d11	No error (0)	digiadsply.com		104.18.38.11	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.468064070 CEST	1.1.1.1	192.168.2.4	0x9d11	No error (0)	digiadsply.com		172.64.149.245	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.580112934 CEST	1.1.1.1	192.168.2.4	0xf1fe	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.580112934 CEST	1.1.1.1	192.168.2.4	0xf1fe	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.580127001 CEST	1.1.1.1	192.168.2.4	0x204d	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.769802094 CEST	1.1.1.1	192.168.2.4	0xa021	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.769818068 CEST	1.1.1.1	192.168.2.4	0x8bad	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.769818068 CEST	1.1.1.1	192.168.2.4	0x8bad	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.239.70.203	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		54.157.238.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		54.144.2.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		54.157.2.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		52.72.151.87	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		54.157.60.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		52.72.76.247	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.775784969 CEST	1.1.1.1	192.168.2.4	0x1606	No error (0)	sync.ipredictive.com		52.7.90.152	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.844520092 CEST	1.1.1.1	192.168.2.4	0x4e27	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.844520092 CEST	1.1.1.1	192.168.2.4	0x4e27	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.844520092 CEST	1.1.1.1	192.168.2.4	0x4e27	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.844520092 CEST	1.1.1.1	192.168.2.4	0x4e27	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.844520092 CEST	1.1.1.1	192.168.2.4	0x4e27	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.844520092 CEST	1.1.1.1	192.168.2.4	0x4e27	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:12.844532967 CEST	1.1.1.1	192.168.2.4	0xad5	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:12.844532967 CEST	1.1.1.1	192.168.2.4	0xad5	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.020277023 CEST	1.1.1.1	192.168.2.4	0x5e4b	No error (0)	api.rlcdn.com		34.120.133.55	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.020297050 CEST	1.1.1.1	192.168.2.4	0xc87b	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.022135019 CEST	1.1.1.1	192.168.2.4	0x7c9b	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.022170067 CEST	1.1.1.1	192.168.2.4	0xf2ec	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.029341936 CEST	1.1.1.1	192.168.2.4	0x2d23	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.029341936 CEST	1.1.1.1	192.168.2.4	0x2d23	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		54.164.74.54	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		52.73.192.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		54.146.53.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		52.86.155.245	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		54.166.67.31	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		54.175.113.230	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		52.71.153.127	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.094650030 CEST	1.1.1.1	192.168.2.4	0xc0d6	No error (0)	sync.srv.stackadapt.com		54.161.109.156	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.143564939 CEST	1.1.1.1	192.168.2.4	0x3a2	No error (0)	sonata-notifications.taptapnetworks.com		52.57.22.80	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.143564939 CEST	1.1.1.1	192.168.2.4	0x3a2	No error (0)	sonata-notifications.taptapnetworks.com		52.28.224.92	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281186104 CEST	1.1.1.1	192.168.2.4	0x943f	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.281203032 CEST	1.1.1.1	192.168.2.4	0xef49	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.281215906 CEST	1.1.1.1	192.168.2.4	0x42f5	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		18.195.237.104	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		52.58.156.106	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		52.29.94.155	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		18.194.121.192	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		18.159.201.246	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		3.121.104.202	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		52.58.176.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.281229019 CEST	1.1.1.1	192.168.2.4	0x58cb	No error (0)	btlr-eu-central-1.sharethrough.com		3.72.203.236	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.307646036 CEST	1.1.1.1	192.168.2.4	0x1acc	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.307646036 CEST	1.1.1.1	192.168.2.4	0x1acc	No error (0)	bidder.nl3.vip.prod.criteo.com		178.250.1.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.309695959 CEST	1.1.1.1	192.168.2.4	0xd06b	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.313632011 CEST	1.1.1.1	192.168.2.4	0xe833	No error (0)	pa.openx.net		34.36.214.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.769192934 CEST	1.1.1.1	192.168.2.4	0xcba7	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.769192934 CEST	1.1.1.1	192.168.2.4	0xcba7	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.769210100 CEST	1.1.1.1	192.168.2.4	0x8d70	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.835422039 CEST	1.1.1.1	192.168.2.4	0xf162	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.835422039 CEST	1.1.1.1	192.168.2.4	0xf162	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.843461990 CEST	1.1.1.1	192.168.2.4	0xcb78	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.843461990 CEST	1.1.1.1	192.168.2.4	0xcb78	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.881541014 CEST	1.1.1.1	192.168.2.4	0xa8fd	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.881541014 CEST	1.1.1.1	192.168.2.4	0xa8fd	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.881541014 CEST	1.1.1.1	192.168.2.4	0xa8fd	No error (0)	spug-lhrc.pubmnet.com		185.64.190.81	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.881565094 CEST	1.1.1.1	192.168.2.4	0xfd58	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.881565094 CEST	1.1.1.1	192.168.2.4	0xfd58	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.925664902 CEST	1.1.1.1	192.168.2.4	0xb63	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.925664902 CEST	1.1.1.1	192.168.2.4	0xb63	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.925664902 CEST	1.1.1.1	192.168.2.4	0xb63	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.940340996 CEST	1.1.1.1	192.168.2.4	0x640d	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.940340996 CEST	1.1.1.1	192.168.2.4	0x640d	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.940340996 CEST	1.1.1.1	192.168.2.4	0x640d	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:13.940360069 CEST	1.1.1.1	192.168.2.4	0x6b6e	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.940360069 CEST	1.1.1.1	192.168.2.4	0x6b6e	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.940370083 CEST	1.1.1.1	192.168.2.4	0x24f9	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:13.940370083 CEST	1.1.1.1	192.168.2.4	0x24f9	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:14.344008923 CEST	1.1.1.1	192.168.2.4	0xb628	No error (0)	dis.eu.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:14.344024897 CEST	1.1.1.1	192.168.2.4	0x45df	No error (0)	dis.eu.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:14.344024897 CEST	1.1.1.1	192.168.2.4	0x45df	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.806942940 CEST	1.1.1.1	192.168.2.4	0x75b0	No error (0)	securepubads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.806956053 CEST	1.1.1.1	192.168.2.4	0xabd6	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:27:15.811846018 CEST	1.1.1.1	192.168.2.4	0xddf1	No error (0)	s0.2mdn.net		142.250.184.230	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.865483046 CEST	1.1.1.1	192.168.2.4	0xea94	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.865483046 CEST	1.1.1.1	192.168.2.4	0xea94	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.865483046 CEST	1.1.1.1	192.168.2.4	0xea94	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.865483046 CEST	1.1.1.1	192.168.2.4	0xea94	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.122	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.197	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.108	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.171	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.75	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.170	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.875761986 CEST	1.1.1.1	192.168.2.4	0x4a2f	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.245	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.880633116 CEST	1.1.1.1	192.168.2.4	0x9e62	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.880633116 CEST	1.1.1.1	192.168.2.4	0x9e62	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.886821985 CEST	1.1.1.1	192.168.2.4	0x6133	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.886821985 CEST	1.1.1.1	192.168.2.4	0x6133	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886821985 CEST	1.1.1.1	192.168.2.4	0x6133	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.81	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886821985 CEST	1.1.1.1	192.168.2.4	0x6133	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.61	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886821985 CEST	1.1.1.1	192.168.2.4	0x6133	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.104	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.192.200.108	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.126.233	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.120.79.213	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.126.136	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.67.74.124	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.194.142.248	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886831999 CEST	1.1.1.1	192.168.2.4	0xb4fb	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.159.229.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.886841059 CEST	1.1.1.1	192.168.2.4	0x1ff9	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.886852026 CEST	1.1.1.1	192.168.2.4	0xe130	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.891875029 CEST	1.1.1.1	192.168.2.4	0x1a7f	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.891884089 CEST	1.1.1.1	192.168.2.4	0xda36	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.896604061 CEST	1.1.1.1	192.168.2.4	0xe8b1	No error (0)	us.ck-ie.com		8.2.110.70	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896604061 CEST	1.1.1.1	192.168.2.4	0xe8b1	No error (0)	us.ck-ie.com		8.2.110.114	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896604061 CEST	1.1.1.1	192.168.2.4	0xe8b1	No error (0)	us.ck-ie.com		8.2.110.97	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.213.145.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.230.152	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.69.168	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.162.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.75.221.163	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.42.149	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.72.23	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896614075 CEST	1.1.1.1	192.168.2.4	0x5dfc	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.203.106.185	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:15.896622896 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:15.896622896 CEST	1.1.1.1	192.168.2.4	0xd4ce	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.056334019 CEST	1.1.1.1	192.168.2.4	0xf49f	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.056334019 CEST	1.1.1.1	192.168.2.4	0xf49f	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.056348085 CEST	1.1.1.1	192.168.2.4	0x299	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.056369066 CEST	1.1.1.1	192.168.2.4	0x7652	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.223938942 CEST	1.1.1.1	192.168.2.4	0xaf32	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.223938942 CEST	1.1.1.1	192.168.2.4	0xaf32	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.258521080 CEST	1.1.1.1	192.168.2.4	0xb418	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.358967066 CEST	1.1.1.1	192.168.2.4	0x944e	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.165	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.167	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.183	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.166	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.181	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.182	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.169	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.180	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.184	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.168	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.185	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.384694099 CEST	1.1.1.1	192.168.2.4	0x976a	No error (0)	d5p.de17a.com		213.155.156.164	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.63	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.185.183	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.131.164	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.200.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.234	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.464833975 CEST	1.1.1.1	192.168.2.4	0xb789	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.87	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.469595909 CEST	1.1.1.1	192.168.2.4	0x9137	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.479146004 CEST	1.1.1.1	192.168.2.4	0xc719	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.570749044 CEST	1.1.1.1	192.168.2.4	0x39c3	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.610093117 CEST	1.1.1.1	192.168.2.4	0xabc2	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680627108 CEST	1.1.1.1	192.168.2.4	0x1fed	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.159.229.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.67.74.124	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.192.200.108	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.194.142.248	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		52.29.54.89	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.120.79.213	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.680669069 CEST	1.1.1.1	192.168.2.4	0xbb3	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.171.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.690186977 CEST	1.1.1.1	192.168.2.4	0x6690	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.690217972 CEST	1.1.1.1	192.168.2.4	0xa650	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.690217972 CEST	1.1.1.1	192.168.2.4	0xa650	No error (0)	rtb.adgrx.com		54.217.19.5	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.703815937 CEST	1.1.1.1	192.168.2.4	0x43b2	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.703815937 CEST	1.1.1.1	192.168.2.4	0x43b2	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.703846931 CEST	1.1.1.1	192.168.2.4	0x8b30	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
May 24, 2024 08:27:16.813294888 CEST	1.1.1.1	192.168.2.4	0xf1c6	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.813294888 CEST	1.1.1.1	192.168.2.4	0xf1c6	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.813294888 CEST	1.1.1.1	192.168.2.4	0xf1c6	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.813349962 CEST	1.1.1.1	192.168.2.4	0x529d	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 24, 2024 08:27:16.813379049 CEST	1.1.1.1	192.168.2.4	0x62c	No error (0)	cr.frontend.weborama.fr		34.111.129.221	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.813422918 CEST	1.1.1.1	192.168.2.4	0xbaad	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.813422918 CEST	1.1.1.1	192.168.2.4	0xbaad	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.813422918 CEST	1.1.1.1	192.168.2.4	0xbaad	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:16.818231106 CEST	1.1.1.1	192.168.2.4	0xce9b	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:16.818290949 CEST	1.1.1.1	192.168.2.4	0x60ce	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.036710024 CEST	1.1.1.1	192.168.2.4	0xf89b	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.036721945 CEST	1.1.1.1	192.168.2.4	0x4c93	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.036721945 CEST	1.1.1.1	192.168.2.4	0x4c93	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.036721945 CEST	1.1.1.1	192.168.2.4	0x4c93	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.036721945 CEST	1.1.1.1	192.168.2.4	0x4c93	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.036721945 CEST	1.1.1.1	192.168.2.4	0x4c93	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.079829931 CEST	1.1.1.1	192.168.2.4	0x411a	No error (0)	sync.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.079829931 CEST	1.1.1.1	192.168.2.4	0x411a	No error (0)	sync.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.079829931 CEST	1.1.1.1	192.168.2.4	0x411a	No error (0)	sync.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.079829931 CEST	1.1.1.1	192.168.2.4	0x411a	No error (0)	sync.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.213032961 CEST	1.1.1.1	192.168.2.4	0x831d	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.213032961 CEST	1.1.1.1	192.168.2.4	0x831d	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.213042021 CEST	1.1.1.1	192.168.2.4	0x9210	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.213042021 CEST	1.1.1.1	192.168.2.4	0x9210	No error (0)	image8-v2.pubmnet.com	imagesync-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.213042021 CEST	1.1.1.1	192.168.2.4	0x9210	No error (0)	imagesync-lhrc.pubmnet.com		185.64.190.79	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.213047028 CEST	1.1.1.1	192.168.2.4	0x6b5f	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.213047028 CEST	1.1.1.1	192.168.2.4	0x6b5f	No error (0)	image8-v2.pubmnet.com	imagesync-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.216511011 CEST	1.1.1.1	192.168.2.4	0xd42f	No error (0)	ssum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.216511011 CEST	1.1.1.1	192.168.2.4	0xd42f	No error (0)	ssum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.216521978 CEST	1.1.1.1	192.168.2.4	0x5e2	No error (0)	ssum.casalemedia.com			65	IN (0x0001)	false
May 24, 2024 08:27:17.452342033 CEST	1.1.1.1	192.168.2.4	0x6789	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.452342033 CEST	1.1.1.1	192.168.2.4	0x6789	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:17.453197956 CEST	1.1.1.1	192.168.2.4	0x7284	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
May 24, 2024 08:27:17.894015074 CEST	1.1.1.1	192.168.2.4	0x924c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.894015074 CEST	1.1.1.1	192.168.2.4	0x924c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:17.894025087 CEST	1.1.1.1	192.168.2.4	0x9e34	No error (0)	contextual.media.net		95.101.148.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.082439899 CEST	1.1.1.1	192.168.2.4	0x4f91	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.082452059 CEST	1.1.1.1	192.168.2.4	0xab02	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.181529045 CEST	1.1.1.1	192.168.2.4	0x56f2	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.181529045 CEST	1.1.1.1	192.168.2.4	0x56f2	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.181529045 CEST	1.1.1.1	192.168.2.4	0x56f2	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.181549072 CEST	1.1.1.1	192.168.2.4	0x9089	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.181549072 CEST	1.1.1.1	192.168.2.4	0x9089	No error (0)	owv2.pubmnet.com	ow-amsc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.181574106 CEST	1.1.1.1	192.168.2.4	0xacbc	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.181574106 CEST	1.1.1.1	192.168.2.4	0xacbc	No error (0)	owv2.pubmnet.com	ow-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.181574106 CEST	1.1.1.1	192.168.2.4	0xacbc	No error (0)	ow-lhrc.pubmnet.com		185.64.190.84	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.241513968 CEST	1.1.1.1	192.168.2.4	0x5f6c	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.241513968 CEST	1.1.1.1	192.168.2.4	0x5f6c	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.241513968 CEST	1.1.1.1	192.168.2.4	0x5f6c	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.241527081 CEST	1.1.1.1	192.168.2.4	0x4ad	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.241527081 CEST	1.1.1.1	192.168.2.4	0x4ad	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.241527081 CEST	1.1.1.1	192.168.2.4	0x4ad	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.330753088 CEST	1.1.1.1	192.168.2.4	0xbc29	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.337193966 CEST	1.1.1.1	192.168.2.4	0x140f	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.438700914 CEST	1.1.1.1	192.168.2.4	0xdb1d	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.438700914 CEST	1.1.1.1	192.168.2.4	0xdb1d	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.438700914 CEST	1.1.1.1	192.168.2.4	0xdb1d	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.438713074 CEST	1.1.1.1	192.168.2.4	0x8a93	No error (0)	sync.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.438713074 CEST	1.1.1.1	192.168.2.4	0x8a93	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.438713074 CEST	1.1.1.1	192.168.2.4	0x8a93	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.438713074 CEST	1.1.1.1	192.168.2.4	0x8a93	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.438720942 CEST	1.1.1.1	192.168.2.4	0x4a27	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.438720942 CEST	1.1.1.1	192.168.2.4	0x4a27	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.438728094 CEST	1.1.1.1	192.168.2.4	0x50d4	No error (0)	sync.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.94.242.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.95.172.216	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.94.242.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.95.171.141	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.94.161.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.95.171.142	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.94.242.204	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.94.161.190	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.95.171.140	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.94.240.143	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.713700056 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	green.erne.co		141.95.171.139	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.778635025 CEST	1.1.1.1	192.168.2.4	0x3162	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.778635025 CEST	1.1.1.1	192.168.2.4	0x3162	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.988157034 CEST	1.1.1.1	192.168.2.4	0x7f35	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.988157034 CEST	1.1.1.1	192.168.2.4	0x7f35	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.988157034 CEST	1.1.1.1	192.168.2.4	0x7f35	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.988168001 CEST	1.1.1.1	192.168.2.4	0xf26e	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.988168001 CEST	1.1.1.1	192.168.2.4	0xf26e	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.991920948 CEST	1.1.1.1	192.168.2.4	0x1c3f	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991930008 CEST	1.1.1.1	192.168.2.4	0x7445	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991945982 CEST	1.1.1.1	192.168.2.4	0xbfd7	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:18.991945982 CEST	1.1.1.1	192.168.2.4	0xbfd7	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:18.991945982 CEST	1.1.1.1	192.168.2.4	0xbfd7	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.107161999 CEST	1.1.1.1	192.168.2.4	0x7157	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.112593889 CEST	1.1.1.1	192.168.2.4	0x8c8e	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.112606049 CEST	1.1.1.1	192.168.2.4	0x55e8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.117355108 CEST	1.1.1.1	192.168.2.4	0x7867	No error (0)	sync.aniview.com	sync-sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.117355108 CEST	1.1.1.1	192.168.2.4	0x7867	No error (0)	sync-sc.aniview.com		96.46.186.182	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.117367029 CEST	1.1.1.1	192.168.2.4	0xe8df	No error (0)	sync.aniview.com	sync-sc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.123913050 CEST	1.1.1.1	192.168.2.4	0x2439	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.123924971 CEST	1.1.1.1	192.168.2.4	0xc2d1	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.133347034 CEST	1.1.1.1	192.168.2.4	0xcbf8	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		18.159.201.246	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		18.196.140.29	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		52.58.176.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		3.121.104.202	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		52.57.138.201	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		18.185.176.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		35.157.60.248	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133357048 CEST	1.1.1.1	192.168.2.4	0xc12e	No error (0)	btlr-eu-central-1.sharethrough.com		3.75.47.4	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.133364916 CEST	1.1.1.1	192.168.2.4	0xb10	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.133373022 CEST	1.1.1.1	192.168.2.4	0x7ea8	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.75	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.245	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.108	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.171	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.122	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.170	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		89.149.192.197	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134174109 CEST	1.1.1.1	192.168.2.4	0xefcb	No error (0)	ssbsync-euw1.smartadserver.com		81.17.55.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.134182930 CEST	1.1.1.1	192.168.2.4	0xf318	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.138066053 CEST	1.1.1.1	192.168.2.4	0x87a3	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.138077021 CEST	1.1.1.1	192.168.2.4	0x5d65	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.138077021 CEST	1.1.1.1	192.168.2.4	0x5d65	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.139224052 CEST	1.1.1.1	192.168.2.4	0x2904	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.139234066 CEST	1.1.1.1	192.168.2.4	0xd444	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:27:19.139251947 CEST	1.1.1.1	192.168.2.4	0x885d	No error (0)	securepubads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.213.145.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.202.254.222	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.213.68.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.246.141.221	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.162.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.250.172	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.75.221.163	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142885923 CEST	1.1.1.1	192.168.2.4	0xfd04	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.203.106.185	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.142896891 CEST	1.1.1.1	192.168.2.4	0x37c1	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.142896891 CEST	1.1.1.1	192.168.2.4	0x37c1	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.197607994 CEST	1.1.1.1	192.168.2.4	0x8901	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.197607994 CEST	1.1.1.1	192.168.2.4	0x8901	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.197623014 CEST	1.1.1.1	192.168.2.4	0x5e73	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.197623014 CEST	1.1.1.1	192.168.2.4	0x5e73	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.197623014 CEST	1.1.1.1	192.168.2.4	0x5e73	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.207237005 CEST	1.1.1.1	192.168.2.4	0x2a1e	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.207237005 CEST	1.1.1.1	192.168.2.4	0x2a1e	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.207237005 CEST	1.1.1.1	192.168.2.4	0x2a1e	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.213556051 CEST	1.1.1.1	192.168.2.4	0x2175	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 24, 2024 08:27:19.218410015 CEST	1.1.1.1	192.168.2.4	0xd31e	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.218420029 CEST	1.1.1.1	192.168.2.4	0x5ddc	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.218420029 CEST	1.1.1.1	192.168.2.4	0x5ddc	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.289494991 CEST	1.1.1.1	192.168.2.4	0xb7a6	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.299046040 CEST	1.1.1.1	192.168.2.4	0x46	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.299046040 CEST	1.1.1.1	192.168.2.4	0x46	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.299046040 CEST	1.1.1.1	192.168.2.4	0x46	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.303832054 CEST	1.1.1.1	192.168.2.4	0xd1e4	No error (0)	sync.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.303832054 CEST	1.1.1.1	192.168.2.4	0xd1e4	No error (0)	sync.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.303832054 CEST	1.1.1.1	192.168.2.4	0xd1e4	No error (0)	sync.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.303832054 CEST	1.1.1.1	192.168.2.4	0xd1e4	No error (0)	sync.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.308595896 CEST	1.1.1.1	192.168.2.4	0x6f4	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.308595896 CEST	1.1.1.1	192.168.2.4	0x6f4	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.308595896 CEST	1.1.1.1	192.168.2.4	0x6f4	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.308604956 CEST	1.1.1.1	192.168.2.4	0x27c8	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.308604956 CEST	1.1.1.1	192.168.2.4	0x27c8	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.432034969 CEST	1.1.1.1	192.168.2.4	0xd06b	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.432034969 CEST	1.1.1.1	192.168.2.4	0xd06b	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.432034969 CEST	1.1.1.1	192.168.2.4	0xd06b	No error (0)	spug-lhrc.pubmnet.com		185.64.190.81	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.432045937 CEST	1.1.1.1	192.168.2.4	0xc143	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.432045937 CEST	1.1.1.1	192.168.2.4	0xc143	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.739352942 CEST	1.1.1.1	192.168.2.4	0x9e13	No error (0)	pixel-eu.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:19.821067095 CEST	1.1.1.1	192.168.2.4	0xb77b	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:19.821078062 CEST	1.1.1.1	192.168.2.4	0x6547	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:20.280163050 CEST	1.1.1.1	192.168.2.4	0x93d	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:20.280180931 CEST	1.1.1.1	192.168.2.4	0xa7b7	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:20.280180931 CEST	1.1.1.1	192.168.2.4	0xa7b7	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.280206919 CEST	1.1.1.1	192.168.2.4	0x6266	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.535691977 CEST	1.1.1.1	192.168.2.4	0xc64c	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:20.535691977 CEST	1.1.1.1	192.168.2.4	0xc64c	No error (0)	image8-v2.pubmnet.com	imagesync-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:20.535708904 CEST	1.1.1.1	192.168.2.4	0x57f9	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:20.535708904 CEST	1.1.1.1	192.168.2.4	0x57f9	No error (0)	image8-v2.pubmnet.com	imagesync-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:20.535708904 CEST	1.1.1.1	192.168.2.4	0x57f9	No error (0)	imagesync-lhrc.pubmnet.com		185.64.190.79	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		54.217.112.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		99.80.73.249	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		108.129.15.138	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		18.200.82.199	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:20.843554020 CEST	1.1.1.1	192.168.2.4	0xe4c3	No error (0)	rtb.gumgum.com		54.76.86.242	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150209904 CEST	1.1.1.1	192.168.2.4	0x5179	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.150365114 CEST	1.1.1.1	192.168.2.4	0x8cd5	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.269010067 CEST	1.1.1.1	192.168.2.4	0xa6d1	No error (0)	pb-am.a-mo.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.327450991 CEST	1.1.1.1	192.168.2.4	0x73c	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.327450991 CEST	1.1.1.1	192.168.2.4	0x73c	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.327450991 CEST	1.1.1.1	192.168.2.4	0x73c	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.327450991 CEST	1.1.1.1	192.168.2.4	0x73c	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.327450991 CEST	1.1.1.1	192.168.2.4	0x73c	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.329669952 CEST	1.1.1.1	192.168.2.4	0x18cf	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.329669952 CEST	1.1.1.1	192.168.2.4	0x18cf	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.329669952 CEST	1.1.1.1	192.168.2.4	0x18cf	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.504271984 CEST	1.1.1.1	192.168.2.4	0x7735	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.504271984 CEST	1.1.1.1	192.168.2.4	0x7735	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.504271984 CEST	1.1.1.1	192.168.2.4	0x7735	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.504271984 CEST	1.1.1.1	192.168.2.4	0x7735	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.504271984 CEST	1.1.1.1	192.168.2.4	0x7735	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.504286051 CEST	1.1.1.1	192.168.2.4	0x7ef2	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.504286051 CEST	1.1.1.1	192.168.2.4	0x7ef2	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.504286051 CEST	1.1.1.1	192.168.2.4	0x7ef2	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.706161022 CEST	1.1.1.1	192.168.2.4	0xf462	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.706161022 CEST	1.1.1.1	192.168.2.4	0xf462	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:21.779381990 CEST	1.1.1.1	192.168.2.4	0xb565	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:21.779393911 CEST	1.1.1.1	192.168.2.4	0x41e8	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:22.097249985 CEST	1.1.1.1	192.168.2.4	0x1eb7	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:22.482189894 CEST	1.1.1.1	192.168.2.4	0x2518	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:22.482203007 CEST	1.1.1.1	192.168.2.4	0x4088	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:22.482203007 CEST	1.1.1.1	192.168.2.4	0x4088	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069390059 CEST	1.1.1.1	192.168.2.4	0xd9eb	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		63.32.35.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		52.48.62.133	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		99.81.59.238	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		34.253.46.26	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		108.128.36.135	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		54.246.87.181	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		54.73.231.133	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:23.069400072 CEST	1.1.1.1	192.168.2.4	0x5d63	No error (0)	euw-ice.360yield.com		54.171.20.81	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:24.163400888 CEST	1.1.1.1	192.168.2.4	0x1515	No error (0)	ps.eyeota.net		18.184.216.10	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:24.955718994 CEST	1.1.1.1	192.168.2.4	0xc49	No error (0)	ps.eyeota.net		3.125.70.222	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:25.178777933 CEST	1.1.1.1	192.168.2.4	0xf4f4	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:25.178777933 CEST	1.1.1.1	192.168.2.4	0xf4f4	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:25.178813934 CEST	1.1.1.1	192.168.2.4	0xf429	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:25.178813934 CEST	1.1.1.1	192.168.2.4	0xf429	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:25.178813934 CEST	1.1.1.1	192.168.2.4	0xf429	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.106168985 CEST	1.1.1.1	192.168.2.4	0x8d8	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:26.106168985 CEST	1.1.1.1	192.168.2.4	0x8d8	No error (0)	cdn.w55c.net		52.59.104.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.106168985 CEST	1.1.1.1	192.168.2.4	0x8d8	No error (0)	cdn.w55c.net		3.78.151.12	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.106168985 CEST	1.1.1.1	192.168.2.4	0x8d8	No error (0)	cdn.w55c.net		3.67.59.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.106168985 CEST	1.1.1.1	192.168.2.4	0x8d8	No error (0)	cdn.w55c.net		18.194.143.242	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.106168985 CEST	1.1.1.1	192.168.2.4	0x8d8	No error (0)	cdn.w55c.net		3.79.77.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.106168985 CEST	1.1.1.1	192.168.2.4	0x8d8	No error (0)	cdn.w55c.net		52.59.78.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:26.106205940 CEST	1.1.1.1	192.168.2.4	0xed87	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:27.364880085 CEST	1.1.1.1	192.168.2.4	0x8df9	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.374424934 CEST	1.1.1.1	192.168.2.4	0x29	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:27.374440908 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:27.374440908 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	cdn.w55c.net		18.194.143.242	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.374440908 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	cdn.w55c.net		52.59.104.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.374440908 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	cdn.w55c.net		3.78.151.12	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.374440908 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	cdn.w55c.net		3.67.59.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.374440908 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	cdn.w55c.net		3.79.77.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:27.374440908 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	cdn.w55c.net		52.59.78.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.202.254.222	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.203.106.185	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.72.23	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.75.221.163	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.246.141.221	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.42.149	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.213.145.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104437113 CEST	1.1.1.1	192.168.2.4	0x3b88	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.69.168	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:29.104475975 CEST	1.1.1.1	192.168.2.4	0x2aca	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:29.104475975 CEST	1.1.1.1	192.168.2.4	0x2aca	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.009399891 CEST	1.1.1.1	192.168.2.4	0x787	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.009399891 CEST	1.1.1.1	192.168.2.4	0x787	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.009438038 CEST	1.1.1.1	192.168.2.4	0xba96	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.009438038 CEST	1.1.1.1	192.168.2.4	0xba96	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.009438038 CEST	1.1.1.1	192.168.2.4	0xba96	No error (0)	bidder.nl3.vip.prod.criteo.com		178.250.1.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.014183998 CEST	1.1.1.1	192.168.2.4	0x54ba	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.014183998 CEST	1.1.1.1	192.168.2.4	0x54ba	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.014183998 CEST	1.1.1.1	192.168.2.4	0x54ba	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.014183998 CEST	1.1.1.1	192.168.2.4	0x54ba	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.014183998 CEST	1.1.1.1	192.168.2.4	0x54ba	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.014183998 CEST	1.1.1.1	192.168.2.4	0x54ba	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.023767948 CEST	1.1.1.1	192.168.2.4	0xbf44	No error (0)	targeting.unrulymedia.com	tag.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.023767948 CEST	1.1.1.1	192.168.2.4	0xbf44	No error (0)	tag.1rx.io		46.228.174.115	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.023798943 CEST	1.1.1.1	192.168.2.4	0x7fc	No error (0)	targeting.unrulymedia.com	tag.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.028543949 CEST	1.1.1.1	192.168.2.4	0x84e4	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.782963037 CEST	1.1.1.1	192.168.2.4	0x8659	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915806055 CEST	1.1.1.1	192.168.2.4	0xc3cd	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915806055 CEST	1.1.1.1	192.168.2.4	0xc3cd	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915806055 CEST	1.1.1.1	192.168.2.4	0xc3cd	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915806055 CEST	1.1.1.1	192.168.2.4	0xc3cd	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915806055 CEST	1.1.1.1	192.168.2.4	0xc3cd	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915806055 CEST	1.1.1.1	192.168.2.4	0xc3cd	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915868998 CEST	1.1.1.1	192.168.2.4	0x7403	No error (0)	s2s.aniview.com	s2s-sc-main-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.915898085 CEST	1.1.1.1	192.168.2.4	0xf4e5	No error (0)	s2s.aniview.com	s2s-sc-main-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.915898085 CEST	1.1.1.1	192.168.2.4	0xf4e5	No error (0)	s2s-sc-main-was.aniview.com		172.240.45.70	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.915925026 CEST	1.1.1.1	192.168.2.4	0x506d	No error (0)	rtb-useast.rtbserve.io	xapads.rtb-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:30.915925026 CEST	1.1.1.1	192.168.2.4	0x506d	No error (0)	xapads.rtb-useast.ak-is2.net		198.134.116.50	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:30.917495012 CEST	1.1.1.1	192.168.2.4	0x23ad	No error (0)	rtb-useast.rtbserve.io	xapads.rtb-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.267433882 CEST	1.1.1.1	192.168.2.4	0x937b	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.267433882 CEST	1.1.1.1	192.168.2.4	0x937b	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.267433882 CEST	1.1.1.1	192.168.2.4	0x937b	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.267504930 CEST	1.1.1.1	192.168.2.4	0xa21b	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.267504930 CEST	1.1.1.1	192.168.2.4	0xa21b	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.267504930 CEST	1.1.1.1	192.168.2.4	0xa21b	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.267504930 CEST	1.1.1.1	192.168.2.4	0xa21b	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.138.8.164	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.267534018 CEST	1.1.1.1	192.168.2.4	0x1532	No error (0)	config.aps.amazon-adsystem.com		18.244.28.23	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.267534018 CEST	1.1.1.1	192.168.2.4	0x1532	No error (0)	config.aps.amazon-adsystem.com		18.244.28.128	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.267534018 CEST	1.1.1.1	192.168.2.4	0x1532	No error (0)	config.aps.amazon-adsystem.com		18.244.28.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.267534018 CEST	1.1.1.1	192.168.2.4	0x1532	No error (0)	config.aps.amazon-adsystem.com		18.244.28.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.294657946 CEST	1.1.1.1	192.168.2.4	0xb8bf	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.294657946 CEST	1.1.1.1	192.168.2.4	0xb8bf	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.294657946 CEST	1.1.1.1	192.168.2.4	0xb8bf	No error (0)	bidder.nl3.vip.prod.criteo.com		178.250.1.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:31.294686079 CEST	1.1.1.1	192.168.2.4	0x6e8b	No error (0)	grid.bidswitch.net	bidder.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:31.294686079 CEST	1.1.1.1	192.168.2.4	0x6e8b	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.455358028 CEST	1.1.1.1	192.168.2.4	0x933c	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.455368996 CEST	1.1.1.1	192.168.2.4	0x5eb1	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.455379009 CEST	1.1.1.1	192.168.2.4	0xd0e8	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.455409050 CEST	1.1.1.1	192.168.2.4	0x11d5	No error (0)	cdn.hadronid.net		104.22.52.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.455409050 CEST	1.1.1.1	192.168.2.4	0x11d5	No error (0)	cdn.hadronid.net		172.67.36.110	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.455409050 CEST	1.1.1.1	192.168.2.4	0x11d5	No error (0)	cdn.hadronid.net		104.22.53.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.455418110 CEST	1.1.1.1	192.168.2.4	0xd5c9	No error (0)	cdn.hadronid.net			65	IN (0x0001)	false
May 24, 2024 08:27:32.455426931 CEST	1.1.1.1	192.168.2.4	0xa2b6	No error (0)	cdn.browsiprod.com		18.66.102.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.455426931 CEST	1.1.1.1	192.168.2.4	0xa2b6	No error (0)	cdn.browsiprod.com		18.66.102.48	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.455426931 CEST	1.1.1.1	192.168.2.4	0xa2b6	No error (0)	cdn.browsiprod.com		18.66.102.78	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.455426931 CEST	1.1.1.1	192.168.2.4	0xa2b6	No error (0)	cdn.browsiprod.com		18.66.102.32	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.460082054 CEST	1.1.1.1	192.168.2.4	0xdb19	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.648192883 CEST	1.1.1.1	192.168.2.4	0x6ed5	No error (0)	rtb-useast.rtbserve.io	xapads.rtb-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.648192883 CEST	1.1.1.1	192.168.2.4	0x6ed5	No error (0)	xapads.rtb-useast.ak-is2.net		198.134.116.50	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.656653881 CEST	1.1.1.1	192.168.2.4	0x911b	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.656653881 CEST	1.1.1.1	192.168.2.4	0x911b	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.6.136	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.690584898 CEST	1.1.1.1	192.168.2.4	0xbf9c	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690584898 CEST	1.1.1.1	192.168.2.4	0xbf9c	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690584898 CEST	1.1.1.1	192.168.2.4	0xbf9c	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690604925 CEST	1.1.1.1	192.168.2.4	0xedc4	No error (0)	targeting.unrulymedia.com	tag.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690618038 CEST	1.1.1.1	192.168.2.4	0xfe62	No error (0)	targeting.unrulymedia.com	tag.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690618038 CEST	1.1.1.1	192.168.2.4	0xfe62	No error (0)	tag.1rx.io		46.228.174.115	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.690630913 CEST	1.1.1.1	192.168.2.4	0x8cb6	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690643072 CEST	1.1.1.1	192.168.2.4	0xfa24	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690643072 CEST	1.1.1.1	192.168.2.4	0xfa24	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690643072 CEST	1.1.1.1	192.168.2.4	0xfa24	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:32.690643072 CEST	1.1.1.1	192.168.2.4	0xfa24	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.239.68.199	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:32.690654993 CEST	1.1.1.1	192.168.2.4	0x18a5	No error (0)	rtb-useast.rtbserve.io	xapads.rtb-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:33.042459965 CEST	1.1.1.1	192.168.2.4	0x4487	No error (0)	contextual.media.net		88.221.124.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.309458971 CEST	1.1.1.1	192.168.2.4	0xb133	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.799837112 CEST	1.1.1.1	192.168.2.4	0x3398	No error (0)	events.browsiprod.com		35.166.89.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.799837112 CEST	1.1.1.1	192.168.2.4	0x3398	No error (0)	events.browsiprod.com		54.218.18.184	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.799837112 CEST	1.1.1.1	192.168.2.4	0x3398	No error (0)	events.browsiprod.com		44.228.230.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.799837112 CEST	1.1.1.1	192.168.2.4	0x3398	No error (0)	events.browsiprod.com		52.26.112.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.799837112 CEST	1.1.1.1	192.168.2.4	0x3398	No error (0)	events.browsiprod.com		44.238.197.96	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.799837112 CEST	1.1.1.1	192.168.2.4	0x3398	No error (0)	events.browsiprod.com		44.237.6.87	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.919445992 CEST	1.1.1.1	192.168.2.4	0x4b04	No error (0)	yield-manager.browsiprod.com		13.32.27.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.919445992 CEST	1.1.1.1	192.168.2.4	0x4b04	No error (0)	yield-manager.browsiprod.com		13.32.27.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.919445992 CEST	1.1.1.1	192.168.2.4	0x4b04	No error (0)	yield-manager.browsiprod.com		13.32.27.30	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:33.919445992 CEST	1.1.1.1	192.168.2.4	0x4b04	No error (0)	yield-manager.browsiprod.com		13.32.27.31	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.027004957 CEST	1.1.1.1	192.168.2.4	0xf9d4	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.197755098 CEST	1.1.1.1	192.168.2.4	0x3dd7	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.197755098 CEST	1.1.1.1	192.168.2.4	0x3dd7	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.197755098 CEST	1.1.1.1	192.168.2.4	0x3dd7	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.197.7.178	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.121.157.160	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		52.29.4.131	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.158.184.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.69.205.38	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.197791100 CEST	1.1.1.1	192.168.2.4	0xf858	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.123.208.101	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.253998995 CEST	1.1.1.1	192.168.2.4	0xb3cc	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.254030943 CEST	1.1.1.1	192.168.2.4	0xeabd	No error (0)	hbx.media.net		92.123.16.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.254059076 CEST	1.1.1.1	192.168.2.4	0xa13f	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.254059076 CEST	1.1.1.1	192.168.2.4	0xa13f	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.294055939 CEST	1.1.1.1	192.168.2.4	0x8eb4	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.298892975 CEST	1.1.1.1	192.168.2.4	0x3e8c	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.304595947 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.304595947 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.304595947 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.304595947 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	nydc1.outbrain.org		70.42.32.159	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.304625988 CEST	1.1.1.1	192.168.2.4	0x9c2a	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.304625988 CEST	1.1.1.1	192.168.2.4	0x9c2a	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.304625988 CEST	1.1.1.1	192.168.2.4	0x9c2a	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.801110983 CEST	1.1.1.1	192.168.2.4	0x3e21	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.801146984 CEST	1.1.1.1	192.168.2.4	0xe4e8	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.803083897 CEST	1.1.1.1	192.168.2.4	0xb5cc	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.805811882 CEST	1.1.1.1	192.168.2.4	0x50c1	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:34.902220011 CEST	1.1.1.1	192.168.2.4	0xb260	No error (0)	trace-eu.mediago.io		35.214.168.80	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.907097101 CEST	1.1.1.1	192.168.2.4	0xb4a6	No error (0)	pubads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:34.907125950 CEST	1.1.1.1	192.168.2.4	0xeb9a	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:27:35.157026052 CEST	1.1.1.1	192.168.2.4	0xf45e	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.210161924 CEST	1.1.1.1	192.168.2.4	0xf432	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.121.157.160	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.69.205.38	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.123.208.101	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.197.7.178	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.158.184.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.241194963 CEST	1.1.1.1	192.168.2.4	0x412e	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		52.29.4.131	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.241231918 CEST	1.1.1.1	192.168.2.4	0x773a	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.241231918 CEST	1.1.1.1	192.168.2.4	0x773a	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.241231918 CEST	1.1.1.1	192.168.2.4	0x773a	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.295289040 CEST	1.1.1.1	192.168.2.4	0x17f4	No error (0)	cs.media.net		92.123.16.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:35.542193890 CEST	1.1.1.1	192.168.2.4	0xcbea	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.542218924 CEST	1.1.1.1	192.168.2.4	0x67f	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.542232990 CEST	1.1.1.1	192.168.2.4	0x77a4	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.542246103 CEST	1.1.1.1	192.168.2.4	0x6eb7	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.745419979 CEST	1.1.1.1	192.168.2.4	0xa752	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:35.751255035 CEST	1.1.1.1	192.168.2.4	0x9d09	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.549732924 CEST	1.1.1.1	192.168.2.4	0x9df6	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.554626942 CEST	1.1.1.1	192.168.2.4	0x12d9	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.595670938 CEST	1.1.1.1	192.168.2.4	0x7abe	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.595694065 CEST	1.1.1.1	192.168.2.4	0xdaa3	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		34.246.206.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		52.48.246.250	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		34.249.65.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		34.255.48.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		34.251.183.115	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		52.210.242.228	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		34.241.112.102	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.610284090 CEST	1.1.1.1	192.168.2.4	0xccf8	No error (0)	match.prod.bidr.io		34.254.84.230	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:36.624182940 CEST	1.1.1.1	192.168.2.4	0x9f54	No error (0)	ids.ad.gt	ids.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.624660969 CEST	1.1.1.1	192.168.2.4	0xe425	No error (0)	ids.ad.gt	ids.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.815613985 CEST	1.1.1.1	192.168.2.4	0x2fb3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:36.815613985 CEST	1.1.1.1	192.168.2.4	0x2fb3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.044033051 CEST	1.1.1.1	192.168.2.4	0x9d6f	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.044044018 CEST	1.1.1.1	192.168.2.4	0xb832	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.087340117 CEST	1.1.1.1	192.168.2.4	0x56bc	No error (0)	pubads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.092092991 CEST	1.1.1.1	192.168.2.4	0xfee2	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:27:37.226216078 CEST	1.1.1.1	192.168.2.4	0x75e5	No error (0)	cs.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.243665934 CEST	1.1.1.1	192.168.2.4	0x98a9	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.243675947 CEST	1.1.1.1	192.168.2.4	0xfcf5	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.243675947 CEST	1.1.1.1	192.168.2.4	0xfcf5	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.461169004 CEST	1.1.1.1	192.168.2.4	0x6e5	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.461169004 CEST	1.1.1.1	192.168.2.4	0x6e5	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.461185932 CEST	1.1.1.1	192.168.2.4	0x1028	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.461185932 CEST	1.1.1.1	192.168.2.4	0x1028	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.461185932 CEST	1.1.1.1	192.168.2.4	0x1028	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.521611929 CEST	1.1.1.1	192.168.2.4	0x1691	No error (0)	facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.548361063 CEST	1.1.1.1	192.168.2.4	0x9581	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.553122997 CEST	1.1.1.1	192.168.2.4	0xface	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.669152975 CEST	1.1.1.1	192.168.2.4	0xeecd	No error (0)	rtb2-useast.xaprio.net	xaprio.rtb-as-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:37.669152975 CEST	1.1.1.1	192.168.2.4	0xeecd	No error (0)	xaprio.rtb-as-useast.ak-is2.net		174.137.133.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:37.672457933 CEST	1.1.1.1	192.168.2.4	0x2517	No error (0)	rtb2-useast.xaprio.net	xaprio.rtb-as-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:38.300748110 CEST	1.1.1.1	192.168.2.4	0x7cb6	No error (0)	proton.ad.gt	proton.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:38.300760984 CEST	1.1.1.1	192.168.2.4	0x2ff3	No error (0)	proton.ad.gt	proton.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:38.305495977 CEST	1.1.1.1	192.168.2.4	0xd90a	No error (0)	inv-nets-nyc-s1.admixer.net		216.219.92.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.543250084 CEST	1.1.1.1	192.168.2.4	0xcaa6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:38.543250084 CEST	1.1.1.1	192.168.2.4	0xcaa6	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.543261051 CEST	1.1.1.1	192.168.2.4	0x84de	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		54.163.32.160	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		52.86.37.184	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		52.72.76.247	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		52.73.82.193	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		54.144.2.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		54.157.238.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:38.982770920 CEST	1.1.1.1	192.168.2.4	0x42e5	No error (0)	sync.ipredictive.com		54.157.60.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.285079956 CEST	1.1.1.1	192.168.2.4	0xd346	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.293360949 CEST	1.1.1.1	192.168.2.4	0x892a	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.461677074 CEST	1.1.1.1	192.168.2.4	0xa580	No error (0)	ids.ad.gt	ids.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.466604948 CEST	1.1.1.1	192.168.2.4	0xd2b8	No error (0)	ids.ad.gt	ids.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.476362944 CEST	1.1.1.1	192.168.2.4	0xd3c7	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.476371050 CEST	1.1.1.1	192.168.2.4	0x800d	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.496153116 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.523885012 CEST	1.1.1.1	192.168.2.4	0x95df	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.523895979 CEST	1.1.1.1	192.168.2.4	0x91db	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.523904085 CEST	1.1.1.1	192.168.2.4	0x7af3	No error (0)	rtb2-useast.xaprio.net	xaprio.rtb-as-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.523904085 CEST	1.1.1.1	192.168.2.4	0x7af3	No error (0)	xaprio.rtb-as-useast.ak-is2.net		174.137.133.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.523911953 CEST	1.1.1.1	192.168.2.4	0x112d	No error (0)	rtb2-useast.xaprio.net	xaprio.rtb-as-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.584588051 CEST	1.1.1.1	192.168.2.4	0xe0f4	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:27:39.590984106 CEST	1.1.1.1	192.168.2.4	0xf418	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.668165922 CEST	1.1.1.1	192.168.2.4	0xc8d5	No error (0)	inv-nets-nyc-s1.admixer.net		216.219.92.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.912625074 CEST	1.1.1.1	192.168.2.4	0x1349	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.916323900 CEST	1.1.1.1	192.168.2.4	0xa63f	No error (0)	video.xx.fbcdn.net		157.240.253.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:39.916354895 CEST	1.1.1.1	192.168.2.4	0x5d88	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.916382074 CEST	1.1.1.1	192.168.2.4	0x8731	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:39.916382074 CEST	1.1.1.1	192.168.2.4	0x8731	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:45.113490105 CEST	1.1.1.1	192.168.2.4	0x89ce	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:45.123027086 CEST	1.1.1.1	192.168.2.4	0xcd3	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:45.123027086 CEST	1.1.1.1	192.168.2.4	0xcd3	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:46.438280106 CEST	1.1.1.1	192.168.2.4	0xb6b2	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
May 24, 2024 08:27:46.439599991 CEST	1.1.1.1	192.168.2.4	0x2054	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:47.288116932 CEST	1.1.1.1	192.168.2.4	0x504b	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:47.303649902 CEST	1.1.1.1	192.168.2.4	0xe62	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.017961979 CEST	1.1.1.1	192.168.2.4	0x15f1	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:49.760178089 CEST	1.1.1.1	192.168.2.4	0x517a	No error (0)	external-hou1-1.xx.fbcdn.net	scontent-hou1-1.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:49.760178089 CEST	1.1.1.1	192.168.2.4	0x517a	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
May 24, 2024 08:27:49.771364927 CEST	1.1.1.1	192.168.2.4	0xc09c	No error (0)	external-hou1-1.xx.fbcdn.net	scontent-hou1-1.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:49.771364927 CEST	1.1.1.1	192.168.2.4	0xc09c	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:53.665137053 CEST	1.1.1.1	192.168.2.4	0x5299	No error (0)	external-hou1-1.xx.fbcdn.net	scontent-hou1-1.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:53.665137053 CEST	1.1.1.1	192.168.2.4	0x5299	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:53.665148973 CEST	1.1.1.1	192.168.2.4	0x24e6	No error (0)	external-hou1-1.xx.fbcdn.net	scontent-hou1-1.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:53.665148973 CEST	1.1.1.1	192.168.2.4	0x24e6	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
May 24, 2024 08:27:55.394277096 CEST	1.1.1.1	192.168.2.4	0x4636	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:55.394293070 CEST	1.1.1.1	192.168.2.4	0x509f	No error (0)	analytics.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.399040937 CEST	1.1.1.1	192.168.2.4	0xbfa7	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:55.399040937 CEST	1.1.1.1	192.168.2.4	0xbfa7	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:55.399040937 CEST	1.1.1.1	192.168.2.4	0xbfa7	No error (0)	track-sc-was.aniview.com		96.46.186.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.399055958 CEST	1.1.1.1	192.168.2.4	0x59ff	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:55.399055958 CEST	1.1.1.1	192.168.2.4	0x59ff	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:55.484210968 CEST	1.1.1.1	192.168.2.4	0x210f	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.488995075 CEST	1.1.1.1	192.168.2.4	0x86f0	No error (0)	bcp.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:55.674046040 CEST	1.1.1.1	192.168.2.4	0xb515	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:57.130953074 CEST	1.1.1.1	192.168.2.4	0x66c1	No error (0)	dmp.truoptik.com		104.16.192.58	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:57.130953074 CEST	1.1.1.1	192.168.2.4	0x66c1	No error (0)	dmp.truoptik.com		104.17.111.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:57.130953074 CEST	1.1.1.1	192.168.2.4	0x66c1	No error (0)	dmp.truoptik.com		104.17.208.58	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:57.130953074 CEST	1.1.1.1	192.168.2.4	0x66c1	No error (0)	dmp.truoptik.com		104.17.127.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:57.130953074 CEST	1.1.1.1	192.168.2.4	0x66c1	No error (0)	dmp.truoptik.com		104.18.80.52	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:57.150340080 CEST	1.1.1.1	192.168.2.4	0x692c	No error (0)	dmp.truoptik.com			65	IN (0x0001)	false
May 24, 2024 08:27:58.373328924 CEST	1.1.1.1	192.168.2.4	0x725e	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.373328924 CEST	1.1.1.1	192.168.2.4	0x725e	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.373328924 CEST	1.1.1.1	192.168.2.4	0x725e	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.373328924 CEST	1.1.1.1	192.168.2.4	0x725e	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.461601019 CEST	1.1.1.1	192.168.2.4	0x90a7	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:58.461601019 CEST	1.1.1.1	192.168.2.4	0x90a7	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:58.462737083 CEST	1.1.1.1	192.168.2.4	0x9795	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:58.955490112 CEST	1.1.1.1	192.168.2.4	0xbc5	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 08:27:58.955526114 CEST	1.1.1.1	192.168.2.4	0xe6d	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:59.884613991 CEST	1.1.1.1	192.168.2.4	0x6394	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:27:59.884613991 CEST	1.1.1.1	192.168.2.4	0x6394	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
May 24, 2024 08:27:59.884625912 CEST	1.1.1.1	192.168.2.4	0xfa4c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:00.260556936 CEST	1.1.1.1	192.168.2.4	0x36d1	No error (0)	c.disquscdn.com	d231vab146qzfb.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:00.260556936 CEST	1.1.1.1	192.168.2.4	0x36d1	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.54	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.260556936 CEST	1.1.1.1	192.168.2.4	0x36d1	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.41	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.260556936 CEST	1.1.1.1	192.168.2.4	0x36d1	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.43	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.260556936 CEST	1.1.1.1	192.168.2.4	0x36d1	No error (0)	d231vab146qzfb.cloudfront.net		99.86.4.23	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.265383959 CEST	1.1.1.1	192.168.2.4	0xb0b8	No error (0)	c.disquscdn.com	d231vab146qzfb.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:00.270834923 CEST	1.1.1.1	192.168.2.4	0x707	No error (0)	servicer.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:28:00.270845890 CEST	1.1.1.1	192.168.2.4	0x8342	No error (0)	servicer.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.270845890 CEST	1.1.1.1	192.168.2.4	0x8342	No error (0)	servicer.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.270845890 CEST	1.1.1.1	192.168.2.4	0x8342	No error (0)	servicer.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.270845890 CEST	1.1.1.1	192.168.2.4	0x8342	No error (0)	servicer.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:00.270845890 CEST	1.1.1.1	192.168.2.4	0x8342	No error (0)	servicer.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:01.065262079 CEST	1.1.1.1	192.168.2.4	0xf936	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:01.065262079 CEST	1.1.1.1	192.168.2.4	0xf936	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:01.065273046 CEST	1.1.1.1	192.168.2.4	0x2d35	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.606503963 CEST	1.1.1.1	192.168.2.4	0x794	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.606764078 CEST	1.1.1.1	192.168.2.4	0x3b6e	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.606796980 CEST	1.1.1.1	192.168.2.4	0x68be	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.607364893 CEST	1.1.1.1	192.168.2.4	0xc805	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.607364893 CEST	1.1.1.1	192.168.2.4	0xc805	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.607364893 CEST	1.1.1.1	192.168.2.4	0xc805	No error (0)	track-sc-was.aniview.com		96.46.186.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.607399940 CEST	1.1.1.1	192.168.2.4	0xc4bc	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.607399940 CEST	1.1.1.1	192.168.2.4	0xc4bc	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.611413956 CEST	1.1.1.1	192.168.2.4	0x1cc2	No error (0)	thepatriotjournal.disqus.com	prod.disqus.map.fastlylb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.611413956 CEST	1.1.1.1	192.168.2.4	0x1cc2	No error (0)	prod.disqus.map.fastlylb.net		199.232.192.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.611413956 CEST	1.1.1.1	192.168.2.4	0x1cc2	No error (0)	prod.disqus.map.fastlylb.net		199.232.196.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.611553907 CEST	1.1.1.1	192.168.2.4	0x7689	No error (0)	thepatriotjournal.disqus.com	prod.disqus.map.fastlylb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.621608973 CEST	1.1.1.1	192.168.2.4	0x945e	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.621639967 CEST	1.1.1.1	192.168.2.4	0xe917	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.621695042 CEST	1.1.1.1	192.168.2.4	0xa4d6	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.621695042 CEST	1.1.1.1	192.168.2.4	0xa4d6	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.621695042 CEST	1.1.1.1	192.168.2.4	0xa4d6	No error (0)	track-sc-was.aniview.com		96.46.186.186	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.621735096 CEST	1.1.1.1	192.168.2.4	0x8bab	No error (0)	track1.aniview.com	track4.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.621735096 CEST	1.1.1.1	192.168.2.4	0x8bab	No error (0)	track4.aniview.com	track-sc-was.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.621762037 CEST	1.1.1.1	192.168.2.4	0x15ef	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.822076082 CEST	1.1.1.1	192.168.2.4	0x9372	No error (0)	dsp-media.eskimi.com	eskmedia.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.823033094 CEST	1.1.1.1	192.168.2.4	0x5c10	No error (0)	dsp-media.eskimi.com	eskmedia.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.823033094 CEST	1.1.1.1	192.168.2.4	0x5c10	No error (0)	eskmedia.b-cdn.net		169.150.247.39	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.830357075 CEST	1.1.1.1	192.168.2.4	0x1e23	No error (0)	dsp-trk.eskimi.com		188.42.63.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:02.909553051 CEST	1.1.1.1	192.168.2.4	0x8301	No error (0)	player.aniview.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:02.909574032 CEST	1.1.1.1	192.168.2.4	0xb05d	No error (0)	player.aniview.com	stackpath-migration.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:03.062825918 CEST	1.1.1.1	192.168.2.4	0xa3fd	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:03.062838078 CEST	1.1.1.1	192.168.2.4	0xcf7d	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:03.062838078 CEST	1.1.1.1	192.168.2.4	0xcf7d	No error (0)	www3.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:03.524682045 CEST	1.1.1.1	192.168.2.4	0xc52e	No error (0)	c.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:28:03.525696039 CEST	1.1.1.1	192.168.2.4	0x3d66	No error (0)	c.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:03.525696039 CEST	1.1.1.1	192.168.2.4	0x3d66	No error (0)	c.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:03.525696039 CEST	1.1.1.1	192.168.2.4	0x3d66	No error (0)	c.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:03.525696039 CEST	1.1.1.1	192.168.2.4	0x3d66	No error (0)	c.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:03.525696039 CEST	1.1.1.1	192.168.2.4	0x3d66	No error (0)	c.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:04.793093920 CEST	1.1.1.1	192.168.2.4	0xa029	No error (0)	ad.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.391683102 CEST	1.1.1.1	192.168.2.4	0xe469	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:05.391683102 CEST	1.1.1.1	192.168.2.4	0xe469	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.391683102 CEST	1.1.1.1	192.168.2.4	0xe469	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.391683102 CEST	1.1.1.1	192.168.2.4	0xe469	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.391683102 CEST	1.1.1.1	192.168.2.4	0xe469	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.438306093 CEST	1.1.1.1	192.168.2.4	0x6677	No error (0)	win.eskimi.com		130.211.27.62	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.479975939 CEST	1.1.1.1	192.168.2.4	0x671e	No error (0)	dsp-ap.eskimi.com		188.42.63.48	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.479990959 CEST	1.1.1.1	192.168.2.4	0xf9fa	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:05.480004072 CEST	1.1.1.1	192.168.2.4	0xbf8f	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:05.484786987 CEST	1.1.1.1	192.168.2.4	0xfc21	No error (0)	ums.acuityplatform.com		154.59.122.79	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.484798908 CEST	1.1.1.1	192.168.2.4	0xd527	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:05.484812021 CEST	1.1.1.1	192.168.2.4	0x9068	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:05.514710903 CEST	1.1.1.1	192.168.2.4	0x362	No error (0)	dsp-trvm.eskimi.com		188.42.63.50	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.576893091 CEST	1.1.1.1	192.168.2.4	0x824c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:05.584737062 CEST	1.1.1.1	192.168.2.4	0xa72c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:05.584737062 CEST	1.1.1.1	192.168.2.4	0xa72c	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.816643953 CEST	1.1.1.1	192.168.2.4	0xfee0	No error (0)	s-img.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.816643953 CEST	1.1.1.1	192.168.2.4	0xfee0	No error (0)	s-img.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.816643953 CEST	1.1.1.1	192.168.2.4	0xfee0	No error (0)	s-img.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.816643953 CEST	1.1.1.1	192.168.2.4	0xfee0	No error (0)	s-img.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.816643953 CEST	1.1.1.1	192.168.2.4	0xfee0	No error (0)	s-img.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.821414948 CEST	1.1.1.1	192.168.2.4	0xa9b4	No error (0)	s-img.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:28:05.821429014 CEST	1.1.1.1	192.168.2.4	0x467	No error (0)	img.rtbsystem.org		104.27.203.88	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.821429014 CEST	1.1.1.1	192.168.2.4	0x467	No error (0)	img.rtbsystem.org		104.27.202.88	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:05.835966110 CEST	1.1.1.1	192.168.2.4	0x2c01	No error (0)	img.rtbsystem.org			65	IN (0x0001)	false
May 24, 2024 08:28:06.651683092 CEST	1.1.1.1	192.168.2.4	0xf00b	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:06.822832108 CEST	1.1.1.1	192.168.2.4	0x74a2	No error (0)	us2.rtbsystem.org		142.0.197.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.281596899 CEST	1.1.1.1	192.168.2.4	0xe80f	No error (0)	dsp-trk.eskimi.com		188.42.63.49	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.286427975 CEST	1.1.1.1	192.168.2.4	0xf056	No error (0)	dsp-media.eskimi.com	eskmedia.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:07.286427975 CEST	1.1.1.1	192.168.2.4	0xf056	No error (0)	eskmedia.b-cdn.net		169.150.247.39	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.286438942 CEST	1.1.1.1	192.168.2.4	0x96ed	No error (0)	c.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.286438942 CEST	1.1.1.1	192.168.2.4	0x96ed	No error (0)	c.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.286438942 CEST	1.1.1.1	192.168.2.4	0x96ed	No error (0)	c.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.286438942 CEST	1.1.1.1	192.168.2.4	0x96ed	No error (0)	c.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.286438942 CEST	1.1.1.1	192.168.2.4	0x96ed	No error (0)	c.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.286448002 CEST	1.1.1.1	192.168.2.4	0x87b8	No error (0)	dsp-media.eskimi.com	eskmedia.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:07.304724932 CEST	1.1.1.1	192.168.2.4	0x13d0	No error (0)	c.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:28:07.544384003 CEST	1.1.1.1	192.168.2.4	0xc3ae	No error (0)	x.com		104.244.42.1	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.544384003 CEST	1.1.1.1	192.168.2.4	0xc3ae	No error (0)	x.com		104.244.42.129	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.544384003 CEST	1.1.1.1	192.168.2.4	0xc3ae	No error (0)	x.com		104.244.42.193	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:07.544384003 CEST	1.1.1.1	192.168.2.4	0xc3ae	No error (0)	x.com		104.244.42.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.560208082 CEST	1.1.1.1	192.168.2.4	0x8e66	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.560208082 CEST	1.1.1.1	192.168.2.4	0x8e66	No error (0)	twimg.twitter.map.fastly.net		146.75.120.159	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.560219049 CEST	1.1.1.1	192.168.2.4	0x9e68	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.565028906 CEST	1.1.1.1	192.168.2.4	0xc135	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.574573994 CEST	1.1.1.1	192.168.2.4	0x4f25	No error (0)	pbs.twimg.com	dualstack.twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.574573994 CEST	1.1.1.1	192.168.2.4	0x4f25	No error (0)	dualstack.twimg.twitter.map.fastly.net		146.75.120.159	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.579364061 CEST	1.1.1.1	192.168.2.4	0xe57b	No error (0)	pbs.twimg.com	cs196.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.579364061 CEST	1.1.1.1	192.168.2.4	0xe57b	No error (0)	cs196.wac.edgecastcdn.net	cs2-wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.579364061 CEST	1.1.1.1	192.168.2.4	0xe57b	No error (0)	cs2-wac-eu.8315.ecdns.net	cs45.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.586172104 CEST	1.1.1.1	192.168.2.4	0x8c87	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.586172104 CEST	1.1.1.1	192.168.2.4	0x8c87	No error (0)	tpop-api.x.com		104.244.42.194	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.586184978 CEST	1.1.1.1	192.168.2.4	0xfde8	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.590869904 CEST	1.1.1.1	192.168.2.4	0xc3bf	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.590869904 CEST	1.1.1.1	192.168.2.4	0xc3bf	No error (0)	tpop-api.twitter.com		104.244.42.194	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.595684052 CEST	1.1.1.1	192.168.2.4	0x1a0d	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.630784988 CEST	1.1.1.1	192.168.2.4	0x740c	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:08.630784988 CEST	1.1.1.1	192.168.2.4	0x740c	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.630784988 CEST	1.1.1.1	192.168.2.4	0x740c	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.630784988 CEST	1.1.1.1	192.168.2.4	0x740c	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.630784988 CEST	1.1.1.1	192.168.2.4	0x740c	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:08.649888992 CEST	1.1.1.1	192.168.2.4	0xdff9	No error (0)	win.eskimi.com		130.211.27.62	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.021047115 CEST	1.1.1.1	192.168.2.4	0xa26c	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:09.021047115 CEST	1.1.1.1	192.168.2.4	0xa26c	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.021047115 CEST	1.1.1.1	192.168.2.4	0xa26c	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.021090984 CEST	1.1.1.1	192.168.2.4	0xfe39	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.384299040 CEST	1.1.1.1	192.168.2.4	0x4762	No error (0)	bcp.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.588093042 CEST	1.1.1.1	192.168.2.4	0xad90	No error (0)	dsp-ap.eskimi.com		188.42.63.48	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.604142904 CEST	1.1.1.1	192.168.2.4	0x375c	No error (0)	dsp-trvm.eskimi.com		188.42.63.50	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.723086119 CEST	1.1.1.1	192.168.2.4	0x50c6	No error (0)	video.twimg.com	cs296.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:09.723086119 CEST	1.1.1.1	192.168.2.4	0x50c6	No error (0)	cs296.wpc.edgecastcdn.net	cs2-wpc.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:09.723086119 CEST	1.1.1.1	192.168.2.4	0x50c6	No error (0)	cs2-wpc-eu.8315.ecdns.net	cs531.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:09.723086119 CEST	1.1.1.1	192.168.2.4	0x50c6	No error (0)	cs531.wpc.edgecastcdn.net		192.229.220.133	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:09.723102093 CEST	1.1.1.1	192.168.2.4	0xc1fc	No error (0)	video.twimg.com	cs296.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:09.723102093 CEST	1.1.1.1	192.168.2.4	0xc1fc	No error (0)	cs296.wpc.edgecastcdn.net	cs2-wpc.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:09.723102093 CEST	1.1.1.1	192.168.2.4	0xc1fc	No error (0)	cs2-wpc-eu.8315.ecdns.net	cs189.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158617973 CEST	1.1.1.1	192.168.2.4	0x815b	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.158632040 CEST	1.1.1.1	192.168.2.4	0xacd8	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.241.181.187	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.77.107.197	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.247.177.253	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		99.80.216.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.252.47.70	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.254.218.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		108.128.7.33	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.198329926 CEST	1.1.1.1	192.168.2.4	0x25ed	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.72.0.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:10.206902027 CEST	1.1.1.1	192.168.2.4	0xa4de	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.206902027 CEST	1.1.1.1	192.168.2.4	0xa4de	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.206902027 CEST	1.1.1.1	192.168.2.4	0xa4de	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.206902027 CEST	1.1.1.1	192.168.2.4	0xa4de	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.322341919 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.322355032 CEST	1.1.1.1	192.168.2.4	0xe222	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.534102917 CEST	1.1.1.1	192.168.2.4	0x5892	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:10.544382095 CEST	1.1.1.1	192.168.2.4	0xbcee	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:11.122139931 CEST	1.1.1.1	192.168.2.4	0xd034	No error (0)	img.rtbsystem.org		104.27.203.88	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:11.122139931 CEST	1.1.1.1	192.168.2.4	0xd034	No error (0)	img.rtbsystem.org		104.27.202.88	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:11.122191906 CEST	1.1.1.1	192.168.2.4	0x4d0e	No error (0)	img.rtbsystem.org			65	IN (0x0001)	false
May 24, 2024 08:28:11.284082890 CEST	1.1.1.1	192.168.2.4	0x97a3	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:11.284121037 CEST	1.1.1.1	192.168.2.4	0x32a1	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:11.284121037 CEST	1.1.1.1	192.168.2.4	0x32a1	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.77.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.43.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.73.116.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.227.208	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.32.208	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.219.73	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.172.22	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.544099092 CEST	1.1.1.1	192.168.2.4	0x321c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.88.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.635793924 CEST	1.1.1.1	192.168.2.4	0x7c43	No error (0)	cm.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:12.699346066 CEST	1.1.1.1	192.168.2.4	0xaa64	No error (0)	us2.rtbsystem.org		142.0.197.196	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239754915 CEST	1.1.1.1	192.168.2.4	0x45ef	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239754915 CEST	1.1.1.1	192.168.2.4	0x45ef	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239772081 CEST	1.1.1.1	192.168.2.4	0xcc65	No error (0)	aorta.clickagy.com		23.20.26.217	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239772081 CEST	1.1.1.1	192.168.2.4	0xcc65	No error (0)	aorta.clickagy.com		44.216.13.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239772081 CEST	1.1.1.1	192.168.2.4	0xcc65	No error (0)	aorta.clickagy.com		18.211.202.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239772081 CEST	1.1.1.1	192.168.2.4	0xcc65	No error (0)	aorta.clickagy.com		34.198.38.143	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		52.210.157.137	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		63.32.35.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		108.128.36.135	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		52.213.95.172	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		54.171.20.81	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		54.170.33.176	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		52.209.124.52	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239780903 CEST	1.1.1.1	192.168.2.4	0x4ab9	No error (0)	euw-ice.360yield.com		108.128.49.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.239790916 CEST	1.1.1.1	192.168.2.4	0x8e5d	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
May 24, 2024 08:28:13.239814043 CEST	1.1.1.1	192.168.2.4	0x793b	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.239814043 CEST	1.1.1.1	192.168.2.4	0x793b	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.457065105 CEST	1.1.1.1	192.168.2.4	0x4df3	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.457101107 CEST	1.1.1.1	192.168.2.4	0xb9f5	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		54.157.60.254	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		52.72.151.87	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		52.86.37.184	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		52.7.90.152	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		54.157.238.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		54.144.2.150	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.918797970 CEST	1.1.1.1	192.168.2.4	0xc3d1	No error (0)	sync.ipredictive.com		52.72.76.247	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.949855089 CEST	1.1.1.1	192.168.2.4	0x45f7	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.949855089 CEST	1.1.1.1	192.168.2.4	0x45f7	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.949855089 CEST	1.1.1.1	192.168.2.4	0x45f7	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.949855089 CEST	1.1.1.1	192.168.2.4	0x45f7	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.949855089 CEST	1.1.1.1	192.168.2.4	0x45f7	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.949866056 CEST	1.1.1.1	192.168.2.4	0x7526	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.949866056 CEST	1.1.1.1	192.168.2.4	0x7526	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.949866056 CEST	1.1.1.1	192.168.2.4	0x7526	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.959377050 CEST	1.1.1.1	192.168.2.4	0x7013	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:13.995990992 CEST	1.1.1.1	192.168.2.4	0xb454	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:13.996001005 CEST	1.1.1.1	192.168.2.4	0x9a3	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.003528118 CEST	1.1.1.1	192.168.2.4	0x4d4d	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.003568888 CEST	1.1.1.1	192.168.2.4	0x30cd	No error (0)	prebid.a-mo.net	am6-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.003568888 CEST	1.1.1.1	192.168.2.4	0x30cd	No error (0)	am6-prebid.a-mx.net		145.40.97.66	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.003568888 CEST	1.1.1.1	192.168.2.4	0x30cd	No error (0)	am6-prebid.a-mx.net		147.75.84.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.003568888 CEST	1.1.1.1	192.168.2.4	0x30cd	No error (0)	am6-prebid.a-mx.net		145.40.97.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.003577948 CEST	1.1.1.1	192.168.2.4	0xbdd5	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.003577948 CEST	1.1.1.1	192.168.2.4	0xbdd5	No error (0)	1.cpm.ak-is2.net		77.245.57.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.003586054 CEST	1.1.1.1	192.168.2.4	0xb8e6	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.013096094 CEST	1.1.1.1	192.168.2.4	0xec2f	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.511728048 CEST	1.1.1.1	192.168.2.4	0x8f7a	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.511728048 CEST	1.1.1.1	192.168.2.4	0x8f7a	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.511745930 CEST	1.1.1.1	192.168.2.4	0xb5a3	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.575623989 CEST	1.1.1.1	192.168.2.4	0xe2dd	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.575637102 CEST	1.1.1.1	192.168.2.4	0xfcac	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		34.240.216.83	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		34.249.65.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		34.241.112.102	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		34.246.206.6	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		34.251.183.115	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		52.210.242.228	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		34.254.84.230	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587033033 CEST	1.1.1.1	192.168.2.4	0x72e3	No error (0)	match.prod.bidr.io		34.255.48.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.587044954 CEST	1.1.1.1	192.168.2.4	0x65b	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.610754013 CEST	1.1.1.1	192.168.2.4	0xb00f	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		3.75.47.4	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		3.72.203.236	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		3.121.6.51	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		35.157.60.248	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		18.194.121.192	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		3.73.169.240	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		18.195.237.104	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.618379116 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	btlr-eu-central-1.sharethrough.com		18.158.154.197	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.251.66.169	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.247.187	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.240.192.124	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		18.203.179.220	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.255.155.10	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.48.211.135	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.246.216.47	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966257095 CEST	1.1.1.1	192.168.2.4	0x8a2d	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.77.113.197	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:14.966268063 CEST	1.1.1.1	192.168.2.4	0x40c3	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.966268063 CEST	1.1.1.1	192.168.2.4	0x40c3	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.966268063 CEST	1.1.1.1	192.168.2.4	0x40c3	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:14.966268063 CEST	1.1.1.1	192.168.2.4	0x40c3	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:15.855410099 CEST	1.1.1.1	192.168.2.4	0xd49b	No error (0)	a.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:28:15.855428934 CEST	1.1.1.1	192.168.2.4	0xcdb1	No error (0)	cm.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.855428934 CEST	1.1.1.1	192.168.2.4	0xcdb1	No error (0)	cm.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.855428934 CEST	1.1.1.1	192.168.2.4	0xcdb1	No error (0)	cm.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.855428934 CEST	1.1.1.1	192.168.2.4	0xcdb1	No error (0)	cm.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.855428934 CEST	1.1.1.1	192.168.2.4	0xcdb1	No error (0)	cm.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.855456114 CEST	1.1.1.1	192.168.2.4	0x370c	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:15.867889881 CEST	1.1.1.1	192.168.2.4	0x8a71	No error (0)	cm.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:28:15.867908001 CEST	1.1.1.1	192.168.2.4	0x1493	No error (0)	abs-0.twimg.com	abs-zero.twimg.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:15.867908001 CEST	1.1.1.1	192.168.2.4	0x1493	No error (0)	abs-zero.twimg.com		104.244.43.131	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.867922068 CEST	1.1.1.1	192.168.2.4	0x94cb	No error (0)	a.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.867922068 CEST	1.1.1.1	192.168.2.4	0x94cb	No error (0)	a.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.867922068 CEST	1.1.1.1	192.168.2.4	0x94cb	No error (0)	a.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.867922068 CEST	1.1.1.1	192.168.2.4	0x94cb	No error (0)	a.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.867922068 CEST	1.1.1.1	192.168.2.4	0x94cb	No error (0)	a.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:15.872704983 CEST	1.1.1.1	192.168.2.4	0x30c3	No error (0)	bcp.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.226572990 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.565584898 CEST	1.1.1.1	192.168.2.4	0x938	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.565597057 CEST	1.1.1.1	192.168.2.4	0x9784	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:16.565604925 CEST	1.1.1.1	192.168.2.4	0x6282	Name error (3)	hb.yahoo.net	none	none	65	IN (0x0001)	false
May 24, 2024 08:28:16.565613985 CEST	1.1.1.1	192.168.2.4	0x9cf2	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:16.565613985 CEST	1.1.1.1	192.168.2.4	0x9cf2	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.591525078 CEST	1.1.1.1	192.168.2.4	0x6445	Name error (3)	hb.yahoo.net	none	none	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609390974 CEST	1.1.1.1	192.168.2.4	0xb8c8	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.609402895 CEST	1.1.1.1	192.168.2.4	0x483d	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:16.609402895 CEST	1.1.1.1	192.168.2.4	0x483d	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:16.828150034 CEST	1.1.1.1	192.168.2.4	0x7569	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.864331961 CEST	1.1.1.1	192.168.2.4	0xcf23	No error (0)	cms-xch-chicago.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:16.869136095 CEST	1.1.1.1	192.168.2.4	0xa92f	No error (0)	cms-xch.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465531111 CEST	1.1.1.1	192.168.2.4	0x92e7	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.120.79.213	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		52.29.54.89	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.192.200.108	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.126.233	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.126.136	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.171.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.159.229.46	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.465548038 CEST	1.1.1.1	192.168.2.4	0x50	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.641091108 CEST	1.1.1.1	192.168.2.4	0xcc56	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:17.645925045 CEST	1.1.1.1	192.168.2.4	0xbf38	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123651981 CEST	1.1.1.1	192.168.2.4	0x5121	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123651981 CEST	1.1.1.1	192.168.2.4	0x5121	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123651981 CEST	1.1.1.1	192.168.2.4	0x5121	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		54.146.48.107	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		54.167.184.132	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		52.86.155.245	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		54.225.219.192	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		54.146.53.134	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		54.162.50.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		54.164.74.54	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123711109 CEST	1.1.1.1	192.168.2.4	0x474a	No error (0)	sync.srv.stackadapt.com		52.73.192.158	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.123732090 CEST	1.1.1.1	192.168.2.4	0xf338	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.870208025 CEST	1.1.1.1	192.168.2.4	0x7588	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:18.870208025 CEST	1.1.1.1	192.168.2.4	0x7588	No error (0)	1.cpm.ak-is2.net		77.245.57.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:18.870245934 CEST	1.1.1.1	192.168.2.4	0x7f2c	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.724108934 CEST	1.1.1.1	192.168.2.4	0xf1f7	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.724108934 CEST	1.1.1.1	192.168.2.4	0xf1f7	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.724128962 CEST	1.1.1.1	192.168.2.4	0x8344	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.728969097 CEST	1.1.1.1	192.168.2.4	0x6af0	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.794578075 CEST	1.1.1.1	192.168.2.4	0x7a1f	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.794578075 CEST	1.1.1.1	192.168.2.4	0x7a1f	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.77.179.61	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.794578075 CEST	1.1.1.1	192.168.2.4	0x7a1f	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.195.158.29	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.794578075 CEST	1.1.1.1	192.168.2.4	0x7a1f	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.48.182.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.794578075 CEST	1.1.1.1	192.168.2.4	0x7a1f	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.250.199.34	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.809772968 CEST	1.1.1.1	192.168.2.4	0xae9	No error (0)	cm.mgid.com			65	IN (0x0001)	false
May 24, 2024 08:28:20.809807062 CEST	1.1.1.1	192.168.2.4	0xc270	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.809834957 CEST	1.1.1.1	192.168.2.4	0x1e32	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.809861898 CEST	1.1.1.1	192.168.2.4	0x5233	No error (0)	api.x.com	tpop-api.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.809861898 CEST	1.1.1.1	192.168.2.4	0x5233	No error (0)	tpop-api.x.com		104.244.42.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.809890032 CEST	1.1.1.1	192.168.2.4	0x22c3	No error (0)	cm.mgid.com		104.19.129.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.809890032 CEST	1.1.1.1	192.168.2.4	0x22c3	No error (0)	cm.mgid.com		104.19.130.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.809890032 CEST	1.1.1.1	192.168.2.4	0x22c3	No error (0)	cm.mgid.com		104.19.131.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.809890032 CEST	1.1.1.1	192.168.2.4	0x22c3	No error (0)	cm.mgid.com		104.19.133.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.809890032 CEST	1.1.1.1	192.168.2.4	0x22c3	No error (0)	cm.mgid.com		104.19.132.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.810005903 CEST	1.1.1.1	192.168.2.4	0xee87	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.823184013 CEST	1.1.1.1	192.168.2.4	0x37af	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.823184013 CEST	1.1.1.1	192.168.2.4	0x37af	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.874182940 CEST	1.1.1.1	192.168.2.4	0x3a54	No error (0)	cms-xch-chicago.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.874222040 CEST	1.1.1.1	192.168.2.4	0xbec4	No error (0)	cms-xch.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		18.185.176.2	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		3.126.144.85	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		3.121.104.202	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		3.72.203.236	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		18.194.121.192	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		18.196.140.29	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		18.194.121.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923552036 CEST	1.1.1.1	192.168.2.4	0x8022	No error (0)	btlr-eu-central-1.sharethrough.com		35.157.60.248	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:20.923569918 CEST	1.1.1.1	192.168.2.4	0x8584	No error (0)	btlr.sharethrough.com	btlr-eu-central-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:21.571331024 CEST	1.1.1.1	192.168.2.4	0xd57	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.571331024 CEST	1.1.1.1	192.168.2.4	0xd57	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.571331024 CEST	1.1.1.1	192.168.2.4	0xd57	No error (0)	sync.colossusssp.com		172.240.155.84	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.571331024 CEST	1.1.1.1	192.168.2.4	0xd57	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.571331024 CEST	1.1.1.1	192.168.2.4	0xd57	No error (0)	sync.colossusssp.com		172.240.155.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.571331024 CEST	1.1.1.1	192.168.2.4	0xd57	No error (0)	sync.colossusssp.com		172.240.155.76	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.662727118 CEST	1.1.1.1	192.168.2.4	0xe6e3	No error (0)	ws.rqtrk.eu		57.129.18.111	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.662727118 CEST	1.1.1.1	192.168.2.4	0xe6e3	No error (0)	ws.rqtrk.eu		57.129.18.105	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.662727118 CEST	1.1.1.1	192.168.2.4	0xe6e3	No error (0)	ws.rqtrk.eu		57.129.18.109	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.662727118 CEST	1.1.1.1	192.168.2.4	0xe6e3	No error (0)	ws.rqtrk.eu		57.129.18.113	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.662727118 CEST	1.1.1.1	192.168.2.4	0xe6e3	No error (0)	ws.rqtrk.eu		57.129.18.121	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:21.921828032 CEST	1.1.1.1	192.168.2.4	0x4db8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:21.921864986 CEST	1.1.1.1	192.168.2.4	0x2d78	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:22.144994974 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:22.144994974 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:22.563755035 CEST	1.1.1.1	192.168.2.4	0x2237	No error (0)	analytics.x.com	ads.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:22.563755035 CEST	1.1.1.1	192.168.2.4	0x2237	No error (0)	ads.x.com	wr.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:22.563793898 CEST	1.1.1.1	192.168.2.4	0xa2b6	No error (0)	analytics.x.com	ads.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:22.563793898 CEST	1.1.1.1	192.168.2.4	0xa2b6	No error (0)	ads.x.com	wr.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:22.563793898 CEST	1.1.1.1	192.168.2.4	0xa2b6	No error (0)	wr.x.com		104.244.42.195	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.204767942 CEST	1.1.1.1	192.168.2.4	0x37c0	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:23.204767942 CEST	1.1.1.1	192.168.2.4	0x37c0	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:23.204767942 CEST	1.1.1.1	192.168.2.4	0x37c0	No error (0)	adizio.geo.iponweb.net		35.210.53.219	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.204781055 CEST	1.1.1.1	192.168.2.4	0x126e	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:23.204788923 CEST	1.1.1.1	192.168.2.4	0xe4b9	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:23.204788923 CEST	1.1.1.1	192.168.2.4	0xe4b9	No error (0)	cs.digbearings.com		54.195.106.144	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.204788923 CEST	1.1.1.1	192.168.2.4	0xe4b9	No error (0)	cs.digbearings.com		54.217.173.39	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.204788923 CEST	1.1.1.1	192.168.2.4	0xe4b9	No error (0)	cs.digbearings.com		99.80.151.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.204797983 CEST	1.1.1.1	192.168.2.4	0xafc5	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:23.204797983 CEST	1.1.1.1	192.168.2.4	0xafc5	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:23.208431959 CEST	1.1.1.1	192.168.2.4	0x8868	No error (0)	exchange.mediavine.com		3.76.153.167	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.208431959 CEST	1.1.1.1	192.168.2.4	0x8868	No error (0)	exchange.mediavine.com		3.121.111.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.208431959 CEST	1.1.1.1	192.168.2.4	0x8868	No error (0)	exchange.mediavine.com		18.159.162.220	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.208431959 CEST	1.1.1.1	192.168.2.4	0x8868	No error (0)	exchange.mediavine.com		35.156.47.202	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.208431959 CEST	1.1.1.1	192.168.2.4	0x8868	No error (0)	exchange.mediavine.com		18.159.17.218	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.208431959 CEST	1.1.1.1	192.168.2.4	0x8868	No error (0)	exchange.mediavine.com		18.185.154.61	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.218410969 CEST	1.1.1.1	192.168.2.4	0x2fc8	No error (0)	cs.yellowblue.io		99.80.151.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.218410969 CEST	1.1.1.1	192.168.2.4	0x2fc8	No error (0)	cs.yellowblue.io		54.217.173.39	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:23.218410969 CEST	1.1.1.1	192.168.2.4	0x2fc8	No error (0)	cs.yellowblue.io		54.195.106.144	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443567991 CEST	1.1.1.1	192.168.2.4	0xfb6e	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.443619013 CEST	1.1.1.1	192.168.2.4	0xbb77	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.443619013 CEST	1.1.1.1	192.168.2.4	0xbb77	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.826575994 CEST	1.1.1.1	192.168.2.4	0xf23a	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.920865059 CEST	1.1.1.1	192.168.2.4	0x148c	No error (0)	analytics.x.com	ads.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.920865059 CEST	1.1.1.1	192.168.2.4	0x148c	No error (0)	ads.x.com	wr.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.920865059 CEST	1.1.1.1	192.168.2.4	0x148c	No error (0)	wr.x.com		104.244.42.3	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.920878887 CEST	1.1.1.1	192.168.2.4	0x1bd8	No error (0)	analytics.x.com	ads.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.920878887 CEST	1.1.1.1	192.168.2.4	0x1bd8	No error (0)	ads.x.com	wr.x.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.971653938 CEST	1.1.1.1	192.168.2.4	0xda64	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:24.971653938 CEST	1.1.1.1	192.168.2.4	0xda64	No error (0)	cs.digbearings.com		54.217.173.39	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.971653938 CEST	1.1.1.1	192.168.2.4	0xda64	No error (0)	cs.digbearings.com		54.195.106.144	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.971653938 CEST	1.1.1.1	192.168.2.4	0xda64	No error (0)	cs.digbearings.com		99.80.151.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:24.971666098 CEST	1.1.1.1	192.168.2.4	0x285d	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:25.004834890 CEST	1.1.1.1	192.168.2.4	0xb306	No error (0)	cs.yellowblue.io		54.217.173.39	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004834890 CEST	1.1.1.1	192.168.2.4	0xb306	No error (0)	cs.yellowblue.io		54.195.106.144	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004834890 CEST	1.1.1.1	192.168.2.4	0xb306	No error (0)	cs.yellowblue.io		99.80.151.237	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004863024 CEST	1.1.1.1	192.168.2.4	0x1b20	No error (0)	exchange.mediavine.com		3.121.111.244	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004863024 CEST	1.1.1.1	192.168.2.4	0x1b20	No error (0)	exchange.mediavine.com		3.76.153.167	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004863024 CEST	1.1.1.1	192.168.2.4	0x1b20	No error (0)	exchange.mediavine.com		18.159.17.218	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004863024 CEST	1.1.1.1	192.168.2.4	0x1b20	No error (0)	exchange.mediavine.com		18.159.162.220	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004863024 CEST	1.1.1.1	192.168.2.4	0x1b20	No error (0)	exchange.mediavine.com		18.185.154.61	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:25.004863024 CEST	1.1.1.1	192.168.2.4	0x1b20	No error (0)	exchange.mediavine.com		35.156.47.202	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:26.548316956 CEST	1.1.1.1	192.168.2.4	0x7a31	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:26.548316956 CEST	1.1.1.1	192.168.2.4	0x7a31	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:26.581768036 CEST	1.1.1.1	192.168.2.4	0xcf85	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:29.300184011 CEST	1.1.1.1	192.168.2.4	0xca08	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:29.300184011 CEST	1.1.1.1	192.168.2.4	0xca08	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.66.33.135	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300184011 CEST	1.1.1.1	192.168.2.4	0xca08	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.67.154.159	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300184011 CEST	1.1.1.1	192.168.2.4	0xca08	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.124.61.113	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300184011 CEST	1.1.1.1	192.168.2.4	0xca08	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.157.177.163	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300184011 CEST	1.1.1.1	192.168.2.4	0xca08	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.126.74.189	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300184011 CEST	1.1.1.1	192.168.2.4	0xca08	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.113.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		52.201.179.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		18.233.140.27	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		18.235.49.225	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		54.147.122.146	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		54.85.88.207	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		100.26.24.31	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		34.235.77.249	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300220966 CEST	1.1.1.1	192.168.2.4	0x7e00	No error (0)	idaas-ext.cph.liveintent.com		107.23.121.33	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:29.300234079 CEST	1.1.1.1	192.168.2.4	0x1e75	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:29.300246954 CEST	1.1.1.1	192.168.2.4	0x53c5	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:29.506711960 CEST	1.1.1.1	192.168.2.4	0xebeb	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:29.506731033 CEST	1.1.1.1	192.168.2.4	0xec13	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:30.145476103 CEST	1.1.1.1	192.168.2.4	0x3695	No error (0)	global.ib-ibi.com		64.58.232.179	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:30.154253960 CEST	1.1.1.1	192.168.2.4	0xebad	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.474898100 CEST	1.1.1.1	192.168.2.4	0x5b3	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.961920023 CEST	1.1.1.1	192.168.2.4	0xf19	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:32.961932898 CEST	1.1.1.1	192.168.2.4	0x852d	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.961946011 CEST	1.1.1.1	192.168.2.4	0x1771	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:32.961946011 CEST	1.1.1.1	192.168.2.4	0x1771	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.124.61.113	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.961946011 CEST	1.1.1.1	192.168.2.4	0x1771	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.67.154.159	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.961946011 CEST	1.1.1.1	192.168.2.4	0x1771	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.157.177.163	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.961946011 CEST	1.1.1.1	192.168.2.4	0x1771	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.113.21	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.961946011 CEST	1.1.1.1	192.168.2.4	0x1771	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.66.33.135	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:32.961946011 CEST	1.1.1.1	192.168.2.4	0x1771	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.126.74.189	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.006370068 CEST	1.1.1.1	192.168.2.4	0x815	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.006370068 CEST	1.1.1.1	192.168.2.4	0x815	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.006370068 CEST	1.1.1.1	192.168.2.4	0x815	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.006370068 CEST	1.1.1.1	192.168.2.4	0x815	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		108.138.8.164	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.006385088 CEST	1.1.1.1	192.168.2.4	0x2cc1	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.006385088 CEST	1.1.1.1	192.168.2.4	0x2cc1	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.006385088 CEST	1.1.1.1	192.168.2.4	0x2cc1	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.098453045 CEST	1.1.1.1	192.168.2.4	0xbcec	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.098453045 CEST	1.1.1.1	192.168.2.4	0xbcec	No error (0)	idaas6.cph.liveintent.com		52.21.87.204	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.098453045 CEST	1.1.1.1	192.168.2.4	0xbcec	No error (0)	idaas6.cph.liveintent.com		52.44.96.219	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.098453045 CEST	1.1.1.1	192.168.2.4	0xbcec	No error (0)	idaas6.cph.liveintent.com		34.199.85.170	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.098473072 CEST	1.1.1.1	192.168.2.4	0x5604	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.114803076 CEST	1.1.1.1	192.168.2.4	0xfb21	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.114803076 CEST	1.1.1.1	192.168.2.4	0xfb21	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.126862049 CEST	1.1.1.1	192.168.2.4	0x9f7	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.126877069 CEST	1.1.1.1	192.168.2.4	0xc16a	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.126877069 CEST	1.1.1.1	192.168.2.4	0xc16a	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		3.65.80.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.126877069 CEST	1.1.1.1	192.168.2.4	0xc16a	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		3.120.47.227	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:33.131556034 CEST	1.1.1.1	192.168.2.4	0xc3c2	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.131556034 CEST	1.1.1.1	192.168.2.4	0xc3c2	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.939610004 CEST	1.1.1.1	192.168.2.4	0x6e1f	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:33.939625978 CEST	1.1.1.1	192.168.2.4	0x22f4	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.544461966 CEST	1.1.1.1	192.168.2.4	0x1c47	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.623632908 CEST	1.1.1.1	192.168.2.4	0x4e98	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:34.623632908 CEST	1.1.1.1	192.168.2.4	0x4e98	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:34.623632908 CEST	1.1.1.1	192.168.2.4	0x4e98	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.76.144.165	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.623632908 CEST	1.1.1.1	192.168.2.4	0x4e98	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.158.34.148	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.630764008 CEST	1.1.1.1	192.168.2.4	0xe42f	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:34.630764008 CEST	1.1.1.1	192.168.2.4	0xe42f	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:34.731081963 CEST	1.1.1.1	192.168.2.4	0xb8ee	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:34.731081963 CEST	1.1.1.1	192.168.2.4	0xb8ee	No error (0)	idaas6.cph.liveintent.com		52.44.96.219	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.731081963 CEST	1.1.1.1	192.168.2.4	0xb8ee	No error (0)	idaas6.cph.liveintent.com		34.199.85.170	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.731081963 CEST	1.1.1.1	192.168.2.4	0xb8ee	No error (0)	idaas6.cph.liveintent.com		52.21.87.204	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:34.736242056 CEST	1.1.1.1	192.168.2.4	0x7d2	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:35.977087975 CEST	1.1.1.1	192.168.2.4	0x170	No error (0)	rtb-useast.rtbserve.io	xapads.rtb-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:35.977087975 CEST	1.1.1.1	192.168.2.4	0x170	No error (0)	xapads.rtb-useast.ak-is2.net		198.134.116.50	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:35.981956959 CEST	1.1.1.1	192.168.2.4	0x5b88	No error (0)	rtb-useast.rtbserve.io	xapads.rtb-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.210916996 CEST	1.1.1.1	192.168.2.4	0xe1a1	No error (0)	us.ck-ie.com		8.2.110.114	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.210916996 CEST	1.1.1.1	192.168.2.4	0xe1a1	No error (0)	us.ck-ie.com		8.2.110.70	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.210916996 CEST	1.1.1.1	192.168.2.4	0xe1a1	No error (0)	us.ck-ie.com		8.2.110.97	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.266761065 CEST	1.1.1.1	192.168.2.4	0x3c3b	No error (0)	abs.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.266761065 CEST	1.1.1.1	192.168.2.4	0x3c3b	No error (0)	twimg.twitter.map.fastly.net		146.75.120.159	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.271576881 CEST	1.1.1.1	192.168.2.4	0x5487	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.502137899 CEST	1.1.1.1	192.168.2.4	0x3db6	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.502137899 CEST	1.1.1.1	192.168.2.4	0x3db6	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.502137899 CEST	1.1.1.1	192.168.2.4	0x3db6	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.196.90	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.213.103.114	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.88.72	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.242.107	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.110.165	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.31.123	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.81.13	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:36.506885052 CEST	1.1.1.1	192.168.2.4	0xf205	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.71.27	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:38.183968067 CEST	1.1.1.1	192.168.2.4	0xdde7	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:39.938950062 CEST	1.1.1.1	192.168.2.4	0xb2f1	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:39.938987970 CEST	1.1.1.1	192.168.2.4	0x4716	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 08:28:40.003223896 CEST	1.1.1.1	192.168.2.4	0xdd6b	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 08:28:40.008912086 CEST	1.1.1.1	192.168.2.4	0x60fa	No error (0)	pubads.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:42.855490923 CEST	1.1.1.1	192.168.2.4	0x8c72	No error (0)	aorta.clickagy.com		18.211.202.82	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:42.855490923 CEST	1.1.1.1	192.168.2.4	0x8c72	No error (0)	aorta.clickagy.com		34.198.38.143	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:42.855490923 CEST	1.1.1.1	192.168.2.4	0x8c72	No error (0)	aorta.clickagy.com		44.216.13.67	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:42.855490923 CEST	1.1.1.1	192.168.2.4	0x8c72	No error (0)	aorta.clickagy.com		23.20.26.217	A (IP address)	IN (0x0001)	false
May 24, 2024 08:28:44.481003046 CEST	1.1.1.1	192.168.2.4	0xff5c	No error (0)	cs.admanmedia.com		80.77.87.162	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:48 UTC	728	OUT	GET /jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:48 UTC	1039	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 888b375f5c251998-EWR CF-Cache-Status: HIT Age: 301806 Cache-Control: max-age=14400 Last-Modified: Mon, 20 May 2024 16:03:36 GMT Link: <https://pjnewsletter.com/wp-json/>; rel="https://api.w.org/", <https://pjnewsletter.com/wp-json/wp/v2/posts/27459637>; rel="alternate"; type="application/json", <https://pjnewsletter.com/?p=27459637>; rel=shortlink Vary: Accept-Encoding cf-apo-via: tcache cf-edge-cache: cache,platform=wordpress x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2qxm9jBPhnp1NpblqB6noji84JumRxugNp%2F7%2BK%2BMSiOLjEXXy%2BsPz88AsCn7yDYvg0kBHstzxnZIx3plq2Odo%2BsIRp9WFUBxY%2BSbxAHpwNMRgi7MnuXQeqFe%2Ft84OOClxEo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-24 06:26:48 UTC	38	IN	Data Raw: 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a Data Ascii: 20<!doctype html><html lang="en">
2024-05-24 06:26:48 UTC	1369	IN	Data Raw: 64 63 64 0d 0a 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 74 65 63 74 41 64 42 6c 6f 63 6b 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 61 64 42 6c 6f 63 6b 45 6e 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 4c 45 53 66 62 6d 6b 64 55 65 78 56 27 29 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 61 64 42 6c 6f 63 6b 45 6e 61 62 6c 65 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 6c 65 6d 65 6e 74 73 Data Ascii: dcd<head><script type="text/javascript"> function detectAdBlock() { let adBlockEnabled = false; if(document.getElementById('LESfbmkdUexV')){ if (!adBlockEnabled) { const elements
2024-05-24 06:26:48 UTC	1369	IN	Data Raw: 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 6f 75 72 63 65 20 73 61 6e 73 20 70 72 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 2e 36 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 3e 20 2e 61 64 73 62 79 67 6f 6f 67 6c 65 2d 6e 6f 61 Data Ascii: font-family: source sans pro,sans-serif; display: block; text-align: center; padding-bottom: 0.625rem; margin-bottom: 0; font-size: .875rem; } body > .adsbygoogle-noa
2024-05-24 06:26:48 UTC	802	IN	Data Raw: 28 29 2c 20 65 76 65 6e 74 3a 20 27 67 74 6d 2e 6a 73 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 20 64 6c 20 3d 20 6c 20 21 3d 20 27 64 61 74 61 4c 61 79 65 72 27 20 3f 20 27 26 6c 3d 27 20 2b 20 6c 20 3a 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 2e 73 72 63 20 3d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 Data Ascii: (), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.google
2024-05-24 06:26:48 UTC	1369	IN	Data Raw: 31 30 30 30 0d 0a 3c 73 74 79 6c 65 20 69 64 3d 22 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 32 32 2f 36 78 4b 31 64 53 42 59 4b 63 53 56 2d 4c 43 6f 65 51 71 66 58 31 52 59 4f 6f 33 71 50 5a 37 71 73 44 4a 54 39 67 2e 77 6f 66 66 32 Data Ascii: 1000<style id="" media="all">/* cyrillic-ext */@font-face { font-family: 'Source Sans Pro'; font-style: italic; font-weight: 400; font-display: swap; src: url(/fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2
2024-05-24 06:26:48 UTC	1369	IN	Data Raw: 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 32 32 2f 36 78 4b 31 64 53 42 59 4b 63 53 56 2d 4c 43 6f 65 51 71 66 58 31 52 59 4f 6f 33 71 50 5a 37 6f 73 44 4a 54 39 67 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 Data Ascii: nt-weight: 400; font-display: swap; src: url(/fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-03
2024-05-24 06:26:48 UTC	1366	IN	Data Raw: 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 66 6f 6e 74 73 2e 67 73 Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Source Sans Pro'; font-style: normal; font-weight: 400; font-display: swap; src: url(/fonts.gs
2024-05-24 06:26:48 UTC	1369	IN	Data Raw: 34 32 35 61 0d 0a 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 32 32 2f 36 78 4b 33 64 53 42 59 4b 63 53 56 Data Ascii: 425a3-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Source Sans Pro'; font-style: normal; font-weight: 400; font-display: swap; src: url(/fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV
2024-05-24 06:26:48 UTC	1369	IN	Data Raw: 2e 63 6f 6d 2f 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 32 32 2f 36 78 4b 79 64 53 42 59 4b 63 53 56 2d 4c 43 6f 65 51 71 66 58 31 52 59 4f 6f 33 69 35 34 72 77 6b 78 64 75 7a 38 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: .com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwkxduz8A.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Source Sans Pro'; font-style: normal; font-
2024-05-24 06:26:48 UTC	1369	IN	Data Raw: 2d 4c 43 6f 65 51 71 66 58 31 52 59 4f 6f 33 69 35 34 72 77 6d 52 64 75 7a 38 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 Data Ascii: -LCoeQqfX1RYOo3i54rwmRduz8A.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Source Sans

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:49 UTC	693	OUT	GET /wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=6.4.4 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:49 UTC	849	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: minify Cf-Polished: origSize=2209 etag: W/"6597e0da-8a1" expires: Wed, 19 Jun 2024 15:59:31 GMT last-modified: Fri, 05 Jan 2024 10:58:34 GMT vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jEF4lUoR9MYOYSntWN6t01lNNQA9IChL6K0Cyu7KAb%2Fjhfxk%2BsaO8m1REyD5I%2FEZ5hCHQMWriiuL%2FkDsLn4hjpsTfmoLJEQFe3P%2FZBvAVC9XGj%2Bq6kJr7Uf970g%2FRDritIc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37610e3142d2-EWR
2024-05-24 06:26:49 UTC	520	IN	Data Raw: 38 38 38 0d 0a 2e 73 6f 63 69 61 6c 2d 77 61 72 66 61 72 65 2d 61 64 6d 69 6e 2d 62 6c 6f 63 6b 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 66 20 70 72 6f 20 74 65 78 74 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 2e 73 6f 63 69 61 6c 2d 77 61 72 66 61 72 65 2d 61 64 6d 69 6e 2d 62 6c 6f 63 6b 20 2e 68 65 61 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 Data Ascii: 888.social-warfare-admin-block{font-family:sf pro text,helvetica,sans-serif;font-size:13px}.social-warfare-admin-block .head{width:100%;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-align:center;align-items:cent
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 77 72 61 70 20 73 65 6c 65 63 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 77 70 2d 61 63 74 69 76 65 2d 62 6c 6f 63 6b 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 73 77 70 2d 61 63 74 69 76 65 2d 62 6c 6f 63 6b 20 69 6e 70 75 74 2c 2e 73 77 70 2d 61 63 74 69 76 65 2d 62 6c 6f 63 6b 20 73 65 6c 65 63 74 2c 2e 73 77 70 2d 61 63 74 69 76 65 2d 62 6c 6f 63 6b 20 74 65 78 74 61 72 65 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 35 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 32 65 34 65 37 7d 2e 73 77 70 2d 61 63 74 69 76 65 2d 62 6c 6f 63 6b 20 74 65 78 74 61 72 65 61 7b 68 65 69 67 68 74 3a 36 34 70 78 7d 2e 73 77 70 2d 61 63 74 69 76 65 2d 62 Data Ascii: wrap select{width:100%}.swp-active-block{height:100%}.swp-active-block input,.swp-active-block select,.swp-active-block textarea{display:block;width:100%;padding:5px;height:42px;border:1px solid #e2e4e7}.swp-active-block textarea{height:64px}.swp-active-b
2024-05-24 06:26:49 UTC	302	IN	Data Raw: 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 30 33 39 34 66 3b 6d 61 72 67 69 6e 3a 30 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 78 2d 77 69 64 74 68 3a 32 30 30 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 7d 2e 63 6c 69 63 6b 2d 74 6f 2d 74 77 65 65 74 2d 62 6c 6f 63 6b 2d 77 72 61 70 20 2e 62 6c 6f 63 6b 2d 63 68 61 72 61 63 74 65 72 73 2d 72 65 6d 61 69 6e Data Ascii: der-top-left-radius:4px;background:#30394f;margin:0;float:right;max-width:200px;padding:5px 15px;position:relative;font-size:13px;-webkit-transition:all 300ms;-o-transition:all 300ms;transition:all 300ms}.click-to-tweet-block-wrap .block-characters-remain
2024-05-24 06:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:49 UTC	658	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:49 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Tue, 30 Jan 2024 22:44:16 GMT vary: Accept-Encoding etag: W/"65b97bc0-1ae43" expires: Wed, 19 Jun 2024 15:59:31 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ySKJgfEyt5R7lJJ2vZIECab7Pjm%2BDidYWQFdFVtE945qjf%2FrVnxoOjwP7E7gy7FBmmKdop7Ath16LKh2clyOCOb8UENL6Vk3qnnJ8BYmLeIzguqIwL536iH9vf4YsVc0VKA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37645c361a38-EWR
2024-05-24 06:26:49 UTC	572	IN	Data Raw: 37 63 38 32 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 Data Ascii: 7c82@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-b
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 61 6c 69 67 6e 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 Data Ascii: .wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 5f 5f 6c 69 6e 6b 2e 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 36 36 37 65 6d 20 31 2e 33 33 33 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 Data Ascii: __link.no-border-radius{border-radius:0!important}.wp-block-button .wp-block-button__link.is-style-outline,.wp-block-button.is-style-outline>.wp-block-button__link{border:2px solid;padding:.667em 1.333em}.wp-block-button .wp-block-button__link.is-style-ou
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d Data Ascii: -button .wp-block-button__link:where([style=border-bottom-style]){border-bottom-width:medium}.wp-block-button .wp-block-button__link:where([style=border-left-style]){border-left-width:medium}.wp-block-buttons.is-vertical{flex-direction:column}.wp-block-
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: .wp-block-buttons.has-custom-font-size .wp-block-button__link{font-size:inherit}.wp-block-button.aligncenter,.wp-block-calendar{text-align:center}.wp-block-calendar td,.wp-block-calendar th{border:1px solid;padding:.25em}.wp-block-calendar th{font-weight:
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 62 6f 74 74 6f 6d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: rt}.wp-block-columns.are-vertically-aligned-center{align-items:center}.wp-block-columns.are-vertically-aligned-bottom{align-items:flex-end}@media (max-width:781px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:100%!important
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: .wp-block-post-comments .alignleft{float:left}.wp-block-post-comments .alignright{float:right}.wp-block-post-comments .navigation:after{clear:both;content:"";display:table}.wp-block-post-comments .commentlist{clear:both;list-style:none;margin:0;padding:0}
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d Data Ascii: input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;display:block;width:100%}.wp-block-post-comments .comment-form-cookies-consent{display:flex;gap:.25em}.wp-block-post-comments .comment-form
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 69 6f 75 73 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 Data Ascii: ious:last-child{margin-right:0}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow{display:inline-block;margin-right:1ch}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow:not(.is-arrow-chevron){transform:sca
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 Data Ascii: ck-cover-image.has-background-dim:not([class=-background-color]),.wp-block-cover.has-background-dim:not([class=-background-color]){background-color:#000}.wp-block-cover .has-background-dim.has-background-gradient,.wp-block-cover-image .has-background-di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:49 UTC	668	OUT	GET /wp-content/plugins/social-warfare/assets/css/style.min.css?ver=4.4.4 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:49 UTC	803	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Fri, 05 Jan 2024 10:58:34 GMT vary: Accept-Encoding etag: W/"6597e0da-18070" expires: Wed, 19 Jun 2024 15:59:31 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BPzOq%2B14FAQBpMRf%2Bi7wT2dyQ%2BVvwpIopfn3jSV%2FxAKHyZ%2BZsuRh1EokLhnpIV2SMAc8ql9RzvF1UlDUaEwniPwKvrl0SDevE6uhZIjxnY1KYt5QKDCF13Y3hHjlFK7FfrE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37647a844363-EWR
2024-05-24 06:26:49 UTC	566	IN	Data Raw: 37 63 37 63 0d 0a 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 61 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 61 6c 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 6e 63 5f 74 77 65 65 74 43 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 20 61 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 6f 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 66 6c 61 74 5f 66 72 65 73 68 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 62 Data Ascii: 7c7c.swp_social_panel.swp_default_full_color a,html body .swp_social_panel.swp_individual_full_color .nc_tweetContainer:hover a,body .swp_social_panel.swp_other_full_color:hover a{color:#fff}.swp_social_panel.swp_flat_fresh.swp_default_full_color .swp_b
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 62 6c 6f 67 67 65 72 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 6f 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2e 73 77 70 5f 62 6c 6f 67 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 35 37 32 32 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 33 39 30 30 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 62 6c 6f 67 67 65 72 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 Data Ascii: _color .swp_blogger:hover,body .swp_social_panel.swp_other_full_color:hover .swp_blogger{background:#ff5722;border:1px solid #ee3900}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_blogger,html body .swp_social_panel.swp_three_dee.swp_individu
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 62 75 66 66 65 72 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 6f 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2e 73 77 70 5f 62 75 66 66 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 32 33 62 34 33 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 63 32 31 32 36 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 62 75 66 66 65 72 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 Data Ascii: full_color .swp_buffer:hover,body .swp_social_panel.swp_other_full_color:hover .swp_buffer{background:#323b43;border:1px solid #1c2126}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_buffer,html body .swp_social_panel.swp_three_dee.swp_individ
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 6f 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2e 73 77 70 5f 65 6c 6c 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 65 6c 6c 6f 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 61 6c 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 65 6c 6c 6f 3a 68 6f 76 65 72 2c 62 6f Data Ascii: hover,body .swp_social_panel.swp_other_full_color:hover .swp_ello{background:#000;border:1px solid #000}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_ello,html body .swp_social_panel.swp_three_dee.swp_individual_full_color .swp_ello:hover,bo
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 23 36 62 63 63 65 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 66 62 64 65 32 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 65 6d 61 69 6c 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 61 6c 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 65 6d 61 69 6c 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 6f 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 Data Ascii: ackground:#6bcce9;border:1px solid #3fbde2}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_email,html body .swp_social_panel.swp_three_dee.swp_individual_full_color .swp_email:hover,body .swp_social_panel.swp_three_dee.swp_other_full_color:hov
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 23 32 64 62 65 36 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 33 39 35 34 62 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 65 76 65 72 6e 6f 74 65 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 61 6c 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 65 76 65 72 6e 6f 74 65 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 6f 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2e Data Ascii: #2dbe60;border:1px solid #23954b}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_evernote,html body .swp_social_panel.swp_three_dee.swp_individual_full_color .swp_evernote:hover,body .swp_social_panel.swp_three_dee.swp_other_full_color:hover .
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 20 2e 73 77 70 5f 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 38 37 37 66 32 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 62 35 66 63 63 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 66 61 63 65 62 6f 6f 6b 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 61 6c 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 Data Ascii: .swp_facebook{background:#1877f2;border:1px solid #0b5fcc}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_facebook,html body .swp_social_panel.swp_three_dee.swp_individual_full_color .swp_facebook:hover,body .swp_social_panel.swp_three_dee.sw
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2e 73 77 70 5f 66 6c 69 63 6b 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 30 30 38 34 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 30 30 36 61 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 66 6c 69 63 6b 72 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 61 6c 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 66 6c 69 63 6b 72 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 Data Ascii: full_color:hover .swp_flickr{background:#ff0084;border:1px solid #cc006a}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_flickr,html body .swp_social_panel.swp_three_dee.swp_individual_full_color .swp_flickr:hover,body .swp_social_panel.swp_th
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2e 73 77 70 5f 66 6c 69 70 62 6f 61 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 62 66 32 36 32 36 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 34 31 65 31 65 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 66 6c 69 70 62 6f 61 72 64 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 69 6e 64 69 76 69 64 75 61 6c 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 66 6c 69 70 62 6f 61 72 64 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 Data Ascii: ther_full_color:hover .swp_flipboard{background:#bf2626;border:1px solid #941e1e}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_flipboard,html body .swp_social_panel.swp_three_dee.swp_individual_full_color .swp_flipboard:hover,body .swp_socia
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 6f 72 20 2e 73 77 70 5f 68 61 63 6b 65 72 5f 6e 65 77 73 3a 68 6f 76 65 72 2c 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 6f 74 68 65 72 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2e 73 77 70 5f 68 61 63 6b 65 72 5f 6e 65 77 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 38 35 36 32 33 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 63 34 35 31 63 7d 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f 64 65 66 61 75 6c 74 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 20 2e 73 77 70 5f 68 61 63 6b 65 72 5f 6e 65 77 73 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 2e 73 77 70 5f 74 68 72 65 65 5f 64 65 65 2e 73 77 70 5f Data Ascii: or .swp_hacker_news:hover,body .swp_social_panel.swp_other_full_color:hover .swp_hacker_news{background:#d85623;border:1px solid #ac451c}.swp_social_panel.swp_three_dee.swp_default_full_color .swp_hacker_news,html body .swp_social_panel.swp_three_dee.swp_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:49 UTC	651	OUT	GET /wp-content/themes/patriotjournal/style.css?v=1.0.20 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:49 UTC	847	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: minify Cf-Polished: origSize=34412 etag: W/"6645ed55-866c" expires: Wed, 19 Jun 2024 15:59:31 GMT last-modified: Thu, 16 May 2024 11:26:13 GMT vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=grFeOShYj%2BkDgKaJDq0z8EP8nHa6ScMu5nlWNHY5wuJTUFBzaSylANAsZK5NGdsp8TFjVNFkUgrvw2m4ecFNmQ5%2Fc3IQHX9ouZt%2BdvNqQYI%2FGBelKZF1Vixg66Wxbn%2F0nPo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37647d277d0b-EWR
2024-05-24 06:26:49 UTC	522	IN	Data Raw: 36 37 33 63 0d 0a 68 74 6d 6c 7b 2d 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 20 32 30 70 78 7d 2e 68 65 61 64 65 72 20 2e 66 61 63 65 62 6f 6f 6b 2d 6c 69 6e 6b 20 61 20 73 76 67 2c 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 2d 62 74 6e 20 73 76 67 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 68 65 61 64 65 72 20 2e 6d 61 69 6e 2d 6e 61 76 20 61 2c 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 2d 62 74 6e 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 20 6c 69 20 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 20 73 61 6e 73 20 70 72 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 70 6f 73 74 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 68 6f 76 65 72 20 2e 69 6d Data Ascii: 673chtml{--scrollbar-width: 20px}.header .facebook-link a svg,.header .menu-btn svg{fill:#fff}.header .main-nav a,.header .menu-btn .dropdown .menu-content ul li a{font-family:source sans pro,sans-serif;font-weight:600}.post .image-container a:hover .im
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 72 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 39 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 30 20 30 20 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 32 70 78 7d 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 Data Ascii: ro,sans-serif;font-size:19px;line-height:27px}p{margin:0 0 40px;padding:0;letter-spacing:.2px}a{color:inherit;text-decoration:underline}a:hover{text-decoration:none}*,:after,:before{box-sizing:border-box;-moz-box-sizing:border-box;-webkit-box-sizing:borde
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 74 72 61 6e 73 70 61 72 65 6e 74 7d 69 6e 70 75 74 3a 66 6f 63 75 73 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 69 6e 70 75 74 3a 66 6f 63 75 73 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 68 65 61 64 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 37 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 35 70 78 20 73 6f 6c 69 64 20 23 39 38 30 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 33 31 34 66 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 68 65 61 64 65 72 20 2e 66 61 63 65 62 6f 6f 6b 2d 6c 69 6e 6b 7b 77 69 64 74 68 Data Ascii: transparent}input:focus::-moz-placeholder{color:transparent}input:focus:-ms-input-placeholder{color:transparent}.header{width:100%;height:75px;padding:15px 0;border-bottom:5px solid #980000;background:#00314f;position:relative}.header .facebook-link{width
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 2d 62 74 6e 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 20 6c 69 20 61 7b 63 6f 6c 6f 72 3a 23 30 30 33 31 34 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 2d 62 74 6e 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 20 75 6c 20 6c 69 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 68 65 61 64 65 72 20 2e 6d 61 69 6e 2d 6e 61 76 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 30 30 70 78 Data Ascii: rgin-bottom:3px;width:100%;text-align:center}.header .menu-btn .dropdown .menu-content ul li a{color:#00314f;text-decoration:none}.header .menu-btn .dropdown .menu-content ul li a:hover{text-decoration:underline}.header .main-nav{display:block;width:300px
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 69 6c 65 2d 6e 61 76 20 75 6c 20 6c 69 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 6f 62 69 6c 65 2d 6e 61 76 20 61 7b 63 6f 6c 6f 72 3a 23 30 30 33 31 34 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 20 73 61 6e 73 20 70 72 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6e 61 76 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 73 69 64 65 62 61 72 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 72 69 67 Data Ascii: ile-nav ul li{display:block}.mobile-nav a{color:#00314f;font-family:source sans pro,sans-serif;font-weight:600;text-decoration:none;display:block;margin-bottom:2px}.mobile-nav a:hover{text-decoration:underline}.sidebar{width:300px}.page-content{margin-rig
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 64 79 2d 74 65 78 74 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 2e 62 6f 64 79 2d 74 65 78 74 20 62 6c 6f 63 6b 71 75 6f 74 65 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 35 38 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 36 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 35 30 70 78 3b 6d 61 72 67 69 6e 3a 30 7d 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 2e 62 6f 64 79 2d 74 65 78 74 20 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 30 31 43 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 35 2e 31 35 37 65 6d 3b 6c 69 6e 65 Data Ascii: dy-text img{max-width:100%;height:auto}.page-content .body-text blockquote{font-style:italic;font-size:1.158em;line-height:1.36;position:relative;padding:0 0 0 50px;margin:0}.page-content .body-text blockquote:before{content:"\201C";font-size:5.157em;line
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 74 68 6f 72 2d 62 61 72 20 2e 62 69 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 35 70 78 7d 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 2e 61 75 74 68 6f 72 2d 62 61 72 20 2e 62 69 6f 20 2e 6e 61 6d 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 73 6f 75 72 63 65 20 73 65 72 69 66 20 70 72 6f 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 37 34 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 34 32 3b 63 6f 6c 6f 72 3a 23 30 30 33 31 34 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 2e 61 75 74 68 6f 72 2d 62 61 72 20 2e 62 69 6f 20 2e 74 65 78 74 2c 2e 70 61 67 65 2d 63 6f Data Ascii: thor-bar .bio{margin-left:125px}.page-content .author-bar .bio .name{font-family:"source serif pro",sans-serif;font-size:1.474em;line-height:1.142;color:#00314f;font-weight:600;margin-top:8px;margin-bottom:8px}.page-content .author-bar .bio .text,.page-co
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 72 61 70 7d 2e 73 69 64 65 2d 73 68 61 72 65 20 74 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 69 64 65 2d 73 68 61 72 65 20 2e 61 74 34 2d 6a 75 6d 62 6f 73 68 61 72 65 20 2e 61 74 34 2d 63 6f 75 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 37 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 37 30 70 78 7d 2e 73 69 64 65 2d 73 68 61 72 65 20 2e 61 74 34 2d 6a 75 6d 62 6f 73 68 61 72 65 20 2e 61 74 34 2d 63 6f 75 6e 74 2c 2e 73 69 64 65 2d 73 68 61 72 65 20 2e 61 74 34 2d 6a 75 6d 62 6f 73 68 61 72 65 20 2e 61 74 34 2d 63 6f 75 6e 74 20 73 70 61 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 73 6f 75 72 63 65 20 73 65 72 69 66 20 70 72 6f 22 2c 73 61 6e 73 Data Ascii: rap}.side-share td{display:block!important}.side-share .at4-jumboshare .at4-count-container{border:0;padding:0;width:70px;min-width:70px}.side-share .at4-jumboshare .at4-count,.side-share .at4-jumboshare .at4-count span{font-family:"source serif pro",sans
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 62 61 72 20 2e 73 68 61 72 65 2d 62 74 6e 2c 2e 73 68 61 72 65 2d 62 61 72 20 2e 73 68 61 72 65 2d 74 69 74 6c 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 20 73 61 6e 73 20 70 72 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 73 68 61 72 65 2d 62 61 72 20 2e 73 68 61 72 65 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 30 30 33 31 34 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 73 68 61 72 65 2d 62 61 Data Ascii: bar .share-btn,.share-bar .share-title{display:inline-block;font-family:source sans pro,sans-serif;font-weight:700;font-size:14px;margin-right:5px;text-transform:uppercase}.share-bar .share-title{color:#00314f;line-height:45px;vertical-align:top}.share-ba
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 34 2d 6a 75 6d 62 6f 73 68 61 72 65 20 2e 61 74 2d 73 68 61 72 65 2d 62 74 6e 2e 61 74 2d 73 76 63 2d 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 62 35 39 39 38 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 68 61 72 65 2d 62 61 72 20 2e 61 74 34 2d 6a 75 6d 62 6f 73 68 61 72 65 20 2e 61 74 2d 73 68 61 72 65 2d 62 74 6e 2e 61 74 2d 73 76 63 2d 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 61 63 65 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 68 61 72 65 2d 62 61 72 20 2e 61 74 34 2d 6a 75 6d 62 6f 73 68 61 72 65 20 2e 61 74 2d 73 68 61 72 65 2d 62 74 6e 2e 61 74 2d 73 76 63 2d 65 6d 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 32 64 38 33 35 21 69 6d 70 6f 72 74 61 Data Ascii: 4-jumboshare .at-share-btn.at-svc-facebook{background-color:#3b5998!important}.share-bar .at4-jumboshare .at-share-btn.at-svc-twitter{background-color:#00aced!important}.share-bar .at4-jumboshare .at-share-btn.at-svc-email{background-color:#82d835!importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:49 UTC	673	OUT	GET /wp-content/themes/patriotjournal/layouts/fixed-sidebar/style.css?v=1.0.20 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:49 UTC	842	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: minify Cf-Polished: origSize=755 etag: W/"66313a21-2f3" expires: Wed, 19 Jun 2024 15:59:31 GMT last-modified: Tue, 30 Apr 2024 18:36:17 GMT vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BG6kDCZE2FkauJl9%2Bw7BTaGWkFlEENnoOFAVQddt4e7lhjnRZGWpC9%2BhgI0Ca0mn3bSDx05xhXnRDSfD6ToQz5cZA1z%2FjoGcCzbVlrHCPDU%2Bx5MRpP4hjDzKDH4M0wIRGIY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37650ae98c23-EWR
2024-05-24 06:26:49 UTC	527	IN	Data Raw: 32 31 62 0d 0a 2e 66 69 78 65 64 2d 73 69 64 65 62 61 72 2d 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 69 78 65 64 2d 73 69 64 65 62 61 72 2d 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 64 65 62 61 72 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 33 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 66 69 78 65 64 2d 73 69 64 65 62 61 72 2d 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e Data Ascii: 21b.fixed-sidebar-page-container{position:relative}.fixed-sidebar-page-container .sidebar{float:none;position:absolute;right:0;top:0;width:300px;height:100%;display:flex;flex-direction:column;justify-content:space-between}.fixed-sidebar-page-container .
2024-05-24 06:26:49 UTC	19	IN	Data Raw: 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 0d 0a Data Ascii: :none!important}}
2024-05-24 06:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:49 UTC	631	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:49 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 04 Jan 2024 16:28:42 GMT vary: Accept-Encoding etag: W/"6596dcba-15601" expires: Wed, 19 Jun 2024 15:59:31 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bj12ybNKXbh%2BxWkPosTTQb5%2BymFlF0uLiucUUyTydrT%2FXXzlxeJvXyWkPINs2z2PKW2AmBYC%2BMjlg4hhEIj1Ag3KMm9vf9Mtc2Yf8ydgkIKZYEqzT9hmVViPD5VkMJMnUwM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37652aa119c7-EWR
2024-05-24 06:26:49 UTC	554	IN	Data Raw: 37 63 37 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7c70/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2c 75 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 43 3d 69 65 2e 64 6f 63 75 6d 65 6e 74 2c 75 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 Data Ascii: toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModu
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e Data Ascii: (-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(ce.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c 7c 31 31 3d 3d 3d 69 3f 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 39 3d 3d 3d 69 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 69 7c 7c 34 3d 3d 3d 69 3f 65 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 63 28 4f 62 6a 65 63 74 Data Ascii: reak;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1===i\|\|11===i?e.textContent:9===i?e.documentElement.textContent:3===i\|\|4===i?e.nodeValue:n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(c(Object
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 7d 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 66 2c 70 29 7d 3b 76 61 72 20 79 65 3d 43 2c 6d Data Ascii: eDocumentPosition(n)))};var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e}ce.escapeSelector=function(e){return(e+"").replace(f,p)};var ye=C,m
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 71 3d 2f 5e 68 5c 64 24 2f 69 2c 4c 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 48 3d 2f 5b 2b 7e 5d 2f 2c 4f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 50 3d 66 75 Data Ascii: \|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+ge+"((?:-\\d)?\\d)"+ge+"*\$\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|textarea\|button)$/i,q=/^h\d$/i,L=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,H=/[+~]/,O=new RegExp("\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\([^\\r\\n\\f])","g"),P=fu
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 53 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 72 65 28 74 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 Data Ascii: e.setAttribute("id",s=S)),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{return k.apply(n,f.querySelectorAll(c)),n}catch(e){h(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return re(t.replace(ve,"$1"),e,n,r)}function W(
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 63 65 2e 65 78 70 61 6e 64 6f 29 2e 6c 65 6e 67 74 68 7d 29 2c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 7d 29 2c 6c 65 2e 73 63 6f 70 65 3d 24 28 66 75 6e 63 Data Ascii: efaultView)&&t.top!==t&&t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=ce.expando,!T.getElementsByName\|\|!T.getElementsByName(ce.expando).length}),le.disconnectedMatch=$(function(e){return i.call(e,"*")}),le.scope=$(func
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 66 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 53 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 7e 3d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 Data Ascii: 'disabled'></a><select id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.querySelectorAll("[selected]").length\|\|d.push("\\["+ge+"*(?:value\|"+f+")"),e.querySelectorAll("[id~="+S+"-]").length\|\|d.push("~="),e.querySelectorAll("a#"
2024-05-24 06:26:49 UTC	1369	IN	Data Raw: 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 2c 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 74 29 7d 2c 49 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 3b 76 61 72 20 6e 3d 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 72 3d 6e 26 26 75 65 2e 63 61 6c 6c 28 62 2e 61 74 74 72 48 61 6e 64 Data Ascii: deType)return n}catch(e){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.ownerDocument\|\|e)!=T&&V(e),ce.contains(e,t)},I.attr=function(e,t){(e.ownerDocument\|\|e)!=T&&V(e);var n=b.attrHandle[t.toLowerCase()],r=n&&ue.call(b.attrHand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:49 UTC	639	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:50 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 04 Jan 2024 16:28:42 GMT vary: Accept-Encoding etag: W/"6596dcba-3509" expires: Wed, 19 Jun 2024 15:59:31 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311224 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HoL%2FoG4pWZIDXpDGjioUGUu52IxdWzbiAH1wwxj%2FXJCLe4sxo0EkASQ3GzjuP3AIvumebkRn5BCYlfUvBOdTK%2B0swlbeTduBi296lOt9u0AT01kNeHCUUcbRozKkFDAJDU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37668f85435e-EWR
2024-05-24 06:26:50 UTC	557	IN	Data Raw: 33 35 30 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 3509/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 5d 3c 2b 6f 5b 61 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 34 2e 31 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 73 2e 6d 69 67 72 61 74 65 44 69 73 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d 3d 21 30 7d 2c 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 65 6c Data Ascii: ]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)del
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 73 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 75 28 22 71 75 69 72 6b 73 22 2c 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 64 2c 6c 2c 70 2c 66 3d 7b 7d 2c 6d 3d 73 2e 66 6e 2e 69 6e 69 74 2c 79 3d 73 2e 66 69 6e 64 2c 68 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a Data Ascii: igrateTrace=!0),s.migrateReset=function(){o={},s.migrateWarnings.length=0},"BackCompat"===n.document.compatMode&&u("quirks","jQuery is not compatible with Quirks Mode");var d,l,p,f={},m=s.fn.init,y=s.find,h=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#]
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 4e 22 2c 22 6a 51 75 65 72 79 2e 70 61 72 73 65 4a 53 4f 4e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 63 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 79 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 22 6a 51 75 65 72 79 2e 68 6f 6c 64 52 65 61 64 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 75 6e 69 71 75 65 22 2c 73 2e 75 6e 69 71 75 65 53 6f 72 74 2c 22 75 6e 69 71 75 65 22 2c 22 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 53 6f 72 74 22 29 2c 72 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 65 78 70 72 Data Ascii: N","jQuery.parseJSON is deprecated; use JSON.parse"),c(s,"holdReady",s.holdReady,"holdReady","jQuery.holdReady is deprecated"),c(s,"unique",s.uniqueSort,"unique","jQuery.unique is deprecated; use jQuery.uniqueSort"),r(s.expr,"filters",s.expr.pseudos,"expr
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 22 69 73 57 69 6e 64 6f 77 22 2c 22 6a 51 75 65 72 79 2e 69 73 57 69 6e 64 6f 77 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 29 2c 73 2e 61 6a 61 78 26 26 28 6c 3d 73 2e 61 6a 61 78 2c 70 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 2c 69 28 73 2c 22 61 6a 61 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 6d 69 73 65 26 26 28 63 28 65 2c 22 Data Ascii: Query.isFunction() is deprecated"),c(s,"isWindow",function(e){return null!=e&&e===e.window},"isWindow","jQuery.isWindow() is deprecated")),s.ajax&&(l=s.ajax,p=/(=)\?(?=&\|$)\|\?\?/,i(s,"ajax",function(){var e=l.apply(this,arguments);return e.promise&&(c(e,"
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 20 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 3b 65 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 2c 65 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 21 65 26 26 21 31 21 3d 3d 74 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 29 7c 7c 22 22 29 7d 29 29 7d 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 29 3b 76 61 72 20 51 2c 41 2c 52 3d Data Ascii: ) is deprecated"),this.each(function(){var e=this.getAttribute&&this.getAttribute("class")\|\|"";e&&s.data(this,"__className__",e),this.setAttribute&&this.setAttribute("class",!e&&!1!==t&&s.data(this,"__className__")\|\|"")}))},"toggleClass-bool");var Q,A,R=
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 79 2e 63 73 73 4e 75 6d 62 65 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 67 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 22 6a 51 75 65 72 79 2e 63 73 73 4e 75 6d 62 65 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 73 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 3a 73 2e 63 73 73 4e 75 6d 62 65 72 3d 41 29 3a 41 3d 73 2e 63 73 73 4e 75 6d 62 65 72 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 69 28 73 2e 66 6e 2c 22 63 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 Data Ascii: y.cssNumber is deprecated"),Reflect.get.apply(this,arguments)},set:function(){return u("css-number","jQuery.cssNumber is deprecated"),Reflect.set.apply(this,arguments)}}):s.cssNumber=A):A=s.cssNumber,Q=s.fn.css,i(s.fn,"css",function(e,t){var r,n,o=this;re
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 6e 65 2d 61 72 67 22 29 2c 53 3d 73 2e 66 78 2e 69 6e 74 65 72 76 61 6c 2c 50 3d 22 6a 51 75 65 72 79 2e 66 78 2e 69 6e 74 65 72 76 61 6c 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 2c 6e 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 73 2e 66 78 2c 22 69 6e 74 65 72 76 61 6c 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 7c 7c 75 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 2c 50 29 2c 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 29 26 Data Ascii: ne-arg"),S=s.fx.interval,P="jQuery.fx.interval is deprecated",n.requestAnimationFrame&&Object.defineProperty(s.fx,"interval",{configurable:!0,enumerable:!0,get:function(){return n.document.hidden\|\|u("fx-interval",P),s.migrateIsPatchEnabled("fx-interval")&
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 3a 28 75 28 22 73 68 6f 72 74 68 61 6e 64 2d 72 65 6d 6f 76 65 64 2d 76 33 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 74 2b 22 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 73 70 6c 69 63 65 28 30 2c 30 2c 74 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 74 68 69 73 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 74 68 69 73 29 29 7d 2c 22 73 68 6f 72 74 68 61 6e 64 2d 72 65 6d 6f 76 65 64 2d 76 33 22 29 7d 29 2c 73 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 75 73 6f 75 74 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 Data Ascii: :(u("shorthand-removed-v3","jQuery.fn."+t+"() is deprecated"),e.splice(0,0,t),arguments.length?this.on.apply(this,e):(this.triggerHandler.apply(this,e),this))},"shorthand-removed-v3")}),s.each("blur focus focusin focusout resize scroll click dblclick mous
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 3b 72 65 74 75 72 6e 20 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2c 74 2e 62 6f 64 79 26 26 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 7d 76 61 72 20 46 3d 2f 3c 28 3f 21 61 72 65 61 7c 62 72 7c 63 6f 6c 7c 65 6d 62 65 64 7c 68 72 7c 69 6d 67 7c 69 6e 70 75 74 7c 6c 69 6e 6b 7c 6d 65 74 61 7c 70 61 72 61 6d 29 28 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5e 3e 5d 2a 29 5c 2f 3e 2f 67 69 3b 73 2e 55 4e 53 41 46 45 5f 72 65 73 74 6f 72 65 4c 65 67 61 63 79 48 74 6d 6c 50 72 65 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e){var t=n.document.implementation.createHTMLDocument("");return t.body.innerHTML=e,t.body&&t.body.innerHTML}var F=/<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\/\0>\x20\t\r\n\f])[^>])\/>/gi;s.UNSAFE_restoreLegacyHtmlPrefilter=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:50 UTC	635	OUT	GET /wp-content/themes/patriotjournal/js/clever_ads.js HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:50 UTC	851	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: minify Cf-Polished: origSize=111 etag: W/"651e8b1f-6f" expires: Wed, 19 Jun 2024 15:59:31 GMT last-modified: Thu, 05 Oct 2023 10:08:31 GMT vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 311224 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=evsMxcfmpWUaAqbZQjFkpW1pYxHb6DQebeXdkOF6c6qDL2acsHmAs9EeIGBrg%2BL7kaF%2Fh418J1VITSSrjD4nb3GtPyXQBdAT3ofsRYLKayaBEvb0vjieb05IpupyQd88QAw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37696aa9c436-EWR
2024-05-24 06:26:50 UTC	114	IN	Data Raw: 36 63 0d 0a 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 65 2e 69 64 3d 27 4c 45 53 66 62 6d 6b 64 55 65 78 56 27 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 0d 0a Data Ascii: 6cvar e=document.createElement('div');e.id='LESfbmkdUexV';e.style.display='none';document.body.appendChild(e);
2024-05-24 06:26:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:50 UTC	683	OUT	GET /wp-content/uploads/2024/01/logo-1.png HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:50 UTC	908	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:50 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=1958 Content-Disposition: inline; filename="logo-1.webp" etag: W/"65a50401-7a6" expires: Fri, 21 Jun 2024 19:52:09 GMT last-modified: Mon, 15 Jan 2024 10:08:01 GMT vary: Accept x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 119706 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7HvbKEshV96%2BlIym76xUlDXIiHvN9KpmgupvlfEe4JyiMj61rfFE0XvYLUAAWGxfwixMwdegUt7IRUz%2Fz67vW5ZfszhobnstqiW6DyXUywgNh8LQGEAqwhr5u7%2F3Ysqz1Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b3769aace8c96-EWR
2024-05-24 06:26:50 UTC	461	IN	Data Raw: 36 39 65 0d 0a 52 49 46 46 96 06 00 00 57 45 42 50 56 50 38 4c 89 06 00 00 2f e1 00 0b 10 e7 30 ff f3 3f ff 0a db b6 6d 63 e9 b4 9d 19 b0 5f 1c 00 80 03 00 0e 00 47 63 e0 70 0c 1a 81 40 a3 21 10 c2 07 40 08 1f b4 6d db 6a 2a 48 1b d3 55 c0 80 18 50 f6 ff ff a8 07 0c 55 d5 fd 1a d1 ff 09 c0 f7 55 db bb 7d c5 ff d6 da 4e 6b e4 d5 be d5 69 b9 6b 9b f2 96 16 2b a1 d0 8f 96 e8 74 66 db a8 8c 46 8b 45 86 d2 83 f3 de 8d ba 48 54 fa d1 ef 54 66 f4 27 33 8f ea a5 c0 dc c3 0f 65 8e a6 38 09 35 1f d5 08 cc 8e cb 50 4a 13 c5 3a 51 0c 07 93 e7 58 09 96 8f 7e a2 ec 86 79 e7 6d f7 21 92 67 9f e1 a5 b3 f8 0e c9 c3 3c d2 05 66 1f fa 8f 51 3f eb b6 c8 9b 71 dd 48 d2 7c 8a 1c 13 55 94 68 3f 45 da 07 74 e4 5d fb 27 d4 66 5a 4e de dd e7 a1 2b 50 9f 24 8f ea 5b d4 d2 c0 e4 f2 Data Ascii: 69eRIFFWEBPVP8L/0?mc_Gcp@!@mj*HUPUU}Nkik+tfFEHTTf'3e85PJ:QX~ym!g<fQ?qH\|Uh?Et]'fZN+P$[
2024-05-24 06:26:50 UTC	1240	IN	Data Raw: c9 e9 79 f5 5e 58 be e2 a4 32 cf 50 74 48 8e d2 f0 46 75 be 71 36 52 65 46 7f f2 f6 56 bd 12 25 2f b5 00 36 c1 1a 81 cd 37 4c 14 02 f2 46 c9 a6 b4 34 bf 01 fb 06 f7 b2 ec 86 39 30 37 ae ce fe ca 95 24 b7 ea 0d 2e 5a 6b b3 44 e1 2c 80 8e d7 b3 28 4e 61 7a 2b 78 ef 97 40 d9 dd 70 52 9b aa a4 e5 15 b5 bc c1 83 d9 9b eb 5b 85 6b b5 93 e4 de bc 91 ef 00 38 c1 01 4e 38 d4 4b 64 64 3a fe 6e cc 52 9d 52 d2 fa 0a 9a f8 46 7a 9f 87 ae 40 6e bd 93 e4 a9 bf 71 56 40 79 0a 5a a1 13 68 5e cb 1d f1 4c 93 2a de 2b ad 0b 7c 39 f8 41 97 b8 5f ef 24 19 ed 17 a2 06 d0 f3 7a 28 00 41 58 be 33 e0 8e 93 ba 54 2d 2d 0f 15 7a dc f8 41 8b 47 6b e3 2e e4 f8 de da 02 c0 2a b8 ba ae 6b 27 c4 fa 23 e1 87 5b 83 d4 a7 8c e4 1e f2 fc a8 be 53 db 71 39 98 39 17 6f c4 6d d2 b8 b6 7c 70 7c Data Ascii: y^X2PtHFuq6ReFV%/67LF4907$.ZkD,(Naz+x@pR[k8N8Kdd:nRRFz@nqV@yZh^L+\|9A_$z(AX3T--zAGk.k'#[Sq99om\|p\|
2024-05-24 06:26:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:50 UTC	694	OUT	GET /wp-content/uploads/2024/05/israel-dc-768x403.png HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:50 UTC	921	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:50 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=174671 Content-Disposition: inline; filename="israel-dc-768x403.webp" etag: W/"664636c8-2aa4f" expires: Wed, 19 Jun 2024 16:10:50 GMT last-modified: Thu, 16 May 2024 16:39:36 GMT vary: Accept x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 132350 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E4wdSVlKAgVXgO24UJk6HuosNMkxZMihrbDu2dKXxaT14Nw2HxiWFxvufmklYFAl5V3Eh3BPV8GINgTKvQEsKBmH2kmWN5aFrHvmb2lqhxO8NSIWi75Npp64WGK%2BmbCcp%2Bo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b376a3fda42f8-EWR
2024-05-24 06:26:50 UTC	448	IN	Data Raw: 37 63 30 36 0d 0a 52 49 46 46 04 50 02 00 57 45 42 50 56 50 38 4c f7 4f 02 00 2f ff 82 64 00 ff 07 cb b6 ed b4 cd 03 b1 94 72 fb c9 30 82 76 dc 1d 53 fa c5 66 d6 b2 de 34 20 09 00 9b b6 91 e5 30 b7 63 3e f2 79 1f dd 1f f6 96 3d 60 37 be 95 db 30 18 24 c8 91 24 29 92 aa b9 7b 78 f7 98 f1 7b 22 9e 8e 27 03 e3 60 0f 43 d5 fc 07 00 2b 8c 50 18 ca 21 c2 9a 76 36 1a 88 02 c6 08 c6 38 60 37 a1 49 70 10 80 c2 bd 95 57 1c 32 9c 82 08 86 22 47 a5 48 32 10 3c 4b 4a 21 02 81 c8 81 14 99 58 a1 44 88 ae c1 18 0a 86 29 73 e0 31 05 e5 42 51 2c 97 20 77 0c 42 03 33 86 a8 d2 b3 96 a1 05 b5 36 c3 00 6a 43 6c 63 d2 5a 69 25 e0 dc 68 c8 aa 85 3c 00 81 01 62 6b 75 c1 8d 40 fb b8 09 09 71 01 e7 22 ce 04 c4 87 9c 8f 04 30 7b 00 3b 3d 9c c9 6a c6 90 31 e6 14 4d a7 6c 46 8c 8c c4 Data Ascii: 7c06RIFFPWEBPVP8LO/dr0vSf4 0c>y=`70$$){x{"'`C+P!v68`7IpW2"GH2<KJ!XD)s1BQ, wB36jClcZi%h<bku@q"0{;=j1MlF
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: b1 13 2c a5 99 3a a5 15 a4 d2 3a 61 25 7b e0 a4 20 fe 7c 70 f0 1d 51 57 a0 3f a0 6c 62 d0 b9 65 b1 73 7f 58 e8 7f f4 a5 72 5f 6d ee e8 b6 2a 97 83 76 67 31 9d 89 17 33 37 ac ac 79 77 27 66 95 56 7d 88 97 a3 ff fd bb be d4 ea 61 05 50 13 68 15 1a 25 2f 93 cd 3d 10 09 0d 11 c5 a1 b7 cf 57 9f fa 4d 25 73 15 94 b0 06 7b b5 da ae 37 f6 23 e4 bf 02 db 76 22 db 05 55 c0 ed 84 8b 97 13 e1 6e 47 ae b8 bf db da 7b f7 e4 d5 95 f2 66 a0 e8 92 89 4f 9c 67 df d4 e9 e4 ca dd 49 e9 b1 4a 2a 15 76 8e f8 0e de 1b 19 7f 35 c2 38 5d 3a 17 3c 61 f8 06 6e 69 ee 67 73 33 42 d8 19 fb c6 ef 2a 72 7b f7 e8 f9 7e 96 c5 a7 94 4b 21 8c 85 e2 ca f9 db b3 8f f1 45 65 07 e3 0a 38 c7 61 db 36 92 14 cf ff 26 f1 cc f5 df ec ce f5 10 11 13 50 a5 77 00 08 21 04 40 a2 48 4a 63 4e 94 da 7a 08 Data Ascii: ,::a%{ \|pQW?lbesXr_mvg137yw'fV}aPh%/=WM%s{7#v"UnG{fOgIJv58]:<anigs3B*r{~K!Ee8a6&Pw!@HJcNz
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 36 e7 5d e7 a8 fc a4 97 a3 82 45 02 24 38 b6 a1 01 88 01 87 33 03 60 2e e1 50 65 d5 0a 17 98 0b 80 17 20 46 4b 4e 20 01 0c 65 6b 21 2a bc 2a 67 03 18 88 de c4 5d 07 52 9b 5e 90 aa f6 7f ff 72 d6 df d6 fe 49 ae 3a dd 77 28 ef fb da bf d3 a7 fb 74 47 f4 1f 16 6d 2b 75 1c 7c 01 22 49 d7 6a 3a 1a d0 3c 3a 5f 98 ac 6d 5b de 48 92 4e c8 bf f4 5b 2a bb 9a 7b 01 0c 99 15 f2 c9 88 63 25 15 33 33 d3 a8 97 c0 5d 30 ed 93 a3 aa 3d 30 d7 ac 29 39 33 fe a4 e6 de 07 67 0e 1b fe f7 79 3f 39 7a 05 f1 3d 7a 1f 3f 11 fd 97 05 db 4a 18 49 24 31 06 11 dd ae 61 15 01 d3 33 9f b8 6e 6d 77 9c 48 12 45 28 80 52 48 54 95 b2 4b 30 7e 06 49 54 96 90 14 11 52 08 e8 ac 59 95 20 c6 1b a0 d7 ca a4 cc 78 7b e9 fd 24 49 8f bb 2a bb ba 2f c7 3b 25 ca 06 fa 72 bc 41 a1 44 a1 ea f9 03 3d 73 Data Ascii: 6]E$83`.Pe FKN ek!*g]R^rI:w(tGm+u\|"Ij:<:_m[HN[{c%33]0=0)93gy?9z=z?JI$1a3nmwHE(RHTK0~ITRY x{$I*/;%rAD=s
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 16 aa 4b ea aa cc ec 71 74 78 a0 be aa aa fd e6 5d 5d 80 01 79 b3 a6 ed 48 86 b7 0e 56 47 d6 5f 8a 37 ef fd d3 db e5 e5 24 49 4a a9 aa 52 4a 17 5f 9d e7 1d ba 2d 3c 3c ff c4 c9 16 1f fb a0 4a 55 f2 54 45 15 be 70 f7 c8 dd db 0b d7 c8 1c 39 d6 d1 ae c0 fe c9 40 35 aa 4a 55 d2 d2 cb d3 93 f7 bf fe 74 3c 3f 75 f7 79 1c 8b 94 f6 7e 7a b9 bf dd cf ba c7 b9 0b c7 ee b3 d5 79 1d d7 9e 3b 78 ec e7 67 a7 e5 e8 65 1d c7 b9 5f 7b 5f f8 c8 85 97 67 bc c8 87 8d 91 e2 63 3c e3 2f 8f b7 c2 9f 7d 68 71 fe 81 b0 ee 28 ad ac 2e 0e f4 0f 37 2d e4 b2 1f 5a cb 78 e5 26 df f0 6f 9d 33 7b f9 fa e5 5f dd 1f 1e bf d1 ee 1c dd 66 7e 9d 99 0f b3 64 cf ee 47 87 3c 3b ca 0f f8 d1 38 cf 0e 26 63 e7 ba a5 5a b7 5b 49 d2 68 f0 ca ab 4a 44 a4 50 7b 8d 58 99 99 49 89 58 09 47 03 84 ba aa Data Ascii: Kqtx]]yHVG_7$IJRJ_-<<JUTEp9@5JUt<?uy~zy;xge_{_gc</}hq(.7-Zx&o3{_f~dG<;8&cZ[IhJDP{XIXG
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 35 6e a7 d6 46 6b f9 e2 d9 9a ba d6 5a b7 81 ac e5 c7 d8 ec eb 5b 33 20 b4 f7 71 ff 00 7a 87 4d 6f fd d8 07 f9 b4 b5 39 d0 93 e4 4e 72 9c 6c ee fb 5b 35 37 98 b0 af ad ad d6 c0 ce 00 8b 83 23 b8 53 19 1f 34 04 44 a5 90 97 30 26 c5 35 a7 72 65 d9 45 44 2c 55 d5 55 33 4b 38 50 58 49 a5 8a dc 06 c6 91 1f cb 6c 38 e8 cc 64 77 db b8 10 a3 15 6a bb e8 6b a7 08 dd f7 44 c2 1d e6 e0 6e 21 de 16 d1 fe 76 d3 3a ea 4b 04 a0 0c b5 0a 40 53 10 59 9d 59 87 fd ec 06 30 2b da 81 6b 2e 29 db 40 6d e1 dc 35 68 5b a2 df 8a 80 cc a8 68 b5 3b 42 b2 66 de d4 20 29 8f 32 ee 92 09 a1 0a 97 41 33 ad ab 32 31 93 67 f2 2a 8a 48 15 a5 f3 c3 c9 a5 4f 5e cc 67 b9 ec 39 13 d2 c6 de b9 e7 3c 0b 8b 6b 49 ae ce ab ea 74 3e a5 42 d2 7d 14 01 ae c8 85 e5 59 85 dd 48 22 df 1c 53 ba 33 77 20 Data Ascii: 5nFkZ[3 qzMo9Nrl[57#S4D0&5reED,UU3K8PXIl8dwjkDn!v:K@SYY0+k.)@m5h[h;Bf )2A321g*HO^g9<kIt>B}YH"S3w
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 13 b4 df 56 5d 15 a5 e9 c4 47 90 45 6c 36 48 16 d1 d0 b5 86 aa 41 ba ec 3d 21 1d d3 70 b2 64 78 94 a7 77 63 39 88 f7 74 65 5b 4f 8d 14 68 0c a9 91 ac ca 86 9a 12 3a 63 49 30 d7 57 5e 6e df da 0f f7 8e 79 76 7f 58 ef 44 6d 32 39 08 69 1f 0f 01 d2 de 6e 79 67 ea 69 db 3b b5 a1 b5 77 0c 4f b1 03 07 b7 40 d8 d0 9b bd b5 27 47 ad 9f 00 6f 97 56 12 82 0a 01 83 18 82 0f 9c b0 65 1a f4 55 01 b3 11 11 5a 86 18 a2 41 8a d3 8d cf db 33 9b 5b 6b bb aa 3a a3 31 4b a7 bb f7 bc af aa 6d cb a4 2f dd f6 1e 02 3f a0 8e a3 31 68 21 13 77 34 2a 03 9e a4 75 16 42 c2 75 8a 19 17 60 b9 94 30 13 65 27 99 81 e5 5d cc 9c b9 86 60 3f ff 1f 7f 16 71 52 ae f0 9e 52 d1 8f b6 22 a0 4d e9 84 4b 44 7c 1c 1e 41 75 32 8b ce 88 50 49 46 64 5e f7 1e 52 54 66 45 41 54 bc 7a 51 75 59 a9 f6 fd Data Ascii: V]GEl6HA=!pdxwc9te[Oh:cI0W^nyvXDm29inygi;wO@'GoVeUZA3[k:1Km/?1h!w4*uBu`0e']`?qRR"MKD\|Au2PIFd^RTfEATzQuY
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 13 39 d6 c4 1b 4b d9 00 16 e4 36 b4 4a cb 92 fb 5e 99 b6 6d 29 53 17 9b 9e 29 2f fb 82 eb 62 e3 b8 0b eb 1e a2 8e 47 d1 b2 0c 54 0e a2 a3 bf d5 7f 2a 37 fb a7 3b af bd 82 c7 e5 b5 1b ee d7 fd fc b9 e7 2e 92 c0 39 33 22 83 4e b0 bb cd f2 64 be 7c c2 7d 6f 02 95 1a 58 5b 10 c9 b5 5d 6e 75 37 c1 69 86 99 5f 41 33 89 52 90 46 83 8f 50 65 f6 7d de cd 33 f3 95 1d 39 13 a4 f5 2c a8 ba a5 67 ba 5a 01 40 2a 0d 0e c6 47 58 a6 66 d7 84 90 65 a0 53 a0 32 77 4f 4f ef af d3 22 40 77 07 12 ec 85 ca 00 05 b8 40 ba bd 7b b3 b3 33 fd 18 bd 1f 12 82 8d d5 21 e9 ed de 4f bb 99 34 07 91 f0 29 37 f3 88 92 87 cd 0d 1a e9 a7 64 32 37 c8 7c 60 2b 7b 1f 4d c2 62 a9 84 5b ef d8 d9 57 80 59 ef b7 26 83 f0 13 49 e0 33 3d 25 05 b3 ba a4 27 51 35 8b 68 0a 3a 48 11 52 e0 4d a5 ad c6 b9 Data Ascii: 9K6J^m)S)/bGT7;.93"Nd\|}oX[]nu7i_A3RFPe}39,gZ@GXfeS2wOO"@w@{3!O4)7d27\|`+{Mb[WY&I3=%'Q5h:HRM
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 8d 02 53 00 0d c0 c9 6b b8 6a 9b e9 dd ab 99 7b ab 15 c0 51 14 90 e6 c6 a5 56 c8 40 68 3f b4 b7 f6 9b 88 0c aa 4a 80 63 42 71 44 eb 2c c9 37 b7 f6 71 84 99 b7 de f2 17 57 3e 15 cc 6c e0 74 13 aa aa 4d cb a5 c8 db fc e4 68 6e 5e ce 7c 78 1f 82 92 15 0d 9e b1 f2 fd de 5d d6 ef ba aa df f5 c4 b5 cd 54 06 dc 46 75 c0 26 eb 42 96 93 e4 71 3d 4f ec 17 f9 10 d9 bd f6 bb bf e7 66 58 fc b3 25 d5 de 03 71 63 20 86 19 6e 2f 01 47 cd 46 df fb 83 41 58 84 63 59 e0 d9 44 31 9b 61 27 31 26 30 07 93 73 12 56 ed 95 49 b5 4e 84 47 27 ac 62 87 c3 ca e9 8b 7d 48 4b b2 b4 59 c9 9f 54 d0 5a 31 8e 69 3b d6 4c 13 bc 88 dc ec bc 34 5b 31 1c a9 ab 4e 0e e0 5f 73 ea a6 8c 55 2b 8e 5a 0d bd 17 a4 58 12 f9 a9 3d 03 c3 0b 14 cf 3d 7e f2 a5 57 29 63 26 d8 cd f9 2b 25 dc a2 f5 56 de 31 Data Ascii: Skj{QV@h?JcBqD,7qW>ltMhn^\|x]TFu&Bq=OfX%qc n/GFAXcYD1a'1&0sVING'b}HKYTZ1i;L4[1N_sU+ZX==~W)c&+%V1
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: ce dd 88 55 ff 28 0e 77 d2 6f bc 70 93 b1 f7 d4 75 21 94 7c fa cd 89 57 52 63 88 05 41 9c d2 44 ef c0 a8 fd 75 db f8 4e 4a ba a4 d2 1a e4 84 fb 25 9b 85 e8 58 4b a2 ea 7e f9 79 b9 5e 72 3f 2f f2 04 01 ff 41 7d 81 f7 59 47 03 44 6b 14 8c 66 91 17 2e 9b 73 20 ee ce 06 58 a5 d3 88 10 4e 78 65 67 b6 27 8e 79 ef 17 50 d8 10 56 a7 ba 9d 76 3b 3c ac 38 cb cd 78 96 7a 3d 74 b3 6c 8f 88 b6 d2 2d 59 ac ea 46 cc 11 0c b8 82 38 03 ba fb d8 b9 dd 4d 9b 2b 6f b6 79 6d ef 68 ed 7d 7c 18 80 7a ca fd d8 8c cb 5d e2 c0 6d 75 30 4c 2b 04 7a 6f ee 9d fb 3d 21 0b 77 cd 00 58 de 3f c8 0f 78 cf 38 57 a6 b7 72 4b d9 78 2b 42 83 86 49 77 f7 06 fb 3d 51 8d 32 2c fe 80 12 8d 93 a1 9e 6d 63 ad 30 78 ba 23 1a 55 94 d0 18 cf 9e 29 89 8e 2c 09 25 47 a5 e8 ec 40 95 4a 2c 4e 0b 6a 1e 91 Data Ascii: U(wopu!\|WRcADuNJ%XK~y^r?/A}YGDkf.s XNxeg'yPVv;<8xz=tl-YF8M+oymh}\|z]mu0L+zo=!wX?x8WrKx+BIw=Q2,mc0x#U),%G@J,Nj
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: f7 2c 3b 67 e0 ba 21 ca a8 21 d2 1b 63 30 4e b7 ad 09 15 27 61 04 62 63 dd be aa a5 08 70 0c 79 d4 13 59 52 99 33 82 9a 3b 6d b5 ea b5 21 5a d6 65 8b df 25 ba 13 09 e8 ef 29 ff e6 9d 0f 13 fd 05 22 a7 db e8 4e 53 bd ff 93 1f fd d9 20 8d a7 23 bb 7a c3 ee 04 4d 00 a5 b4 3c 7a 7a ef 21 dd b7 b2 7a 5e df 3f b0 30 ca 6f ac b6 74 68 b5 4b 6e 29 21 55 45 71 bc 09 0d b4 09 11 a2 5d 55 3c 17 e5 45 ee 25 22 71 b7 08 99 ab 6b 84 4b a8 c8 8b 8f fe fc b3 df d8 a4 c4 4e d6 b7 de b9 4f c1 c8 f7 ef 7a 0d 60 89 8e 9e 21 4a 04 61 9b 30 0f 0f 85 56 31 b0 ec 5b da f5 0e ff f7 ff f7 7f e5 dd dd cb db c7 4f fc f9 c8 9f fc b1 38 97 1a 9a 78 f9 95 83 3d 06 b5 9b 0a 2e b2 22 09 65 5b a3 ea 7b f1 13 a2 a2 d8 84 1f 2a 95 46 24 b6 40 04 58 3b 84 ea 58 e0 27 2a 6d 77 f7 bf b1 f2 98 Data Ascii: ,;g!!c0N'abcpyYR3;m!Ze%)"NS #zM<zz!z^?0othKn)!UEq]U<E%"qkKNOz`!Ja0V1[O8x=."e[{F$@X;X'mw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:50 UTC	653	OUT	GET /wp-content/plugins/social-warfare/assets/js/script.min.js?ver=4.4.4 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:50 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 05 Jan 2024 10:58:34 GMT vary: Accept-Encoding etag: W/"6597e0da-550e" expires: Wed, 19 Jun 2024 15:59:31 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W3DwSGn0Wh6nwImi5Jb7jUqlJ9fg%2BuDLp3pTM2s56EH2IER7UNaXNPdlOYkneD1WULP5WAQkFsHxtj8rPV3vSH%2FUksy6Yaqz%2FRffK1ETaYXyIzNjKKkr4pkXvVkap5P2iTo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b376af84a4372-EWR
2024-05-24 06:26:50 UTC	557	IN	Data Raw: 35 35 30 65 0d 0a 77 69 6e 64 6f 77 2e 73 6f 63 69 61 6c 57 61 72 66 61 72 65 3d 77 69 6e 64 6f 77 2e 73 6f 63 69 61 6c 57 61 72 66 61 72 65 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 74 79 70 65 6f 66 20 24 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6a 51 75 65 72 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 24 3d 6a 51 75 65 72 79 7d 65 6c 73 65 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 6f 63 69 61 6c 20 57 61 72 66 61 72 65 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 2c 20 6f 72 20 24 20 61 73 20 61 6e 20 61 6c 69 61 73 20 6f 66 20 6a 51 75 65 72 79 2e 20 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 72 20 74 68 Data Ascii: 550ewindow.socialWarfare=window.socialWarfare\|\|{};(function(window,$){"use strict";if(typeof $!="function"){if(typeof jQuery=="function"){var $=jQuery}else{console.log("Social Warfare requires jQuery, or $ as an alias of jQuery. Please make sure your th
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 6c 57 61 72 66 61 72 65 2e 69 6e 69 74 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 62 6f 64 79 22 29 2e 63 73 73 28 7b 70 61 64 64 69 6e 67 54 6f 70 3a 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 64 64 69 6e 67 54 6f 70 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 7d 29 3b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 65 73 74 61 62 6c 69 73 68 50 61 6e 65 6c 73 28 29 3b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 65 73 74 61 62 6c 69 73 68 42 72 65 61 6b 70 6f 69 6e 74 28 29 3b 69 66 28 21 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 6e 65 6c 73 2e 73 74 61 74 69 63 48 6f 72 69 7a 6f 6e 74 61 6c 26 26 21 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 6e Data Ascii: lWarfare.initPlugin=function(){$("body").css({paddingTop:socialWarfare.paddingTop,paddingBottom:socialWarfare.paddingBottom});socialWarfare.establishPanels();socialWarfare.establishBreakpoint();if(!socialWarfare.panels.staticHorizontal&&!socialWarfare.pan
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 53 69 64 65 22 29 3b 72 65 74 75 72 6e 20 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 6e 65 6c 73 7d 3b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 65 6d 70 68 61 73 69 7a 65 42 75 74 74 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 76 61 72 69 61 62 6c 65 73 2e 65 6d 70 68 61 73 69 7a 65 49 63 6f 6e 73 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 72 65 74 75 72 6e 7d 69 66 28 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 69 73 4d 6f 62 69 6c 65 28 29 29 7b 72 65 74 75 72 6e 7d 6a 51 75 65 72 79 28 22 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 3a 6e 6f 74 28 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 53 69 64 65 29 22 29 2e 65 61 Data Ascii: p_social_panelSide");return socialWarfare.panels};socialWarfare.emphasizeButtons=function(){if(typeof socialWarfare.variables.emphasizeIcons=="undefined"){return}if(socialWarfare.isMobile()){return}jQuery(".swp_social_panel:not(.swp_social_panelSide)").ea
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 64 74 68 2b 69 63 6f 6e 57 69 64 74 68 2b 32 35 2b 22 70 78 22 29 3b 24 28 74 68 69 73 29 2e 63 73 73 28 22 66 6c 65 78 22 2c 63 68 61 6e 67 65 2b 22 20 31 20 30 25 22 29 7d 29 3b 24 28 22 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 3a 6e 6f 74 28 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 53 69 64 65 29 22 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 72 65 73 65 74 53 74 61 74 69 63 50 61 6e 65 6c 29 7d 3b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 72 65 73 65 74 53 74 61 74 69 63 50 61 6e 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 3a 6e 6f 74 28 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 53 69 64 65 29 20 2e 6e 63 5f 74 77 Data Ascii: dth+iconWidth+25+"px");$(this).css("flex",change+" 1 0%")});$(".swp_social_panel:not(.swp_social_panelSide)").on("mouseleave",socialWarfare.resetStaticPanel)};socialWarfare.resetStaticPanel=function(){$(".swp_social_panel:not(.swp_social_panelSide) .nc_tw
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 5f 74 77 65 65 74 43 6f 6e 74 61 69 6e 65 72 22 29 2e 64 61 74 61 28 22 6e 65 74 77 6f 72 6b 22 29 7d 65 6c 73 65 20 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 73 77 70 5f 43 54 54 22 29 29 7b 6e 65 74 77 6f 72 6b 3d 22 63 74 74 22 7d 74 6f 70 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 59 2b 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2d 68 65 69 67 68 74 29 2f 32 3b 6c 65 66 74 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 58 2b 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2d 77 69 64 74 68 29 2f 32 3b 77 69 6e 64 6f 77 41 74 74 72 69 62 75 74 65 73 3d 22 68 65 69 67 68 74 3d 22 2b 68 65 69 67 68 74 2b 22 2c 77 69 64 74 68 3d 22 2b 77 69 64 74 68 2b 22 2c 74 6f 70 3d 22 2b 74 6f 70 2b 22 2c 6c 65 66 74 3d 22 2b 6c 65 Data Ascii: _tweetContainer").data("network")}else if($(this).hasClass("swp_CTT")){network="ctt"}top=window.screenY+(window.innerHeight-height)/2;left=window.screenX+(window.innerWidth-width)/2;windowAttributes="height="+height+",width="+width+",top="+top+",left="+le
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 72 66 61 72 65 2e 62 75 69 6c 64 50 6f 77 65 72 65 64 42 79 4c 69 6e 6b 28 29 3b 68 74 6d 6c 2b 3d 22 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 3b 24 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 68 74 6d 6c 29 3b 24 28 22 2e 70 69 6e 74 65 72 65 73 74 2d 6f 76 65 72 6c 61 79 22 29 2e 68 69 64 65 28 29 2e 66 61 64 65 49 6e 28 29 3b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 68 61 6e 64 6c 65 42 75 74 74 6f 6e 43 6c 69 63 6b 73 28 29 3b 76 61 72 20 6d 61 78 5f 68 65 69 67 68 74 3d 39 39 39 39 39 39 3b 76 61 72 20 69 74 65 72 61 74 69 6f 6e 3d 30 2c 69 6d 61 67 65 73 3d 24 28 22 2e 70 69 6e 74 65 72 65 73 74 2d 6f 76 65 72 6c 61 79 20 2e 70 69 6e 5f 69 6d 61 67 65 73 5f 77 72 61 70 70 65 72 20 69 6d 67 22 29 3b 69 6d 61 67 65 73 2e 6c 6f 61 64 28 66 75 6e 63 Data Ascii: rfare.buildPoweredByLink();html+="</div></div>";$("body").append(html);$(".pinterest-overlay").hide().fadeIn();socialWarfare.handleButtonClicks();var max_height=999999;var iteration=0,images=$(".pinterest-overlay .pin_images_wrapper img");images.load(func
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 61 72 66 61 72 65 2e 76 61 72 69 61 62 6c 65 73 2e 61 66 66 69 6c 69 61 74 65 5f 6c 69 6e 6b 2b 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 27 3b 61 6e 63 68 6f 72 5f 74 61 67 5f 63 6c 6f 73 65 3d 22 3c 2f 61 3e 22 7d 68 74 6d 6c 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 70 5f 70 6f 77 65 72 65 64 5f 62 79 22 3e 27 2b 61 6e 63 68 6f 72 5f 74 61 67 5f 6f 70 65 6e 2b 27 3c 73 70 61 6e 3e 50 6f 77 65 72 65 64 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 69 6d 67 20 73 72 63 3d 22 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 73 6f 63 69 61 6c 2d 77 61 72 66 61 72 65 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 61 64 6d 69 6e 2d 6f 70 74 69 6f 6e 73 2d 70 61 67 65 2f 73 6f 63 69 61 6c 2d 77 61 72 66 61 72 65 2d 70 72 6f 2d 6c 69 67 68 Data Ascii: arfare.variables.affiliate_link+'" target="_blank">';anchor_tag_close="</a>"}html='<div class="swp_powered_by">'+anchor_tag_open+'<span>Powered by</span> <img src="/wp-content/plugins/social-warfare/assets/images/admin-options-page/social-warfare-pro-ligh
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 7d 76 61 72 20 66 6c 6f 61 74 4c 6f 63 61 74 69 6f 6e 3d 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 6e 65 6c 73 2e 73 74 61 74 69 63 48 6f 72 69 7a 6f 6e 74 61 6c 2e 64 61 74 61 28 22 66 6c 6f 61 74 22 29 3b 76 61 72 20 6d 6f 62 69 6c 65 46 6c 6f 61 74 4c 6f 63 61 74 69 6f 6e 3d 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 6e 65 6c 73 2e 73 74 61 74 69 63 48 6f 72 69 7a 6f 6e 74 61 6c 2e 64 61 74 61 28 22 66 6c 6f 61 74 2d 6d 6f 62 69 6c 65 22 29 3b 76 61 72 20 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 70 61 6e 65 6c 73 2e 73 74 61 74 69 63 48 6f 72 69 7a 6f 6e 74 61 6c 2e 64 61 74 61 28 22 66 6c 6f 61 74 2d 63 6f 6c 6f 72 22 29 3b 76 61 72 20 77 72 61 70 70 65 72 3d 24 28 27 3c 64 69 76 20 63 6c 61 Data Ascii: }var floatLocation=socialWarfare.panels.staticHorizontal.data("float");var mobileFloatLocation=socialWarfare.panels.staticHorizontal.data("float-mobile");var backgroundColor=socialWarfare.panels.staticHorizontal.data("float-color");var wrapper=$('<div cla
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 68 61 73 43 6c 61 73 73 28 22 73 77 70 2d 68 69 64 64 65 6e 2d 70 61 6e 65 6c 2d 77 72 61 70 22 29 29 7b 70 61 72 65 6e 74 3d 70 61 72 65 6e 74 2e 70 61 72 65 6e 74 28 29 7d 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 61 6e 65 6c 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 29 7b 6c 65 66 74 3d 70 61 6e 65 6c 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 7d 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 61 6e 65 6c 2e 77 69 64 74 68 28 29 29 7b 77 69 64 74 68 3d 70 61 6e 65 6c 2e 77 69 64 74 68 28 29 7d 69 66 28 6c 65 66 74 3d 3d 30 29 7b 6c 65 66 74 3d 70 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 7d 69 66 28 77 69 64 74 68 3d 3d 31 30 30 7c 7c 77 69 64 74 68 3d 3d 30 29 7b 77 69 64 74 68 Data Ascii: hasClass("swp-hidden-panel-wrap")){parent=parent.parent()}if("undefined"!==typeof panel.offset().left){left=panel.offset().left}if("undefined"!==typeof panel.width()){width=panel.width()}if(left==0){left=parent.offset().left}if(width==100\|\|width==0){width
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 72 61 70 70 65 72 2c 20 2e 73 77 70 5f 73 6f 63 69 61 6c 5f 70 61 6e 65 6c 53 69 64 65 22 29 2e 68 69 64 65 28 29 7d 69 66 28 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 69 73 4d 6f 62 69 6c 65 28 29 29 7b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 74 6f 67 67 6c 65 4d 6f 62 69 6c 65 42 75 74 74 6f 6e 73 28 29 3b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 74 6f 67 67 6c 65 46 6c 6f 61 74 69 6e 67 48 6f 72 69 7a 6f 6e 74 61 6c 50 61 6e 65 6c 28 29 3b 72 65 74 75 72 6e 7d 69 66 28 6c 6f 63 61 74 69 6f 6e 3d 3d 22 72 69 67 68 74 22 7c 7c 6c 6f 63 61 74 69 6f 6e 3d 3d 22 6c 65 66 74 22 29 7b 73 6f 63 69 61 6c 57 61 72 66 61 72 65 2e 74 6f 67 67 6c 65 46 6c 6f 61 74 69 6e 67 56 65 72 74 69 63 61 6c 50 61 6e 65 6c 28 29 7d 69 66 28 6c 6f 63 61 74 69 6f 6e 3d 3d 22 Data Ascii: rapper, .swp_social_panelSide").hide()}if(socialWarfare.isMobile()){socialWarfare.toggleMobileButtons();socialWarfare.toggleFloatingHorizontalPanel();return}if(location=="right"\|\|location=="left"){socialWarfare.toggleFloatingVerticalPanel()}if(location=="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:50 UTC	651	OUT	GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.3 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:50 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 15 Jun 2023 15:05:28 GMT vary: Accept-Encoding etag: W/"648b28b8-5b89" expires: Wed, 19 Jun 2024 15:59:31 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FrQv8nihqrLYEqQcvi0rFn9TOZXJ0Qgs%2BxA%2BbGzxoytGwxltIu1wNblPS%2B%2BuK4yA75ZRCSM1jFOUe98kMCRakHggmczVTI69KzXjvggXnu47NGoCitKg7Pn%2BCI7gaZP%2BSOI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b376b28367ca2-EWR
2024-05-24 06:26:50 UTC	551	IN	Data Raw: 35 62 38 39 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 72 65 74 75 72 6e 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 64 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 66 6f 72 28 76 61 72 20 70 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 70 29 26 26 28 64 5b 70 5d 3d 62 5b 70 5d 29 7d 2c 65 78 74 65 6e 64 53 74 61 74 69 63 73 Data Ascii: 5b89"use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 73 2c 69 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 3c 6e 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 70 20 69 6e 20 73 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 70 29 26 26 28 74 5b 70 5d 3d 73 5b 70 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 5f 5f 61 73 73 69 67 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 72 65 61 63 74 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 67 65 74 74 65 72 2c 69 6e 74 65 72 76 61 6c 29 7b 76 6f 69 64 20 30 3d 3d Data Ascii: (){return __assign=Object.assign\|\|function(t){for(var s,i=1,n=arguments.length;i<n;i++)for(var p in s=arguments[i])Object.prototype.hasOwnProperty.call(s,p)&&(t[p]=s[p]);return t},__assign.apply(this,arguments)},reactive=function(getter,interval){void 0==
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 6e 67 2c 5f 74 68 69 73 2e 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 28 5f 74 68 69 73 2e 65 6c 29 2c 5f 74 68 69 73 2e 75 73 65 72 5f 6d 61 72 67 69 6e 73 2e 6d 61 72 67 69 6e 5f 74 6f 70 29 7d 7d 72 65 74 75 72 6e 20 53 74 61 74 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 75 73 65 72 5f 6d 61 72 67 69 6e 73 29 7b 76 61 72 20 5f 74 68 69 73 3d 74 68 69 73 3b 74 68 69 73 2e 75 73 65 72 5f 6d 61 72 67 69 6e 73 3d 75 73 65 72 5f 6d 61 72 67 69 6e 73 2c 74 68 69 73 2e 74 6f 70 5f 77 61 74 63 68 65 72 3d 72 65 61 63 74 69 76 65 28 74 68 69 73 2e 67 65 74 5f 74 6f 70 5f 6f 66 66 73 65 74 29 2c 74 68 69 73 2e 74 6f 70 5f 77 61 74 63 68 65 72 2e 6f 6e 5f 63 68 61 6e 67 65 28 28 66 75 6e 63 74 69 6f Data Ascii: ng,_this.get_prev_sibling(_this.el),_this.user_margins.margin_top)}}return StaticOffsets.prototype.init=function(user_margins){var _this=this;this.user_margins=user_margins,this.top_watcher=reactive(this.get_top_offset),this.top_watcher.on_change((functio
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 72 6e 20 6e 75 6c 6c 7d 29 3b 76 61 72 20 5f 74 68 69 73 3d 5f 73 75 70 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 6c 2c 67 65 74 5f 72 6f 6f 74 5f 6f 66 66 73 65 74 2c 6e 65 65 64 5f 74 6f 5f 63 61 6c 63 5f 6f 66 66 73 65 74 2c 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 3d 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 2c 5f 74 68 69 73 2e 62 6f 74 74 6f 6d 3d 30 2c 5f 74 68 69 73 2e 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 3d 30 2c 5f 74 68 69 73 2e 72 65 6c 61 74 69 76 65 5f 74 6f 70 3d 30 2c 5f 74 68 69 73 2e 68 65 69 67 68 74 3d 30 2c 5f 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 3d 7b 74 6f 70 3a 30 2c 62 6f 74 74 6f 6d 3a 30 7d 2c 5f 74 Data Ascii: rn null});var _this=_super.call(this,el,get_root_offset,need_to_calc_offset,get_prev_sibling)\|\|this;return _this.get_next_sibling=get_next_sibling,_this.bottom=0,_this.max_top_offset=0,_this.relative_top=0,_this.height=0,_this.position={top:0,bottom:0},_t
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 74 5f 6d 61 78 5f 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 29 7b 74 68 69 73 2e 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 3d 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 2c 74 68 69 73 2e 72 65 6c 61 74 69 76 65 5f 74 6f 70 3d 74 68 69 73 2e 67 65 74 5f 72 65 6c 61 74 69 76 65 5f 74 6f 70 28 29 7d 2c 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 70 6f 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 26 26 74 68 69 73 2e 65 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3f 7b 74 6f 70 3a 74 68 69 73 2e 65 6c 2e 6f 66 66 73 65 74 54 6f 70 2c 62 6f 74 74 6f 6d 3a 74 68 69 73 2e 65 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e Data Ascii: t_max_offset=function(max_top_offset){this.max_top_offset=max_top_offset,this.relative_top=this.get_relative_top()},DynamicOffsets.prototype.get_position=function(){return this.el&&this.el.parentElement?{top:this.el.offsetTop,bottom:this.el.parentElement.
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 61 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 3d 28 5f 61 3d 74 68 69 73 2e 65 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 5f 61 3f 76 6f 69 64 20 30 3a 5f 61 2e 69 6e 6e 65 72 48 54 4d 4c 29 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 71 75 65 72 79 41 6c 6c 57 69 64 67 65 74 73 43 6f 6e 74 61 69 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 63 6c 61 73 73 4e 61 6d 65 29 7b 72 65 74 75 72 6e 5b 5d 2e 63 6f 6e 63 61 74 28 41 72 72 61 79 2e 66 72 6f 6d 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 22 2e Data Ascii: ion(){return this.el},BaseWidget.prototype.toString=function(){var _a;return"".concat(null===(_a=this.el)\|\|void 0===_a?void 0:_a.innerHTML)},BaseWidget.queryAllWidgetsContainers=function(className){return[].concat(Array.from(document.querySelectorAll(".".
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 6c 65 63 74 6f 72 73 26 26 28 73 65 6c 65 63 74 6f 72 73 3d 5b 5d 29 2c 73 65 6c 65 63 74 6f 72 73 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 21 2f 5e 5b 61 2d 7a 5d 2f 69 2e 74 65 73 74 28 73 29 7d 29 29 3f 73 65 6c 65 63 74 6f 72 73 3a 73 65 6c 65 63 74 6f 72 73 2e 63 6f 6e 63 61 74 28 73 65 6c 65 63 74 6f 72 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 22 23 22 2e 63 6f 6e 63 61 74 28 73 29 7d 29 29 29 7d 2c 71 75 65 72 79 45 6c 65 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 73 65 6c 65 63 74 6f 72 73 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 73 65 6c 65 63 74 6f 72 73 26 26 28 73 65 6c 65 63 74 6f 72 73 3d 5b 5d 29 2c 41 72 72 61 79 2e 66 72 6f 6d 28 73 65 6c 65 63 74 6f 72 73 Data Ascii: lectors&&(selectors=[]),selectors.some((function(s){return!/^[a-z]/i.test(s)}))?selectors:selectors.concat(selectors.map((function(s){return"#".concat(s)})))},queryElements=function(selectors){return void 0===selectors&&(selectors=[]),Array.from(selectors
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 6c 69 6e 67 29 2c 5f 74 68 69 73 7d 72 65 74 75 72 6e 20 5f 5f 65 78 74 65 6e 64 73 28 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2c 5f 73 75 70 65 72 29 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 75 73 65 72 5f 6d 61 72 67 69 6e 73 29 7b 76 61 72 20 5f 74 68 69 73 3d 74 68 69 73 3b 5f 73 75 70 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 75 6e 74 2e 63 61 6c 6c 28 74 68 69 73 2c 75 73 65 72 5f 6d 61 72 67 69 6e 73 29 2c 74 68 69 73 2e 65 6c 26 26 74 68 69 73 2e 65 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 74 68 69 73 2e 73 74 6f 72 65 5f 73 74 79 6c 65 28 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 68 69 73 2e 65 6c 29 29 2c 74 68 69 73 2e 73 74 6f 72 65 Data Ascii: ling),_this}return __extends(PositionWidget,_super),PositionWidget.prototype.mount=function(user_margins){var _this=this;_super.prototype.mount.call(this,user_margins),this.el&&this.el.parentElement&&(this.store_style(getComputedStyle(this.el)),this.store
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 6e 6e 65 64 3d 21 30 2c 74 68 69 73 2e 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 46 69 78 65 64 57 69 64 67 65 74 5f 5f 66 69 78 65 64 5f 77 69 64 67 65 74 5f 5f 70 69 6e 6e 65 64 22 29 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 70 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 26 26 74 68 69 73 2e 65 6c 26 26 28 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 3d 21 31 2c 74 68 69 73 2e 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 46 69 78 65 64 57 69 64 67 65 74 5f 5f 66 69 78 65 64 5f 77 69 64 67 65 74 5f 5f 70 69 6e 6e 65 64 22 29 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 72 65 5f 73 74 79 6c 65 Data Ascii: nned=!0,this.el.classList.add("FixedWidget__fixed_widget__pinned"))},PositionWidget.prototype.unpin=function(){this.is_pinned&&this.el&&(this.is_pinned=!1,this.el.classList.remove("FixedWidget__fixed_widget__pinned"))},PositionWidget.prototype.store_style
2024-05-24 06:26:50 UTC	1369	IN	Data Raw: 69 74 5f 72 65 63 74 29 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 5b 70 72 6f 70 5d 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 69 6e 69 74 5f 72 65 63 74 5b 70 72 6f 70 5d 2c 22 70 78 22 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 7d 28 42 61 73 65 57 69 64 67 65 74 29 2c 46 69 78 65 64 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 5f 73 75 70 65 72 29 7b 66 75 6e 63 74 69 6f 6e 20 46 69 78 65 64 57 69 64 67 65 74 28 65 6c 29 7b 76 61 72 20 5f 74 68 69 73 3d 5f 73 75 70 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 6c 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 67 65 74 5f 72 6f 6f 74 5f 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 5f 74 68 69 73 2e 65 6c 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 2e 4d 41 58 Data Ascii: it_rect)this.el.style[prop]="".concat(this.init_rect[prop],"px")},PositionWidget}(BaseWidget),FixedWidget=function(_super){function FixedWidget(el){var _this=_super.call(this,el)\|\|this;return _this.get_root_offset=function(){if(!_this.el)return Number.MAX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:50 UTC	663	OUT	GET /wp-content/plugins/inboxfirst-by-klicked-master/assets/subscribe.js?ver=1.1.2 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:50 UTC	852	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: minify Cf-Polished: origSize=933 etag: W/"5e4cec4e-3a5" expires: Wed, 19 Jun 2024 15:59:31 GMT last-modified: Wed, 19 Feb 2020 08:05:34 GMT vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 311223 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gf1i4lU7vVMJc8etFQSkDWkCbmnBJu07x9m%2BLt434ez3KcRbMM%2BapGaLIVtH0nB4PWNMSxY6yfw4AK6PCGeGKPAjna16diNPF12W2ca5z22uwFrNn6NS2NN36hqjMT0eMFc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b376b6a0219fb-EWR
2024-05-24 06:26:50 UTC	517	IN	Data Raw: 32 32 37 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 28 27 62 75 74 74 6f 6e 2e 69 66 6b 6c 69 63 6b 65 64 2d 73 75 62 73 63 72 69 62 65 2d 62 74 6e 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 6e 70 75 74 49 44 3d 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 69 6e 70 75 74 27 29 3b 76 61 72 20 65 6d 61 69 6c 3d 24 28 27 23 27 2b 69 6e 70 75 74 49 44 29 2e 76 61 6c 28 29 3b 76 61 72 20 69 64 3d 24 28 27 23 27 2b 69 6e 70 75 74 49 44 29 2e 64 61 74 61 28 27 69 64 27 29 3b 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 27 2e 69 66 6b 6c 69 63 6b 65 64 2d 73 75 62 73 63 72 69 62 65 27 29 2e 68 69 64 65 28 29 3b 24 28 27 2e 69 66 6b 6c 69 63 6b 65 64 Data Ascii: 227jQuery(document).ready(function($){$('button.ifklicked-subscribe-btn').on('click',function(){var inputID=$(this).data('input');var email=$('#'+inputID).val();var id=$('#'+inputID).data('id');$(this).parent('.ifklicked-subscribe').hide();$('.ifklicked
2024-05-24 06:26:50 UTC	41	IN	Data Raw: 65 2d 27 2b 69 6e 70 75 74 49 44 29 2e 68 74 6d 6c 28 72 65 73 70 6f 6e 73 65 29 3b 7d 7d 29 3b 7d 29 3b 7d 29 3b 3b 0d 0a Data Ascii: e-'+inputID).html(response);}});});});;
2024-05-24 06:26:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	516	OUT	GET /13376 HTTP/1.1 Host: ruamupr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	783	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:26:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Location: https://ruamupr.com/script/US/1/13376 Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ty19ZWKgPHLuwpJAbcCXIcox%2BJF4TFe%2BnK1S%2Fkj6ZCnoRju7WhFtvPZ6cA4CCgpyluENVA3xmk5X4HMQxYZaY2h3ZeA3eXuHRTzqd56BF%2B2ciQAVLAw%2FXeOKmr7hBg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b376d8a031916-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	531	OUT	GET /script/13376 HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	799	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:26:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Location: https://widget.adcovery.com/script/US/1/13376 Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BaPRMKchQToS6rAiH7943CvESiH0MIPuI31NA%2FtbphBfN3tzKF%2FeI7%2F0iFOiMxXz%2BcdRCRBaGaJOhh1WePt%2F2srgfAc2CaUeOAmp%2FQuQhqu8jmSFEOdi14rtSSJtBqsHubB1U0A9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b376d8cc0421c-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	104.19.130.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	543	OUT	GET /p/j/pjnewsletter.com.1171406.js HTTP/1.1 Host: jsc.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	1093	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:51 GMT Content-Type: text/javascript Content-Length: 6068 Connection: close Cf-Bgj: minify Cf-Polished: origSize=6069 ETag: "7b735b461565dfbfcf88c697a328349a" Last-Modified: Mon, 20 May 2024 12:56:30 GMT x-amz-id-2: w9FHXQGjx7PTs0Qm0kBpAsiFf4hghvOPFkUvUt+kzG1TlJK5mwD6T37fycXEQqG+cG7mmQ4rCUTeFeNCR5ohPKKGb5v1EuipzjfAzd5VsvI= x-amz-request-id: XVBYWHW7323Y23DM x-amz-server-side-encryption: AES256 x-amz-version-id: lGSYwQtVq7q4LVcLzl_WFgcgn87H3Y31 CF-Cache-Status: HIT Age: 4534 Expires: Fri, 24 May 2024 09:26:51 GMT Cache-Control: public, max-age=10800 Accept-Ranges: bytes Set-Cookie: __cf_bm=88nJu5ZwIJmqphxflJPMKfR8NwVGym9mD2K0SJBD9O4-1716532011-1.0.1.1-yYSI6Y49S3uzu9G8B_DeeUjzofVNQlgA_VJsCX..ePioioh8JchPyB_k1ev7ekHhtC8iFw4TZOE5PzPlA.3.8Q; path=/; expires=Fri, 24-May-24 06:56:51 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b376d8aa6729f-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:51 UTC	276	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 26 26 28 65 3d 69 28 69 3d 30 29 29 2c 65 7d 7d 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7c 7c 69 28 28 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 65 29 2c 65 2e 65 78 70 6f 72 74 73 7d 7d 3b 76 61 72 20 64 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 73 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 75 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 70 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 Data Ascii: (function(){var h=function(i,e){return function(){return i&&(e=i(i=0)),e}};var b=function(i,e){return function(){return e\|\|i((e={exports:{}}).exports,e),e.exports}};var d=h(function(){});var s=h(function(){});var u=h(function(){});var p=h(function(){});va
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 61 72 20 76 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 66 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 50 3d 62 28 66 75 6e 63 74 69 6f 6e 28 79 29 7b 64 28 29 3b 73 28 29 3b 75 28 29 3b 70 28 29 3b 6c 28 29 3b 76 28 29 3b 66 28 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 79 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 79 2e 41 64 64 69 74 69 6f 6e 61 6c 57 69 64 67 65 74 3d 79 2e 53 63 72 69 70 74 55 72 6c 54 79 70 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 47 3b 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 2e 65 73 35 3d 22 65 73 35 22 2c 69 2e 65 73 36 3d 22 65 73 36 22 7d 29 28 47 7c 7c 28 79 2e 53 63 72 69 70 74 55 72 6c 54 79 70 65 3d 47 3d 7b 7d 29 29 3b 76 Data Ascii: ar v=h(function(){});var f=h(function(){});var P=b(function(y){d();s();u();p();l();v();f();Object.defineProperty(y,"__esModule",{value:!0});y.AdditionalWidget=y.ScriptUrlType=void 0;var G;(function(i){i.es5="es5",i.es6="es6"})(G\|\|(y.ScriptUrlType=G={}));v
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 74 42 65 66 6f 72 65 28 74 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 66 74 65 72 22 3a 65 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 45 6c 65 6d 65 6e 74 28 22 61 66 74 65 72 65 6e 64 22 2c 74 29 3b 62 72 65 61 6b 7d 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 57 69 64 67 65 74 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3f 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 69 74 46 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 Data Ascii: tBefore(t,e);break;case"after":e.insertAdjacentElement("afterend",t);break}},i.prototype.insertWidgetScript=function(e){document.head?document.head.appendChild(e):document.body.appendChild(e)},i.prototype.waitForElement=function(e){return new Promise(func
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 22 29 3b 74 2e 61 73 79 6e 63 3d 21 30 2c 74 2e 73 72 63 3d 6e 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 2c 22 68 69 67 68 22 29 2c 65 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 45 6c 65 6d 65 6e 74 28 22 61 66 74 65 72 62 65 67 69 6e 22 2c 74 29 2c 74 68 69 73 2e 73 65 6e 64 45 76 65 6e 74 28 57 2e 6c 6f 61 64 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 74 65 63 74 52 65 61 64 4d 6f 72 65 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 2c 6e 3d 6e 75 6c 6c 3b 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 62 75 74 74 6f 6e 2e 77 69 64 67 65 74 2d 62 Data Ascii: ");t.async=!0,t.src=n,t.setAttribute("fetchpriority","high"),e.insertAdjacentElement("afterbegin",t),this.sendEvent(W.load)},i.prototype.detectReadMoreButton=function(){var e=this,t,n=null;t=setInterval(function(){n=document.querySelector("button.widget-b
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 65 49 6e 74 28 28 77 3d 61 2e 64 65 74 61 69 6c 29 3d 3d 3d 6e 75 6c 6c 7c 7c 77 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 77 2e 5f 6d 67 77 69 64 67 65 74 29 2c 61 2e 6e 61 6d 65 2c 61 2e 73 74 61 72 74 54 69 6d 65 29 7d 29 7d 29 3b 6e 2e 6f 62 73 65 72 76 65 28 7b 65 6e 74 72 79 54 79 70 65 73 3a 5b 22 6d 61 72 6b 22 5d 7d 29 7d 7d 72 65 74 75 72 6e 20 69 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 4d 65 74 72 69 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 74 68 69 73 2e 74 72 61 63 6b 65 72 44 6f 6d 61 69 6e 2b 22 2f 77 69 64 67 65 74 2d 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 2c 6f 3d 5b 5d 3b 6f 2e 70 75 73 68 28 22 77 69 64 67 65 74 3d 22 2b 65 2b 22 30 30 30 22 29 2c 6f 2e 70 75 Data Ascii: eInt((w=a.detail)===null\|\|w===void 0?void 0:w._mgwidget),a.name,a.startTime)})});n.observe({entryTypes:["mark"]})}}return i.prototype.sendMetric=function(e,t,n){var r="https://"+this.trackerDomain+"/widget-performance?",o=[];o.push("widget="+e+"000"),o.pu
2024-05-24 06:26:51 UTC	316	IN	Data Raw: 6f 6e 20 63 28 29 7b 69 66 28 30 29 76 61 72 20 67 7d 66 75 6e 63 74 69 6f 6e 20 77 28 67 29 7b 76 61 72 20 6d 2c 45 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 45 2e 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 2c 45 2e 73 72 63 3d 67 2c 45 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 28 6d 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6d 3d 3d 3d 76 6f 69 64 20 30 7c 7c 6d 2e 6d 61 72 6b 28 22 6d 61 69 6e 5f 73 63 72 69 70 74 5f 73 74 61 72 74 5f 6c 6f 61 64 22 2c 7b 64 65 74 61 69 6c 3a 7b 5f 6d 67 77 69 64 67 65 74 3a 31 31 37 31 34 30 36 7d 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3f 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 Data Ascii: on c(){if(0)var g}function w(g){var m,E=document.createElement("script");E.async="async",E.src=g,E.crossOrigin="anonymous",(m=window.performance)===null\|\|m===void 0\|\|m.mark("main_script_start_load",{detail:{_mgwidget:1171406}}),document.head?document.head

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	691	OUT	GET /fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:51 GMT Content-Type: font/woff2 Content-Length: 14892 Connection: close CF-Ray: 888b376e4b361a44-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 311224 Cache-Control: public, max-age=31536000 Expires: Thu, 15 May 2025 14:07:06 GMT Last-Modified: Thu, 01 Jun 2023 22:52:56 GMT cf-apo-via: proxy Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1SPJiFyTmXLb3ZQ8kVS5l9dOhYTeNI2QgfkshgjNKtPg9M%2FbLLCahlMLmmAY5FEuvQATB%2FAMbFmdiVKmMmDSjWCySxcCMmRDN4Civ0uIGQRCK6zHAtDwTKSzCRPRy6NUTLE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3a 2c 00 0d 00 00 00 00 88 7c 00 00 39 d3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 42 1c 90 1c 06 60 00 84 62 0a 81 88 4c eb 34 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 66 07 8c 34 1b 99 76 25 8c db 8f 02 ba 03 bc 98 bc 94 cc 8c 44 d8 ab c5 aa 64 64 a0 64 6f 9e 9c fd ff d7 04 3a 64 08 dd 4d 01 a7 ea 03 45 10 26 88 ea 4a 83 0b 47 11 2e 1c c3 9c 33 1d 4d 78 70 aa b3 ca 14 69 b6 c5 19 f6 56 17 92 75 24 0b 5b 4f e7 3b 4d 55 c7 93 3a 6a 0b 3f 8a 85 7b 2b 2f 3c da ad 98 f7 a8 73 c5 c5 97 09 a3 5e 5b fe 11 64 ae 64 c3 af 1e d1 99 cc 87 d5 8d 74 20 41 90 80 d4 9d ec 60 b1 8f 7a 06 b6 8d fc 49 4e 5e 9e 87 9f eb f3 dc f7 32 c9 fc cc 12 b0 da 6d 59 01 6b 46 85 0a 00 5c ed fa 96 55 59 55 02 Data Ascii: wOF2:,\|9nB`bL4d6$D f4v%Ddddo:dME&JG.3MxpiVu$[O;MU:j?{+/<s^[ddt A`zIN^2mYkF\UYU
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 61 0e 45 00 ca 58 a3 9b 5f f7 81 a2 c9 f0 b8 8f b8 fa b8 12 73 8d 5a ca 58 a8 09 ea 44 da 3c 14 25 32 a5 90 00 8a e9 d4 42 da e5 f6 a9 e5 11 27 f2 8a f2 63 87 b7 fd 2e 05 c7 f8 47 88 a0 8f d5 bc 49 6a 3c 70 2d f3 eb ef 0e 76 be 52 70 67 b1 c5 0b 6d a0 d8 b0 81 11 74 f8 88 95 07 bd 8e 6f 2e 7e 49 30 1f b3 11 da 12 3d a2 4c 53 e1 e8 b1 b0 a2 ee 72 dc aa 20 80 6f 77 47 ae e5 2e ef 02 b1 46 28 d2 aa cc 12 ff 0b f6 5e 94 6c 09 10 c0 7e 96 89 00 b3 43 52 d6 af 1c 1d 30 59 53 c1 87 7d 63 ec fb b6 36 0a 49 29 a1 95 d9 9a 0e e2 52 31 f2 51 98 b4 e7 1e 00 74 29 a8 ee e3 5a a8 22 77 2e 7d 9a 66 00 7c 33 01 16 d6 f3 c7 d1 d1 ff eb 3e 87 ef d8 8a b9 98 be a8 4b ac 76 34 a8 e4 d5 2b 4a 55 28 fe e3 e7 63 71 73 a1 90 b8 d5 8c ba 40 39 bc be 0c b3 af f1 bf 72 e2 2a 55 f2 Data Ascii: aEX_sZXD<%2B'c.GIj<p-vRpgmto.~I0=LSr owG.F(^l~CR0YS}c6I)R1Qt)Z"w.}f\|3>Kv4+JU(cqs@9r*U
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: f2 38 5f 4b 4e 69 b5 84 d0 7a ea a4 b4 27 51 0c 4e e9 c5 45 06 71 99 c1 5c e0 44 95 cf 2b 5c bc 30 af 78 21 0a d2 f9 b7 da b7 9f cb b0 1a a6 8f 63 36 b9 f2 87 48 9a 33 88 94 4f 4e 47 69 39 ec 32 29 1e 85 44 a0 ab d5 9a ec 97 b1 8a e0 b3 60 3b 0f 9e 0f 84 d5 63 08 d7 3a 20 af 70 40 1a a6 17 19 ab f5 66 ee f9 33 1e a1 4f 7d c5 18 bd 06 1f 09 1d b0 a8 c7 77 0a 30 f1 8b 05 50 9a f9 c8 b0 01 f8 70 ce 76 09 20 f5 7a fd 8d bc 88 76 5d 1d 61 76 90 d9 1c fa 95 14 c8 8b 03 8c 0f 1b ce 39 2c a6 54 bb 91 ef 2d 55 ff 9b 02 e9 d1 7b b8 ab c0 41 99 69 91 25 4a ed b1 af 1b 82 99 35 b4 69 5e ab 9b 63 76 2b c9 29 28 a9 70 d4 ac 34 9c 88 cd 43 70 49 db c8 da 4e 6a 49 13 ba c0 e2 d1 b5 f4 6e 8d 04 f4 cc 64 47 b3 b5 7d f9 15 53 88 d5 07 c0 87 66 02 30 b3 81 d6 48 ac eb a4 03 Data Ascii: 8_KNiz'QNEq\D+\0x!c6H3ONGi92)D`;c: p@f3O}w0Ppv zv]av9,T-U{Ai%J5i^cv+)(p4CpINjIndG}Sf0H
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 15 24 11 08 30 13 86 9c 75 0d 08 94 70 04 c4 08 51 38 31 1f 05 f9 99 63 2f 78 0b f8 d5 3b 12 23 0b 48 23 6f 78 e2 4b 88 a7 42 d5 7b 44 39 c6 ba 24 72 0a 29 51 d2 12 2f b0 7d b8 b7 dd 71 d7 3d f7 3d f0 d0 23 8f 3d 51 e6 2f 4f 3d 83 11 b9 86 3f 66 2e 91 6d b6 fb 22 03 76 b1 c8 7e 0b 2c bd 23 c4 81 02 8a 08 11 22 17 8e a4 ea 0c dc 7d 10 96 0d 7d c0 63 50 54 2a a2 d5 41 c1 20 97 27 ae 67 e1 06 56 6e 64 ff aa 4c 5c dc cc 12 35 52 f2 82 0b 66 54 8a 79 9b e3 ae 70 b8 da c3 51 86 90 72 ef 15 7e 5b c5 0e 08 6a 0d e9 2b 47 09 70 e1 e8 a9 48 e2 09 47 cd bd f5 b0 67 2e e3 e0 12 e4 e2 62 e4 9c 9c 06 92 91 86 8c 28 fe 3a ad 17 f0 54 5e 1f f0 71 1a 50 46 8e 95 89 1a 15 24 99 41 6a c3 7a b6 4b 15 ac 58 b2 56 a8 75 b4 33 a4 39 17 42 54 81 0d 7c 35 42 23 31 92 20 99 74 cb Data Ascii: $0upQ81c/x;#H#oxKB{D9$r)Q/}q==#=Q/O=?f.m"v~,#"}}cPT*A 'gVndL\5RfTypQr~[j+GpHGg.b(:T^qPF$AjzKXVu39BT\|5B#1 t
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: e2 72 1a 74 5b 39 33 96 84 86 89 5e b7 02 a7 97 75 91 97 78 92 f0 7f 28 be c3 89 52 00 68 aa a3 22 26 4a 9b 83 fd c0 64 31 18 66 36 71 63 f9 d9 ac d7 44 cd 89 27 c5 15 fc dc a9 5b 5c 3d 67 20 2a 3a 88 d7 36 7a fd b1 b5 26 fe b8 ab ca c7 06 f5 1b b6 56 51 3b 44 c2 10 f3 43 bd 6c 07 62 91 cf 21 c0 6d 06 3e 98 d8 6f c4 d9 b6 41 e3 29 4c de c0 dd b8 8b f6 ba dc c4 a7 b6 27 70 35 ae a6 b5 25 af f7 d7 04 38 47 49 00 96 40 45 82 73 1d 94 07 d4 52 5c 5c 2d 27 2e 91 04 75 b0 51 06 0b 6a 25 82 e3 ae b0 1d d9 16 41 63 86 7c a7 c5 6d b6 cd 66 52 43 6b 40 33 8d a7 a0 a1 a9 e7 10 c8 db 66 41 8d ee 07 e5 45 61 7e 3b c5 04 9f e3 5a 80 53 1e 32 51 6a d9 d2 3a 9c cd ff 10 db 38 75 76 7b 6d 87 d1 1e 48 5d bc 6c da ac 72 37 af 46 37 5c 9c 5b e4 17 67 a2 49 e9 76 18 73 5f 60 Data Ascii: rt[93^ux(Rh"&Jd1f6qcD'[\=g *:6z&VQ;DClb!m>oA)L'p5%8GI@EsR\\-'.uQj%Ac\|mfRCk@3fAEa~;ZS2Qj:8uv{mH]lr7F7\[gIvs_`
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 65 7a 62 cb f8 7a e1 ee fd e0 78 7a 2b 3d 4a ec c6 f6 ed 46 62 eb 7e 35 14 ab 31 08 00 49 f7 d7 e5 8a 30 98 12 3d 85 91 e7 c4 22 c6 2a db 3a 22 b9 8e 3b 42 86 9f 2a aa 41 7a ab 6d 8e b2 46 dd 9d 84 80 04 09 f4 71 e0 5c 1a 15 21 fd 0e bf 76 aa a0 a5 09 94 c4 be 3f b9 0e 35 7d 4d 27 5c f7 6a 01 2b d7 2f 6c 9b d7 39 97 06 f1 ac ba d7 f9 3c 3a 83 e3 a0 9e 1f c4 6c 9b 6a e4 9b c2 21 aa 37 c5 0e b8 7d 09 5c aa 12 8d f4 7a 03 a9 6c 84 f4 b0 e1 3d c3 74 57 31 74 c5 27 53 d0 46 52 b7 c9 ce b9 ed ba 9f d2 63 56 89 fe 16 14 ee 4b cd a9 f1 e1 e7 48 64 47 65 e8 15 2e e9 b1 f0 8b e2 68 88 11 74 26 51 06 ce d9 41 07 aa 72 c3 63 3c 1d ac 80 9e d4 75 ac 87 f3 bd 1c 04 74 c3 a4 c6 db e2 b7 3f 33 c8 67 aa c7 50 37 fd e0 ec a5 65 66 fc 7d 0c 05 8b d4 1e c5 c8 cd ed a9 b8 b4 Data Ascii: ezbzxz+=JFb~51I0=":";BAzmFq\!v?5}M'\j+/l9<:lj!7}\zl=tW1t'SFRcVKHdGe.ht&QArc<ut?3gP7ef}
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 3f a8 2e 8e 8c 5f 98 76 0f ba e9 38 92 3f 1e 39 a4 7f df 5d 5c 76 e0 d2 e8 4b e8 c9 ca 63 a5 07 c0 f9 8a f3 33 0b 82 c7 ff cb 36 3d 84 48 ab e9 97 c0 f1 f0 f9 37 5f 81 60 24 92 a1 34 8f 0a 0a 32 4a 2c e0 0c ad f1 5a 0d de e5 c1 0d c9 c4 d8 51 06 cb 46 3c f7 24 bd 92 a1 2c f0 34 15 b1 90 06 54 96 97 99 6e a0 7e c2 1d ea 4a 2c 57 f1 98 68 c0 a0 29 56 d2 0b a2 c0 38 e1 3f 1b 15 9e e2 a6 31 ca 2a 16 34 07 94 ed a5 1a 13 a2 76 d7 16 7a 95 95 26 e2 3f e1 d7 cf 01 52 68 7d 9d 4a d5 ec f5 eb 9b 1b 55 5a 3e 42 5e b8 da f8 1b 81 83 70 69 41 79 c0 5f 0b 53 36 05 a4 53 3c 24 f0 98 6e 31 7d b0 db a3 6c 29 d7 c8 58 b7 9e a2 a2 a7 02 13 48 3d ea 94 83 91 89 e8 55 c6 57 77 c7 65 d3 1f e4 fa e5 61 53 25 c0 d0 86 06 b5 a6 d9 e3 d5 36 57 69 64 25 d5 bd f5 53 e3 58 2b e4 cc Data Ascii: ?._v8?9]\vKc36=H7_`$42J,ZQF<$,4Tn~J,Wh)V8?1*4vz&?Rh}JUZ>B^piAy_S6S<$n1}l)XH=UWweaS%6Wid%SX+
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: ff d8 d5 31 7f 94 ad a3 77 da c3 4e 61 c5 d4 9b d4 ce 31 f0 b5 57 59 b7 72 34 be b9 43 f1 43 c8 1b 83 f0 60 62 5e 72 48 ab 8c d1 7e 18 f6 8d c9 5d 71 e1 ff 98 fb 0e ad f7 33 f5 4c 03 8f fc 69 96 33 00 2a a0 6b 11 b4 30 79 ea ff 7b 57 1d 45 33 37 e9 27 8d 20 79 0c c2 bf b4 14 60 0e 06 9c 46 59 f1 b7 ae 1b f5 6c c2 15 72 ee 11 96 54 55 c8 15 f8 24 9c 1c 78 35 46 8e 71 e6 70 72 4d 08 23 4f 03 5b 94 6c 36 6c 94 d9 ff 09 97 7e f9 35 b7 fc 37 17 4f de 51 85 f9 61 3c 1d c6 3a 73 7a 0d 25 8c 83 27 65 76 83 94 72 f7 f8 d3 48 55 4e d6 0b f8 4e b7 6d da b3 75 5b d3 78 79 59 d3 f8 b6 ad 4d 7b 4a 0d 72 78 60 e9 52 b8 47 2e 47 7a 96 2e 45 06 80 07 59 f9 65 9b e4 98 1e b3 45 a7 1c 44 00 23 b6 ac 6c c1 b0 a9 4d 24 53 99 34 0c 98 f3 c1 83 de 42 b1 b6 a0 a6 36 a4 36 f6 b4 Data Ascii: 1wNa1WYr4CC`b^rH~]q3Li3*k0y{WE37' y`FYlrTU$x5FqprM#O[l6l~57OQa<:sz%'evrHUNNmu[xyYM{Jrx`RG.Gz.EYeED#lM$S4B66
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: d2 6a b0 2a d1 c6 6d cd 72 41 9f 75 f3 5a ad 52 d9 a2 98 7a c8 7a 86 f7 e6 40 db 67 f6 22 b0 72 51 e5 16 5f c9 96 b6 1a c3 68 5b eb 6a 6d b0 66 a5 df b3 aa 2a ac e9 28 52 71 19 6b 90 49 4b 1f 91 45 88 15 61 e0 7c 02 d8 cc e4 e0 16 4e 4c 1a 97 d1 2e 11 da 82 a4 0f 19 c5 06 9f b6 bf c7 52 04 f7 49 aa aa 15 cb 22 15 ae 37 16 5a 42 5c 1f 36 d5 bb b3 34 d3 34 39 fd bb e5 f8 cd 5f 7e 8a a6 2f c8 76 d1 f8 dd a0 30 f3 aa 57 11 4e 79 2b a4 2c c6 1c 95 a0 7b 41 46 36 d1 eb 53 86 bb 15 c5 07 e6 8f ee ab 83 39 49 84 06 eb 91 83 e0 18 0d fb a6 55 57 aa 84 2d 50 59 9d 33 0a 69 3c f7 7d 29 cf 49 a3 53 84 fe 3e 77 83 3d f1 21 56 f4 21 ad 78 21 10 3b 0b 7d 25 b5 1c 5a 2f 15 3b 1c eb af 30 32 19 2a b3 4e 9b 9b 8b e8 2d 1b b6 cb c0 61 9a 67 67 95 6f c5 65 13 49 9f 51 28 ff Data Ascii: jmrAuZRzz@g"rQ_h[jmf(RqkIKEa\|NL.RI"7ZB\6449_~/v0WNy+,{AF6S9IUW-PY3i<})IS>w=!V!x!;}%Z/;02*N-aggoeIQ(
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: cd 3a 26 cc 75 59 ec 63 e8 cc 28 3c 1e 64 b2 20 3f a4 51 e0 94 af 82 c1 ac 60 31 9b 99 8c e6 f9 e8 bb 38 dc 5d 34 e6 3b 1c ee 3b 90 ff 53 e7 af 5f a2 d1 42 4a ba 3e 46 44 61 07 d9 91 6f 38 0c 3a 7d 3b bb 50 82 37 d2 cb 88 7a 8e 22 8e 3e ab 5c 1b 80 59 fe d4 8e b4 b4 8e d4 14 71 7c 25 71 27 67 c2 30 95 f9 76 40 a5 24 0e 06 65 8e b4 9d 69 68 9e 62 11 3a 6d 11 d2 46 f7 b5 44 c5 3c 49 5b 5f 0b 38 e8 ad 4c 6a ce df 56 56 1f 25 07 96 2c 95 ca b4 b0 b4 98 a8 3b 1f 4e c2 98 b0 a6 ab 45 e6 b3 d4 1d b2 cc 66 0f b4 b7 30 ab 68 d4 71 b9 7b e0 6b 1d cd ee bb 3d 1d 5e 94 62 1b 6f 32 2f 67 9b 52 54 af 38 53 55 84 ac 5f e5 99 5a 0b 34 04 b1 f3 3b a3 c2 17 3d 1f 9a 35 f3 bf aa 36 f9 8e da 63 e6 e5 54 24 a3 ff cb ae df fa 2b 95 b1 32 99 84 49 78 16 08 64 34 13 56 89 d3 92 Data Ascii: :&uYc(<d ?Q`18]4;;S_BJ>FDao8:};P7z">\Yq\|%q'g0v@$eihb:mFD<I[_8LjVV%,;NEf0hq{k=^bo2/gRT8SU_Z4;=56cT$+2Ixd4V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	104.19.130.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	543	OUT	GET /p/j/pjnewsletter.com.1604063.js HTTP/1.1 Host: jsc.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	1073	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:51 GMT Content-Type: text/javascript Content-Length: 6068 Connection: close Cf-Bgj: minify Cf-Polished: origSize=6069 ETag: "6ea584596fa9aae35881b0c0a9b25986" Last-Modified: Thu, 23 May 2024 09:58:07 GMT x-amz-id-2: yHemefDvy1pt2guoKm1DQXdkUp4iED+nKmBm1l46Qa+TRMnpyc1YZUydTHtEFvnA3JWXik4H4X83fizukBei+A== x-amz-request-id: BPMD9S0PJ2HSKMVX x-amz-server-side-encryption: AES256 x-amz-version-id: 2pgEoaQzgAIdDyKR1sAVMM8TmRATer0Q CF-Cache-Status: HIT Age: 1537 Expires: Fri, 24 May 2024 09:26:51 GMT Cache-Control: public, max-age=10800 Accept-Ranges: bytes Set-Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; path=/; expires=Fri, 24-May-24 06:56:51 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b376fc8390fa5-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:51 UTC	296	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 26 26 28 65 3d 69 28 69 3d 30 29 29 2c 65 7d 7d 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7c 7c 69 28 28 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 65 29 2c 65 2e 65 78 70 6f 72 74 73 7d 7d 3b 76 61 72 20 64 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 73 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 75 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 70 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 Data Ascii: (function(){var h=function(i,e){return function(){return i&&(e=i(i=0)),e}};var b=function(i,e){return function(){return e\|\|i((e={exports:{}}).exports,e),e.exports}};var d=h(function(){});var s=h(function(){});var u=h(function(){});var p=h(function(){});va
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 3b 76 61 72 20 66 3d 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 50 3d 62 28 66 75 6e 63 74 69 6f 6e 28 79 29 7b 64 28 29 3b 73 28 29 3b 75 28 29 3b 70 28 29 3b 6c 28 29 3b 76 28 29 3b 66 28 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 79 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 79 2e 41 64 64 69 74 69 6f 6e 61 6c 57 69 64 67 65 74 3d 79 2e 53 63 72 69 70 74 55 72 6c 54 79 70 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 47 3b 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 2e 65 73 35 3d 22 65 73 35 22 2c 69 2e 65 73 36 3d 22 65 73 36 22 7d 29 28 47 7c 7c 28 79 2e 53 63 72 69 70 74 55 72 6c 54 79 70 65 3d 47 3d 7b 7d 29 29 3b 76 61 72 20 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 Data Ascii: ;var f=h(function(){});var P=b(function(y){d();s();u();p();l();v();f();Object.defineProperty(y,"__esModule",{value:!0});y.AdditionalWidget=y.ScriptUrlType=void 0;var G;(function(i){i.es5="es5",i.es6="es6"})(G\|\|(y.ScriptUrlType=G={}));var j=function(){func
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 61 73 65 22 61 66 74 65 72 22 3a 65 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 45 6c 65 6d 65 6e 74 28 22 61 66 74 65 72 65 6e 64 22 2c 74 29 3b 62 72 65 61 6b 7d 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 57 69 64 67 65 74 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3f 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 69 74 46 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e Data Ascii: ase"after":e.insertAdjacentElement("afterend",t);break}},i.prototype.insertWidgetScript=function(e){document.head?document.head.appendChild(e):document.body.appendChild(e)},i.prototype.waitForElement=function(e){return new Promise(function(t){if(document.
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 6e 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 2c 22 68 69 67 68 22 29 2c 65 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 45 6c 65 6d 65 6e 74 28 22 61 66 74 65 72 62 65 67 69 6e 22 2c 74 29 2c 74 68 69 73 2e 73 65 6e 64 45 76 65 6e 74 28 57 2e 6c 6f 61 64 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 74 65 63 74 52 65 61 64 4d 6f 72 65 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 2c 6e 3d 6e 75 6c 6c 3b 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 62 75 74 74 6f 6e 2e 77 69 64 67 65 74 2d 62 74 6e 22 29 2c 6e 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 Data Ascii: n,t.setAttribute("fetchpriority","high"),e.insertAdjacentElement("afterbegin",t),this.sendEvent(W.load)},i.prototype.detectReadMoreButton=function(){var e=this,t,n=null;t=setInterval(function(){n=document.querySelector("button.widget-btn"),n&&(clearInterv
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 6e 75 6c 6c 7c 7c 77 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 77 2e 5f 6d 67 77 69 64 67 65 74 29 2c 61 2e 6e 61 6d 65 2c 61 2e 73 74 61 72 74 54 69 6d 65 29 7d 29 7d 29 3b 6e 2e 6f 62 73 65 72 76 65 28 7b 65 6e 74 72 79 54 79 70 65 73 3a 5b 22 6d 61 72 6b 22 5d 7d 29 7d 7d 72 65 74 75 72 6e 20 69 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 4d 65 74 72 69 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 74 68 69 73 2e 74 72 61 63 6b 65 72 44 6f 6d 61 69 6e 2b 22 2f 77 69 64 67 65 74 2d 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 2c 6f 3d 5b 5d 3b 6f 2e 70 75 73 68 28 22 77 69 64 67 65 74 3d 22 2b 65 2b 22 30 30 30 22 29 2c 6f 2e 70 75 73 68 28 22 6d 65 74 72 69 63 3d 22 2b 74 29 2c 6f 2e 70 75 Data Ascii: null\|\|w===void 0?void 0:w._mgwidget),a.name,a.startTime)})});n.observe({entryTypes:["mark"]})}}return i.prototype.sendMetric=function(e,t,n){var r="https://"+this.trackerDomain+"/widget-performance?",o=[];o.push("widget="+e+"000"),o.push("metric="+t),o.pu
2024-05-24 06:26:51 UTC	296	IN	Data Raw: 6e 63 74 69 6f 6e 20 77 28 67 29 7b 76 61 72 20 6d 2c 45 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 45 2e 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 2c 45 2e 73 72 63 3d 67 2c 45 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 28 6d 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6d 3d 3d 3d 76 6f 69 64 20 30 7c 7c 6d 2e 6d 61 72 6b 28 22 6d 61 69 6e 5f 73 63 72 69 70 74 5f 73 74 61 72 74 5f 6c 6f 61 64 22 2c 7b 64 65 74 61 69 6c 3a 7b 5f 6d 67 77 69 64 67 65 74 3a 31 36 30 34 30 36 33 7d 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3f 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 29 3a 64 6f 63 75 Data Ascii: nction w(g){var m,E=document.createElement("script");E.async="async",E.src=g,E.crossOrigin="anonymous",(m=window.performance)===null\|\|m===void 0\|\|m.mark("main_script_start_load",{detail:{_mgwidget:1604063}}),document.head?document.head.appendChild(E):docu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	199.232.192.134	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	536	OUT	GET /count.js HTTP/1.1 Host: thepatriotjournal.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	652	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1517 Content-Type: application/javascript; charset=utf-8 Server: nginx Last-Modified: Fri, 10 May 2024 16:49:52 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block ETag: "663e5030-5ed" X-Amz-Cf-Pop: DFW56-P1 X-Amz-Cf-Id: -cvfxSMjFhrEUMZw9YQomYsvkhMEsKlNQlbhp2KuMUmF12_WQPg3dQ== Cache-Control: public, max-age=300 Date: Fri, 24 May 2024 06:26:51 GMT Age: 30 Vary: Accept-Encoding Strict-Transport-Security: max-age=300; includeSubdomains Cross-Origin-Resource-Policy: cross-origin Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
2024-05-24 06:26:51 UTC	1378	IN	Data Raw: 76 61 72 20 44 49 53 51 55 53 57 49 44 47 45 54 53 2c 64 69 73 71 75 73 5f 64 6f 6d 61 69 6e 2c 64 69 73 71 75 73 5f 73 68 6f 72 74 6e 61 6d 65 3b 0a 74 79 70 65 6f 66 20 44 49 53 51 55 53 57 49 44 47 45 54 53 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 28 44 49 53 51 55 53 57 49 44 47 45 54 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2c 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 73 71 2d 63 6f 75 6e 74 2d 73 63 72 22 29 2c 61 3d 61 26 26 61 2e 73 72 63 2e 6d 61 74 63 68 28 2f 28 68 74 74 70 73 3f 3a 29 3f 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 28 5b 5c 77 5f 5c 2d 5d 2b 29 5c 2e 28 28 3f 3a 64 65 76 5c 2e 29 3f 64 69 73 71 75 73 5c 2e 28 3f 3a 63 6f 6d 7c 6f 72 67 29 28 3f 3a 3a 5c 64 2b 29 Data Ascii: var DISQUSWIDGETS,disqus_domain,disqus_shortname;typeof DISQUSWIDGETS==="undefined"&&(DISQUSWIDGETS=function(){var f=document,a=f.getElementById("dsq-count-scr"),a=a&&a.src.match(/(https?:)?\/\/(?:www\.)?([\w_\-]+)\.((?:dev\.)?disqus\.(?:com\|org)(?::\d+)
2024-05-24 06:26:51 UTC	139	IN	Data Raw: 62 2e 6d 75 6c 74 69 70 6c 65 7d 63 3d 64 2e 72 65 70 6c 61 63 65 28 22 7b 6e 75 6d 7d 22 2c 63 2e 63 6f 6d 6d 65 6e 74 73 29 3b 61 3d 61 2e 65 6c 65 6d 65 6e 74 73 3b 66 6f 72 28 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 3e 3d 30 3b 64 2d 2d 29 61 5b 64 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 63 7d 7d 3b 72 65 74 75 72 6e 20 65 7d 28 29 29 3b 44 49 53 51 55 53 57 49 44 47 45 54 53 2e 67 65 74 43 6f 75 6e 74 28 29 3b Data Ascii: b.multiple}c=d.replace("{num}",c.comments);a=a.elements;for(d=a.length-1;d>=0;d--)a[d].innerHTML=c}};return e}());DISQUSWIDGETS.getCount();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49762	104.16.80.73	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	620	OUT	GET /beacon.min.js/vef91dfe02fce4ee0ad053f6de4f175db1715022073587 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:51 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19306 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.5.0" Last-Modified: Mon, 06 May 2024 19:01:13 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 888b3770fcab238a-EWR
2024-05-24 06:26:51 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 7c 7c 30 2c 72 3d 74 3b 72 65 74 75 72 6e 5b 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i+
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 72 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|r(a)}},168:function(e,t,n){"use strict";var i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arg
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d Data Ascii: .getAttribute("src");if(g&&"function"==typeof URLSearchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6d 29 26 26 6d 2e 6c 65 6e 67 74 68 3e 30 26 26 28 64 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 5f 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 5f 28 Data Ascii: &&Array.isArray(m)&&m.length>0&&(d.timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=_("first-paint"),d.firstContentfulPaint=_(
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 2e 67 65 74 54 69 6d 65 28 29 2c 74 72 69 67 67 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 41 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 41 29 7d 29 29 3b 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e Data Ascii: .getTime(),triggered:!0}};"complete"===window.document.readyState?A():window.addEventListener("load",(function(){window.setTimeout(A)}));var R=function(){return L&&0===v.filter((function(e){return e.id===l})).length},x=function(e){v.push({id:l,url:e,ts:(n
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 2e 6c 63 70 2e 72 6c 74 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 Data Ascii: .lcp.rlt=c.resourceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(r=c.lcpResourceEntry)\|\|void 0===r?void 0:r.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"))
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 66 28 6e 61 76 69 67 61 74 6f 72 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 74 72 79 7b 76 61 72 20 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 63 26 26 63 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 26 26 70 61 72 73 65 49 6e 74 28 63 5b 31 5d 29 3c 38 31 26 26 28 61 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 61 26 26 69 29 7b 74 2e 73 74 3d 31 3b 76 Data Ascii: f(navigator&&"string"==typeof navigator.userAgent)try{var c=navigator.userAgent.match(/Chrome\/([0-9]+)/);c&&c[0].toLowerCase().indexOf("chrome")>-1&&parseInt(c[1])<81&&(a=!1)}catch(e){}if(navigator&&"function"==typeof navigator.sendBeacon&&a&&i){t.st=1;v
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 22 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 22 3b 74 72 79 7b 66 6f 72 28 3b 65 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 7b 76 61 72 20 69 3d 65 2c 72 3d 69 2e 69 64 3f 22 23 22 2b 69 2e 69 64 3a 75 28 69 29 2b 28 69 2e 63 6c 61 73 73 4c 69 73 74 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 26 26 69 2e 63 6c 61 73 73 Data Ascii: "},u=function(e){var t=e.nodeName;return 1===e.nodeType?t.toLowerCase():t.toUpperCase().replace(/^#/,"")},s=function(e,t){var n="";try{for(;e&&9!==e.nodeType;){var i=e,r=i.id?"#"+i.id:u(i)+(i.classList&&i.classList.value&&i.classList.value.trim()&&i.class
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3e 74 5b 31 5d 3f 22 70 6f 6f 72 22 3a 65 3e 74 5b 30 5d 3f 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 7d 28 74 2e 76 61 6c 75 65 2c 6e 29 2c 65 28 74 29 29 7d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 29 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e Data Ascii: unction(e,t){return e>t[1]?"poor":e>t[0]?"needs-improvement":"good"}(t.value,n),e(t))}},y=function(e){requestAnimationFrame((function(){return requestAnimationFrame((function(){return e()}))}))},h=function(e){var t=function(t){"pagehide"!==t.type&&"hidden
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 65 73 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 3d 70 28 22 46 43 50 22 29 2c 6e 3d 67 28 65 2c 72 2c 42 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 69 2e 74 69 6d 65 53 74 61 6d 70 2c 6e 28 21 30 29 7d 29 29 7d 29 29 29 7d 29 29 7d 2c 52 3d 5b 2e 31 2c 2e 32 35 5d 2c 78 3d 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 21 30 7d 2c 46 3d 6e 65 77 20 44 61 74 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 7c 7c 28 74 3d 72 2c 6e 3d 65 2c 69 3d 6e 65 77 20 44 61 74 65 2c 4d 28 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 2c 4f 28 29 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e Data Ascii: es),l((function(i){r=p("FCP"),n=g(e,r,B,t.reportAllChanges),y((function(){r.value=performance.now()-i.timeStamp,n(!0)}))})))}))},R=[.1,.25],x={passive:!0,capture:!0},F=new Date,I=function(e,r){t\|\|(t=r,n=e,i=new Date,M(removeEventListener),O())},O=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49763	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	587	OUT	GET /Scripts/infinity.js.aspx?guid=0d94d46c-3cdb-4ae0-a09a-420aae9253fe HTTP/1.1 Host: cdn.engine.4dsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:51 UTC	474	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:51 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=900 P3P: CP="CAO PSA OUR IND" Access-Control-Allow-Origin: * Last-Modified: Fri, 24 May 2024 06:06:32 GMT CF-Cache-Status: HIT Age: 510 Expires: Fri, 24 May 2024 06:41:51 GMT Server: cloudflare CF-RAY: 888b377108d3433a-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:51 UTC	895	IN	Data Raw: 36 65 65 33 0d 0a 76 61 72 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2c 61 64 73 63 6f 72 65 56 65 72 69 66 69 63 61 74 69 6f 6e 53 74 61 74 75 73 3b 69 66 28 74 79 70 65 6f 66 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 21 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 43 6f 72 65 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 7c 7c 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 66 2c 72 2c 65 2c 74 Data Ascii: 6ee3var g367CB268B1094004A3689751E7AC568F,adscoreVerificationStatus;if(typeof g367CB268B1094004A3689751E7AC568F=="undefined"\|\|!g367CB268B1094004A3689751E7AC568F.Core){Array.prototype.filter\|\|(Array.prototype.filter=function(n){"use strict";var i,f,r,e,t
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 79 70 65 2e 6d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 66 2c 72 2c 74 2c 69 2c 75 2c 65 2c 6f 3b 69 66 28 74 68 69 73 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 69 66 28 69 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 75 3d 69 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 6e 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 66 6f 72 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 28 66 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 75 Data Ascii: ype.map=function(n){var f,r,t,i,u,e,o;if(this==null)throw new TypeError("this is null or not defined");if(i=Object(this),u=i.length>>>0,typeof n!="function")throw new TypeError(n+" is not a function");for(arguments.length>1&&(f=arguments[1]),r=new Array(u
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 26 72 2e 6c 65 6e 67 74 68 3e 30 3f 72 2e 6c 65 6e 67 74 68 3d 3d 32 3f 74 68 69 73 5b 72 5b 30 5d 5d 3d 74 79 70 65 6f 66 20 72 5b 31 5d 3d 3d 6e 74 3f 72 5b 31 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 75 29 3a 72 5b 31 5d 3a 72 2e 6c 65 6e 67 74 68 3d 3d 33 3f 74 68 69 73 5b 72 5b 30 5d 5d 3d 74 79 70 65 6f 66 20 72 5b 31 5d 21 3d 3d 6e 74 7c 7c 72 5b 31 5d 2e 65 78 65 63 26 26 72 5b 31 5d 2e 74 65 73 74 3f 75 3f 75 2e 72 65 70 6c 61 63 65 28 72 5b 31 5d 2c 72 5b 32 5d 29 3a 74 3a 75 3f 72 5b 31 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 75 2c 72 5b 32 5d 29 3a 74 3a 72 2e 6c 65 6e 67 74 68 3d 3d 34 26 26 28 74 68 69 73 5b 72 5b 30 5d 5d 3d 75 3f 72 5b 33 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 75 2e 72 65 70 6c 61 63 65 28 72 5b 31 5d 2c 72 5b 32 5d 29 29 3a 74 29 3a Data Ascii: &r.length>0?r.length==2?this[r[0]]=typeof r[1]==nt?r[1].call(this,u):r[1]:r.length==3?this[r[0]]=typeof r[1]!==nt\|\|r[1].exec&&r[1].test?u?u.replace(r[1],r[2]):t:u?r[1].call(this,u,r[2]):t:r.length==4&&(this[r[0]]=u?r[3].call(this,u.replace(r[1],r[2])):t):
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 28 29 28 69 65 29 5c 73 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 72 65 6b 6f 6e 71 29 5c 2f 28 5b 5c 77 5c 2e 5d 2a 29 2f 69 2c 2f 28 63 68 72 6f 6d 69 75 6d 7c 66 6c 6f 63 6b 7c 72 6f 63 6b 6d 65 6c 74 7c 6d 69 64 6f 72 69 7c 65 70 69 70 68 61 6e 79 7c 73 69 6c 6b 7c 73 6b 79 66 69 72 65 7c 6f 76 69 62 72 6f 77 73 65 72 7c 62 6f 6c 74 7c 69 72 6f 6e 7c 76 69 76 61 6c 64 69 7c 69 72 69 64 69 75 6d 7c 70 68 61 6e 74 6f 6d 6a 73 7c 62 6f 77 73 65 72 7c 71 75 61 72 6b 7c 71 75 70 7a 69 6c 6c 61 7c 66 61 6c 6b 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 2d 5d 2b 29 2f 69 5d 2c 5b 66 2c 65 5d 2c 5b 2f 28 6b 6f 6e 71 75 65 72 6f 72 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 66 2c 22 4b 6f 6e 71 75 65 72 6f 72 22 5d 2c 65 5d 2c 5b 2f 28 74 72 69 64 65 6e 74 29 Data Ascii: ()(ie)\s([\w\.]+)/i,/(rekonq)\/([\w\.]*)/i,/(chromium\|flock\|rockmelt\|midori\|epiphany\|silk\|skyfire\|ovibrowser\|bolt\|iron\|vivaldi\|iridium\|phantomjs\|bowser\|quark\|qupzilla\|falkon)\/([\w\.-]+)/i],[f,e],[/(konqueror)\/([\w\.]+)/i],[[f,"Konqueror"],e],[/(trident)
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 6b 22 5d 5d 2c 5b 2f 73 61 66 61 72 69 5c 73 28 6c 69 6e 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 61 6e 64 72 6f 69 64 2e 2b 28 6c 69 6e 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 5c 2f 69 61 62 2f 69 5d 2c 5b 66 2c 65 5d 2c 5b 2f 68 65 61 64 6c 65 73 73 63 68 72 6f 6d 65 28 3f 3a 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 7c 5c 73 29 2f 69 5d 2c 5b 65 2c 5b 66 2c 22 43 68 72 6f 6d 65 20 48 65 61 64 6c 65 73 73 22 5d 5d 2c 5b 2f 5c 73 77 76 5c 29 2e 2b 28 63 68 72 6f 6d 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 66 2c 2f 28 2e 2b 29 2f 2c 22 24 31 20 57 65 62 56 69 65 77 22 5d 2c 65 5d 2c 5b 2f 28 28 3f 3a 6f 63 75 6c 75 73 7c 73 61 6d 73 75 6e 67 29 62 72 6f 77 73 65 72 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 66 2c 2f 28 2e 2b 28 Data Ascii: k"]],[/safari\s(line)\/([\w\.]+)/i,/android.+(line)\/([\w\.]+)\/iab/i],[f,e],[/headlesschrome(?:\/([\w\.]+)\|\s)/i],[e,[f,"Chrome Headless"]],[/\swv\).+(chrome)\/([\w\.]+)/i],[[f,/(.+)/,"$1 WebView"],e],[/((?:oculus\|samsung)browser)\/([\w\.]+)/i],[[f,/(.+(
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 69 72 64 7c 70 68 6f 65 6e 69 78 7c 70 61 6c 65 6d 6f 6f 6e 7c 62 61 73 69 6c 69 73 6b 7c 77 61 74 65 72 66 6f 78 29 5c 2f 28 5b 5c 77 5c 2e 2d 5d 2b 29 24 2f 69 2c 2f 28 66 69 72 65 66 6f 78 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 5c 73 5b 5c 77 5c 73 5c 2d 5d 2b 5c 2f 5b 5c 77 5c 2e 5d 2b 24 2f 69 2c 2f 28 6d 6f 7a 69 6c 6c 61 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 5c 73 2e 2b 72 76 5c 3a 2e 2b 67 65 63 6b 6f 5c 2f 5c 64 2b 2f 69 2c 2f 28 70 6f 6c 61 72 69 73 7c 6c 79 6e 78 7c 64 69 6c 6c 6f 7c 69 63 61 62 7c 64 6f 72 69 73 7c 61 6d 61 79 61 7c 77 33 6d 7c 6e 65 74 73 75 72 66 7c 73 6c 65 69 70 6e 69 72 29 5b 5c 2f 5c 73 5d 3f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6c 69 6e 6b 73 29 5c 73 5c 28 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 67 6f 62 72 6f 77 73 Data Ascii: ird\|phoenix\|palemoon\|basilisk\|waterfox)\/([\w\.-]+)$/i,/(firefox)\/([\w\.]+)\s[\w\s\-]+\/[\w\.]+$/i,/(mozilla)\/([\w\.]+)\s.+rv\:.+gecko\/\d+/i,/(polaris\|lynx\|dillo\|icab\|doris\|amaya\|w3m\|netsurf\|sleipnir)[\/\s]?([\w\.]+)/i,/(links)\s\(([\w\.]+)/i,/(gobrows
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 70 6c 65 29 2f 69 5d 2c 5b 72 2c 75 2c 5b 69 2c 73 5d 5d 2c 5b 2f 5c 28 28 69 70 5b 68 6f 6e 65 64 7c 5c 73 5c 77 2a 5d 2b 29 3b 2f 69 5d 2c 5b 72 2c 5b 75 2c 22 41 70 70 6c 65 22 5d 2c 5b 69 2c 73 5d 5d 2c 5b 2f 28 62 6c 61 63 6b 62 65 72 72 79 29 5b 5c 73 2d 5d 3f 28 5c 77 2b 29 2f 69 2c 2f 28 62 6c 61 63 6b 62 65 72 72 79 7c 62 65 6e 71 7c 70 61 6c 6d 28 3f 3d 5c 2d 29 7c 73 6f 6e 79 65 72 69 63 73 73 6f 6e 7c 61 63 65 72 7c 61 73 75 73 7c 64 65 6c 6c 7c 6d 65 69 7a 75 7c 6d 6f 74 6f 72 6f 6c 61 7c 70 6f 6c 79 74 72 6f 6e 29 5b 5c 73 5f 2d 5d 3f 28 5b 5c 77 2d 5d 2a 29 2f 69 2c 2f 28 68 70 29 5c 73 28 5b 5c 77 5c 73 5d 2b 5c 77 29 2f 69 2c 2f 28 61 73 75 73 29 2d 3f 28 5c 77 2b 29 2f 69 5d 2c 5b 75 2c 72 2c 5b 69 2c 73 5d 5d 2c 5b 2f 5c 28 62 62 31 30 Data Ascii: ple)/i],[r,u,[i,s]],[/\((ip[honed\|\s\w]+);/i],[r,[u,"Apple"],[i,s]],[/(blackberry)[\s-]?(\w+)/i,/(blackberry\|benq\|palm(?=\-)\|sonyericsson\|acer\|asus\|dell\|meizu\|motorola\|polytron)[\s_-]?([\w-])/i,/(hp)\s([\w\s]+\w)/i,/(asus)-?(\w+)/i],[u,r,[i,s]],[/\(bb10
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 6f 73 6f 66 74 22 5d 2c 5b 69 2c 77 5d 5d 2c 5b 2f 28 6b 69 6e 5c 2e 5b 6f 6e 65 74 77 5d 7b 33 7d 29 2f 69 5d 2c 5b 5b 72 2c 2f 5c 2e 2f 67 2c 22 20 22 5d 2c 5b 75 2c 22 4d 69 63 72 6f 73 6f 66 74 22 5d 2c 5b 69 2c 73 5d 5d 2c 5b 2f 5c 73 28 6d 69 6c 65 73 74 6f 6e 65 7c 64 72 6f 69 64 28 3f 3a 5b 32 2d 34 78 5d 7c 5c 73 28 3f 3a 62 69 6f 6e 69 63 7c 78 32 7c 70 72 6f 7c 72 61 7a 72 29 29 3f 3a 3f 28 5c 73 34 67 29 3f 29 5b 5c 77 5c 73 5d 2b 62 75 69 6c 64 5c 2f 2f 69 2c 2f 6d 6f 74 5b 5c 73 2d 5d 3f 28 5c 77 2a 29 2f 69 2c 2f 28 58 54 5c 64 7b 33 2c 34 7d 29 20 62 75 69 6c 64 5c 2f 2f 69 2c 2f 28 6e 65 78 75 73 5c 73 36 29 2f 69 5d 2c 5b 72 2c 5b 75 2c 22 4d 6f 74 6f 72 6f 6c 61 22 5d 2c 5b 69 2c 73 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 5c 73 28 6d Data Ascii: osoft"],[i,w]],[/(kin\.[onetw]{3})/i],[[r,/\./g," "],[u,"Microsoft"],[i,s]],[/\s(milestone\|droid(?:[2-4x]\|\s(?:bionic\|x2\|pro\|razr))?:?(\s4g)?)[\w\s]+build\//i,/mot[\s-]?(\w*)/i,/(XT\d{3,4}) build\//i,/(nexus\s6)/i],[r,[u,"Motorola"],[i,s]],[/android.+\s(m
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 2b 29 29 2f 69 5d 2c 5b 75 2c 72 2c 5b 69 2c 6f 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 28 69 64 65 61 74 61 62 5b 61 2d 7a 30 2d 39 5c 2d 5c 73 5d 2b 29 2f 69 5d 2c 5b 72 2c 5b 75 2c 22 4c 65 6e 6f 76 6f 22 5d 2c 5b 69 2c 6f 5d 5d 2c 5b 2f 28 6c 65 6e 6f 76 6f 29 5b 5f 5c 73 2d 5d 3f 28 5b 5c 77 2d 5d 2b 29 2f 69 5d 2c 5b 75 2c 72 2c 5b 69 2c 73 5d 5d 2c 5b 2f 6c 69 6e 75 78 3b 2e 2b 28 28 6a 6f 6c 6c 61 29 29 3b 2f 69 5d 2c 5b 75 2c 72 2c 5b 69 2c 73 5d 5d 2c 5b 2f 28 28 70 65 62 62 6c 65 29 29 61 70 70 5c 2f 5b 5c 64 5c 2e 5d 2b 5c 73 2f 69 5d 2c 5b 75 2c 72 2c 5b 69 2c 6b 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 3b 5c 73 28 6f 70 70 6f 29 5c 73 3f 28 5b 5c 77 5c 73 5d 2b 29 5c 73 62 75 69 6c 64 2f 69 5d 2c 5b 75 2c 72 2c 5b 69 2c 73 5d 5d 2c 5b 2f Data Ascii: +))/i],[u,r,[i,o]],[/android.+(ideatab[a-z0-9\-\s]+)/i],[r,[u,"Lenovo"],[i,o]],[/(lenovo)[_\s-]?([\w-]+)/i],[u,r,[i,s]],[/linux;.+((jolla));/i],[u,r,[i,s]],[/((pebble))app\/[\d\.]+\s/i],[u,r,[i,k]],[/android.+;\s(oppo)\s?([\w\s]+)\sbuild/i],[u,r,[i,s]],[/
2024-05-24 06:26:51 UTC	1369	IN	Data Raw: 2f 61 6e 64 72 6f 69 64 2e 2b 5b 3b 5c 2f 5d 5c 73 2b 28 54 4d 5c 64 7b 33 7d 2e 2a 5c 62 29 5c 73 2b 62 75 69 6c 64 2f 69 5d 2c 5b 72 2c 5b 75 2c 22 4e 75 56 69 73 69 6f 6e 22 5d 2c 5b 69 2c 6f 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 3b 5c 73 28 6b 38 38 29 5c 73 62 75 69 6c 64 2f 69 5d 2c 5b 72 2c 5b 75 2c 22 5a 54 45 22 5d 2c 5b 69 2c 6f 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 5b 3b 5c 2f 5d 5c 73 2a 28 67 65 6e 5c 64 7b 33 7d 29 5c 73 2b 62 75 69 6c 64 2e 2a 34 39 68 2f 69 5d 2c 5b 72 2c 5b 75 2c 22 53 77 69 73 73 22 5d 2c 5b 69 2c 73 5d 5d 2c 5b 2f 61 6e 64 72 6f 69 64 2e 2b 5b 3b 5c 2f 5d 5c 73 2a 28 7a 75 72 5c 64 7b 33 7d 29 5c 73 2b 62 75 69 6c 64 2f 69 5d 2c 5b 72 2c 5b 75 2c 22 53 77 69 73 73 22 5d 2c 5b 69 2c 6f 5d 5d 2c 5b 2f 61 6e 64 72 Data Ascii: /android.+[;\/]\s+(TM\d{3}.\b)\s+build/i],[r,[u,"NuVision"],[i,o]],[/android.+;\s(k88)\sbuild/i],[r,[u,"ZTE"],[i,o]],[/android.+[;\/]\s(gen\d{3})\s+build.49h/i],[r,[u,"Swiss"],[i,s]],[/android.+[;\/]\s(zur\d{3})\s+build/i],[r,[u,"Swiss"],[i,o]],[/andr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49765	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	698	OUT	GET /fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	704	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: font/woff2 Content-Length: 21528 Connection: close CF-Ray: 888b3772ecb141c6-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 311225 Cache-Control: public, max-age=31536000 Expires: Thu, 15 May 2025 09:06:03 GMT Last-Modified: Thu, 01 Jun 2023 23:15:59 GMT cf-apo-via: proxy Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5JqcV9PljQEtFeaEhItgavZERHR%2Bf0Cv1A5OPVWJKGYkhO%2FPy3ciNVL3KJ61FvS%2FNrwoKtGc%2B3mYkazhU6IHvFH5zHmps4VWS2Mgy7gaJ6g1BaKNalBVv8Yp3tF5cull6z4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-24 06:26:52 UTC	665	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 54 18 00 0f 00 00 00 00 cb 20 00 00 53 b9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 34 1b 81 a8 4c 1c 92 30 06 60 00 84 4a 11 08 0a 81 ad 60 81 8a 2d 0b 85 0e 00 01 36 02 24 03 8a 16 04 20 05 85 02 07 8f 2e 0c 07 1b d5 b5 07 d8 a6 e0 ac 7e bd 59 3d ce 07 4e ef a0 c9 a6 0c f7 72 9e 40 6a 6b cb fc f8 6c 84 05 1b 07 00 12 bd 21 f9 ff ff 9e dc 90 21 52 81 ba 6d d5 3b 44 6c 98 65 b5 ab c6 1c 6b 76 1c 55 9a b5 d5 e8 ee 0a 3b bb 0b d6 28 d3 3b 3c 47 07 d6 22 46 5e e5 4d 56 ed 30 20 b8 a8 06 fb 61 31 65 32 6b 32 6f 6e 3a ca 71 c1 78 a8 1e aa 4d 65 26 7c ec 4e 6c 52 2b c5 2c 2c 32 7c c0 df 75 3e fa 21 a3 50 3a f8 08 7a c3 7d 46 f3 11 1d f7 65 bd c2 df c1 f1 8e 7f a7 a0 a0 28 05 45 45 41 d2 49 93 4c Data Ascii: wOF2T S4L0`J`-6$ .~Y=Nr@jkl!!Rm;DlekvU;(;<G"F^MV0 a1e2k2on:qxMe&\|NlR+,,2\|u>!P:z}Fe(EEAIL
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 6a ce 7c 08 bf b3 c6 2a 59 13 2b 54 23 29 fe 6d 40 e9 5c 05 ba 5d ed 58 f6 3b ef 8f 65 a0 f1 86 68 bd a1 35 a3 14 c4 2e 55 5c 05 aa 54 39 51 d8 10 e6 12 b0 45 28 a9 28 b9 4a 99 f2 17 a5 bb 36 57 66 a6 94 9f c5 d2 e0 ff 65 70 b2 a0 bc a5 09 12 79 13 29 73 99 82 68 77 ba d7 cc f6 ce 99 3d 00 8f bd c5 fd 1f f1 f6 b0 ff 05 5b a5 23 40 b3 06 0f ed 01 a0 f1 36 a3 22 b8 62 e1 69 ac 49 e5 43 6f 22 67 52 66 0a 22 a6 ca 18 c6 8a 9c 0b b2 44 a9 88 19 77 1e d0 83 f1 b0 81 c4 f3 fc ef ed a7 e5 be 4d 1b 1e ed 52 ab 42 7e e1 68 c2 61 a3 c4 34 ca 9b 03 5d 7d 6e aa a3 aa 51 59 d8 b4 a2 23 5c 5c 84 6d 92 85 fc 32 2a ba 54 59 5d 9c 8c 50 26 b6 f7 cb 2c 05 6e 91 a3 35 63 a2 54 30 51 33 8c f7 3a be f7 ad a9 59 9a 91 16 76 7b db 58 10 8a a2 b0 0c ab b0 0a 21 18 86 e1 5c f7 ab Data Ascii: j\|Y+T#)m@\]X;eh5.U\T9QE((J6Wfepy)shw=[#@6"biICo"gRf"DwMRB~ha4]}nQY#\\m2TY]P&,n5cT0Q3:Yv{X!\
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: dd 65 ce 99 e8 fb 49 12 48 49 e9 54 ab 00 33 a9 68 ae 51 80 bd ee f1 69 d2 c2 1b 40 01 3f 48 b7 b6 9c 7a a8 b4 2e b7 07 94 55 48 17 59 92 79 50 48 47 ff 56 cc 72 6f 9a 9d a8 15 cf a7 f5 76 a7 0b 1a 36 86 ec 13 68 99 47 d9 74 46 b3 93 91 58 b7 42 67 72 c3 4c 00 94 fd b5 b2 20 5b 7d 14 22 80 93 ee 28 03 38 2d 1f 64 e6 8b 87 92 5d ce cf 1e c9 b9 f8 77 bb cf 17 2c f5 00 73 b8 c1 4b 3f b2 dc f6 46 f0 c0 34 a9 c5 54 ee 21 ca 3e 74 32 6f 00 e6 17 84 69 41 80 7c de a9 d9 bc 0c d8 f9 5d 9e 55 21 9f 41 94 49 9b 95 2d 1e 92 e6 10 d6 9e a0 78 32 b7 68 46 ab 7c 70 ce 9d 30 1b bb a9 79 35 49 c4 2b 11 21 cc 4b 48 0e e9 23 a2 e3 ec d0 f9 09 1d d5 69 1f e5 eb eb a3 fd 8c 76 fa 92 6f 08 9b 49 6d 8a 04 85 0a bf 2d bf 56 f7 53 b6 56 2f c2 b9 be f0 2e ae 1a e5 66 23 40 b9 a2 Data Ascii: eIHIT3hQi@?Hz.UHYyPHGVrov6hGtFXBgrL [}"(8-d]w,sK?F4T!>t2oiA\|]U!AI-x2hF\|p0y5I+!KH#ivoIm-VSV/.f#@
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: fe 53 3b c1 c3 7a 04 2d 51 43 d2 41 49 8e dd 64 80 74 d2 47 02 a0 4a 14 c0 a1 a1 11 72 de 5a b1 b6 9a ab bb 47 2b 8b a1 fa c1 ac 31 89 b8 dd 4b cd 14 32 40 2d 01 47 27 00 68 e7 63 23 28 a5 54 df 71 5b 09 78 26 5d 96 b9 88 46 15 0a 8c 99 d0 1d c0 6e e1 12 0b 07 30 41 ec f2 96 81 01 00 74 47 62 d0 d2 8e dc de 29 9b fc 0a 40 06 5f 20 a5 58 7a 22 c0 74 ea 80 1f 3c 83 8f f4 24 24 2a 88 53 12 52 11 d6 27 c1 40 c4 f6 09 77 c9 49 e6 42 b2 05 75 d4 42 9c 74 d0 00 44 ad d7 cf a2 ae ce 04 08 f5 26 42 9a 64 72 e4 29 20 94 a9 09 64 a6 39 4d 6a d3 ce 5d 20 84 6e 42 eb 21 ac 3e 42 e8 5f 1f da 3a eb 91 6c b0 11 d1 26 27 92 cb 0d be 77 c8 10 e3 69 a1 80 e9 4b df 87 11 38 00 6d d7 48 90 78 f7 a0 d9 a4 3c 54 4a a1 50 4a ed 27 e6 8e 06 fc d1 bf a3 b7 db bd d3 b3 58 a7 d4 22 Data Ascii: S;z-QCAIdtGJrZG+1K2@-G'hc#(Tq[x&]Fn0AtGb)@_ Xz"t<$$*SR'@wIBuBtD&Bdr) d9Mj] nB!>B_:l&'wiK8mHx<TJPJ'X"
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 6c 7f 72 f8 32 3a 2e c8 c8 53 32 ed 9e 50 81 a9 ad 82 7a d8 69 1e 75 1d e5 bc a3 90 c1 f9 5b ba ae bb cb fc 54 04 75 68 04 99 fc 54 41 ed 3d 32 a2 76 ca 8c 86 d0 da 87 72 fc 09 20 3c 87 71 ab 3b 7c c9 77 e6 35 ba f5 dd 27 5e bb b0 0c 7f e1 9f f0 2a 47 c2 ef 6e 8c 36 14 3e 20 d5 f5 94 36 08 a5 d8 0e 26 e3 23 23 03 a7 e9 9c bf d0 b4 f1 b5 84 d0 36 ee 5a 2e 69 93 70 e5 30 e1 b3 91 ab 96 f3 f0 08 16 cd d5 37 fb 16 6e 97 81 6f 2b c9 40 66 d9 c8 61 26 04 51 a6 71 7e 72 4d 86 de 8e 1d dc a0 62 4c d6 36 92 b6 c8 61 9f 48 79 8d a7 90 86 b8 22 6d ea ce eb 34 70 07 53 20 1c 8c b1 18 7b b8 e6 77 3e 20 22 04 01 c0 44 1c 99 0e 33 99 14 1b 37 50 dd e6 36 03 1c e4 bf 81 a6 9c 2d 3c 36 1c 62 1d 6f 68 ab 3b 45 a3 b0 29 10 9c 3b cd cc e2 73 db 38 33 fc 99 c3 79 58 cb 6e ef Data Ascii: lr2:.S2Pziu[TuhTA=2vr <q;\|w5'^*Gn6> 6&##6Z.ip07no+@fa&Qq~rMbL6aHy"m4pS {w> "D37P6-<6boh;E);s83yXn
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 80 81 93 43 6e 05 25 1f b0 cf 68 e5 e9 f9 c1 e7 54 9b 15 90 73 ca b5 fe 0b e8 7f c0 12 7f 15 6b 99 8d be 15 fb 4f e5 7f 35 04 3a 70 9b de e0 af a2 a5 79 57 ae bc e3 10 7f 75 fb 99 f9 98 de ba e4 ae 45 8b c4 12 0d d7 35 8d e1 73 c8 e3 70 37 f0 5e 5b 78 46 93 58 65 72 ed 20 13 cc 02 a8 a6 68 5f 75 45 8f 20 29 69 45 34 c2 2b 6d 0c 42 34 27 91 75 10 b4 ac 5b ca c4 aa 30 29 8d 22 82 59 0b 78 55 55 d1 85 7b 58 a3 8d 18 a2 50 cc 61 8a 61 e6 d5 30 af 96 45 b5 d5 71 a2 b5 b8 b0 17 0f 9a 96 7d 1b 87 b0 eb 41 d0 12 b4 65 d5 6e 20 c4 2f a4 95 1d b7 b9 5d eb 8e 42 9f 7d 98 e9 11 8f 52 86 5e a8 45 1b db a0 5a 7b 86 b1 d0 63 44 83 31 45 2a 6c 0c 86 13 4f b0 c6 bb fa be 4f 26 ff cf d1 9b 2a 4c 8c f4 74 0d f0 62 b9 50 30 f7 36 70 90 3e 94 fe b7 3b b3 19 61 97 48 25 52 99 Data Ascii: Cn%hTskO5:pyWuE5sp7^[xFXer h_uE )iE4+mB4'u[0)"YxUU{XPaa0Eq}Aen /]B}R^EZ{cD1ElOO&LtbP06p>;aH%R
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 67 bc 94 79 00 75 29 bd 3b 9e 64 2f ea b1 87 5d ec c6 bd c4 67 63 c0 9c 6d db 4e cb 44 df b3 bd d4 99 0e 26 6a 3c 26 3b 10 3e 28 42 27 9d fe 9e 7f 80 27 2b bf 42 28 1a 9e 37 69 4e 5d 4c 15 6c 89 19 65 da 74 61 97 48 ce 07 43 dd c2 de a5 84 09 b7 76 c1 92 3e 7f 09 46 a1 3e 5e 43 83 f2 c2 bb d5 34 35 5e d3 4d ae 1a 9d cb 19 10 80 f9 d8 20 40 ff 73 88 a4 48 ed f9 01 11 a6 11 ff 32 9a 8a 84 e0 8e ca 82 e4 ed 08 b8 ff 05 e0 c3 28 50 35 81 fa 2f d2 91 ae a2 a1 1a 67 c6 e1 49 02 af 00 c6 20 c0 44 de 93 5c eb 60 4c 7d 5b fe fd 65 70 3d 70 c7 75 17 9d 71 d1 71 07 ed b5 dd 26 6b 2c b3 c0 a0 6e 83 e6 68 31 55 bd 2a 11 21 7e 6e 36 83 0c a0 42 22 0e 83 2a 87 f4 11 2a 8a a7 24 5a ad 85 d1 00 9e 96 4c 95 49 dd a9 7b ae a2 9b b8 c5 8d 2d ce f7 19 4a 1b 58 b9 4c 93 54 dc Data Ascii: gyu);d/]gcmND&j<&;>(B''+B(7iN]LletaHCv>F>^C45^M @sH2(P5/gI D\`L}[ep=puqq&k,nh1U!~n6B"*$ZLI{-JXLT
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: c1 cb 99 28 fb 72 b6 32 8f c9 9d ff 8f 63 17 c9 b2 58 95 aa d6 61 9b 8b ee 18 f3 a2 14 f9 3b ab 79 1a 20 1b 12 73 da 4a fd 34 be f4 32 dd 2f ae 78 42 f8 30 d0 cf de 98 75 fc 15 67 02 ff ff fc af 70 e1 5c 58 00 58 ac 78 bb 3f f6 1f 00 be fc 18 9b 35 f6 dd 58 cb d8 fb 63 45 63 85 4f b7 3f 1d 7c 3a f0 e4 9f 27 ef 00 c4 0f b8 03 b0 13 70 af 7e c0 fb 80 af 81 8c 01 00 b2 67 cd c3 4b 0d 68 78 1c 9b ed 7c f1 cc 5f 15 0d 06 ec 70 c2 88 0b e1 c0 7a 87 ac 73 d6 06 1b 23 43 24 88 d2 36 d7 9c 74 de a9 62 3a 1e b3 d3 ce 39 13 2d c8 16 6f fd 07 ff 05 80 f7 5d 8c db 65 af 9d 2a b6 43 ae c4 eb bf 50 bb e5 76 2c f6 2e 39 9a a0 9b fe 76 ba 68 08 03 61 c1 3b 0f 6a 0e 21 fb e7 6e 1e 39 72 79 23 00 df 83 9c 99 f1 70 f5 77 55 af 41 87 a9 1a 35 69 36 cd f4 88 a0 c5 4c b3 cc 36 Data Ascii: (r2cXa;y sJ42/xB0ugp\XXx?5XcEcO?\|:'p~gKhx\|_pzs#C$6tb:9-o]e*CPv,.9vha;j!n9ry#pwUA5i6L6
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 27 98 fe 24 63 79 af 23 b7 04 cd f8 d3 05 6b 16 0c e4 a9 f1 dc 61 9b 82 05 e5 1b da 06 ed c9 63 62 d5 61 e6 fd 12 9d 2f b4 18 2a c8 b0 c8 a1 ec 92 ed 27 7f 6a 83 ce 16 76 d5 57 a0 f5 84 5c 43 df 52 25 16 83 28 47 91 f5 2c 92 9a 0f 37 8a 6c 40 35 0b 74 b5 9c e4 3b 07 63 85 84 d2 16 94 d3 f0 57 43 85 bd b4 15 75 55 e1 d7 b9 09 74 c4 0b 66 93 1b 46 d1 e6 74 f2 99 23 f8 4d dc b7 0e 57 38 9c 93 58 a3 1f 68 0c 70 11 2b d7 83 c8 ef 0b 70 3b a4 50 0f 93 3f ce c7 51 79 d0 24 b0 80 0c 0d 32 e1 5a d5 5e 4e fe 23 0b df b5 4d 3d 55 b2 80 1a a5 dc 2a bd fb 1a 2f 62 7f 91 6f 0b 06 2c 7b 6a 15 88 52 c8 06 8f ab c2 5a 0d 00 f0 3a e6 2e 00 81 c6 b1 8e d1 fd 67 89 8e ae a1 32 13 3d 3a a3 bf c4 53 0a 00 de 18 f2 6e e6 0a 0a 1e 4a 7b 31 f0 d8 b3 66 c3 45 02 d0 d8 9f 2f 0d 1e Data Ascii: '$cy#kacba/'jvW\CR%(G,7l@5t;cWCuUtfFt#MW8Xhp+p;P?Qy$2Z^N#M=U/bo,{jRZ:.g2=:SnJ{1fE/
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 5b b5 9d da c6 10 52 9c 76 7e 39 3b c3 18 26 b7 7b 33 55 17 25 1d c1 4d bb ed 00 78 62 06 67 d8 bb 82 e2 dc a6 73 f3 c4 56 96 ea 92 45 57 74 50 b1 cd c9 e1 cf 4d 95 16 db be 50 77 eb a1 ca 3c 15 13 77 2e ce 69 86 32 08 8f 84 bf 90 87 68 29 30 0d c6 cb 39 60 cc 6b 80 fd ae f3 0c 69 c5 ba 89 52 cf 80 a5 c0 f6 62 05 b0 77 32 90 9d 7d 35 7a ea 9b dd d8 d6 bb 7a e7 66 48 62 30 9d 98 45 ca c1 2b d5 86 44 8d e6 92 3d b8 6d d1 7f 8c 73 d3 08 c7 28 93 a5 2c a4 7d 21 2f 31 93 bd 3f 75 0e ea 51 fb 2d 76 b9 ff 18 80 fd ca d4 da 80 ac 5d d9 4e 4b d4 57 33 33 18 95 97 04 df 1e 6d d1 ad b2 1f b2 e2 72 e7 95 53 d3 e8 65 20 a5 a6 d3 4a e4 d6 84 f4 18 9d c2 83 ee 7b 14 b7 7d 07 6a 99 99 cc 8a 44 3f 95 da 67 e2 91 97 9d 9e 00 06 65 18 b9 14 19 fa 83 b6 38 1e d6 9e 23 82 10 Data Ascii: [Rv~9;&{3U%MxbgsVEWtPMPw<w.i2h)09`kiRbw2}5zzfHb0E+D=ms(,}!/1?uQ-v]NKW33mrSe J{}jD?ge8#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	689	OUT	GET /wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.woff?ver=4.4.4 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	1138	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: font/woff Transfer-Encoding: chunked Connection: close last-modified: Fri, 05 Jan 2024 10:58:34 GMT vary: Accept-Encoding etag: W/"6597e0da-1e4c" expires: Wed, 19 Jun 2024 15:59:25 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311225 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0zNMePxtd2IvGqi0Dp12cxn%2FigHoMv2es%2FIvvOdZIui6NvSGdGRfacdzRGuxI0aRxPuBrleeZOPDJmG5gVmnp48xt74N6f%2FUdpfGwv4N66XnFYjB16aycwwd%2FGX4o9WAXZI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=e_Cx3eOJmsDzh.uTT1rHvYz9BhnIFh5mvxRGHU7syxA-1716532012-1.0.1.1-.x5dJ3rrYH.gDBpOxa._JQ5gAgAEgkj2So7tWTk9RFa7WUqRmvzysNhSaSzr_QaNJmEbTwcYUMltK6EF2qSjoPfy7gEGFsgT3X9ulzVPcC1vo92y38MFSDEEz44NMvv3ggjRXtvBdY9EL9sjcsuJUz2VCDkuSeA9hGSppTDosnQ"}],"group":"cf-csp-endpoint","max_age":86400}
2024-05-24 06:26:52 UTC	471	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2d 72 65 70 6f 72 74 69 6e 67 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 5f 6d 6f 6e 69 74 6f 72 2f 72 65 70 6f 72 74 3f 6d 3d 65 5f 43 78 33 65 4f 4a 6d 73 44 7a 68 2e 75 54 54 31 72 48 76 59 7a 39 42 68 6e 49 46 68 35 6d 76 78 52 47 48 55 37 73 79 78 41 2d 31 37 31 36 35 33 32 30 31 32 2d 31 2e 30 2e 31 2e 31 2d 2e 78 35 64 4a 33 72 72 59 48 2e 67 44 42 70 4f 78 61 2e 5f 4a 51 35 67 41 67 41 45 67 6b 6a 32 53 6f 37 74 Data Ascii: Content-Security-Policy-Report-Only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=e_Cx3eOJmsDzh.uTT1rHvYz9BhnIFh5mvxRGHU7syxA-1716532012-1.0.1.1-.x5dJ3rrYH.gDBpOxa._JQ5gAgAEgkj2So7t
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 31 65 34 63 0d 0a 77 4f 46 46 00 01 00 00 00 00 1e 4c 00 0d 00 00 00 00 2c 1c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 1e 30 00 00 00 1a 00 00 00 1c 9c 5a 04 6f 47 44 45 46 00 00 1e 14 00 00 00 1c 00 00 00 1e 00 27 00 40 4f 53 2f 32 00 00 01 90 00 00 00 44 00 00 00 56 6f ca 82 38 63 6d 61 70 00 00 02 24 00 00 00 99 00 00 01 6a ff c3 57 de 67 61 73 70 00 00 1e 0c 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 03 38 00 00 19 4b 00 00 23 f0 73 b8 02 9e 68 65 61 64 00 00 01 30 00 00 00 28 00 00 00 36 23 24 ab 7b 68 68 65 61 00 00 01 58 00 00 00 18 00 00 00 24 04 2f 02 3b 68 6d 74 78 00 00 01 d4 00 00 00 4f 00 00 00 e8 71 6b 0e e2 6c 6f 63 61 00 00 02 c0 00 00 00 76 00 00 00 76 15 33 0c 16 6d 61 78 70 00 Data Ascii: 1e4cwOFFL,FFTM0ZoGDEF'@OS/2DVo8cmap$jWgaspglyf8K#shead0(6#${hheaX$/;hmtxOqklocavv3maxp
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: c1 de 4e 7d 6e d4 2a 59 9c 09 21 68 fe 8e ee 91 7d 8b 77 1c 29 2e 0a 7b 4a 7c ee e4 5d 13 b9 ad 2b eb d9 9c 1d 65 1a 97 50 f0 79 07 1a c9 b0 90 a9 4e 18 cd 64 ca 32 ea cf f4 c2 2a f8 1c 3a 9e 15 a0 30 64 f1 f4 d6 2d db f5 2c 58 b7 3c 17 5e fd c8 c9 4f 3f ec 93 8d 7f 1f 8e ff 86 52 55 96 70 fc 24 9e c9 34 2e 42 f9 86 11 2e 35 ed a5 fd d1 1a e0 77 38 70 00 f7 00 d5 66 30 ea a1 f4 47 bd 28 84 77 78 79 eb fd a2 a0 84 1f 84 78 ce 2c 5b 21 25 64 61 0a 36 72 e4 9e b3 22 a7 8b b3 22 1f 6a 9b 9b 22 10 0e dc 08 43 aa 3f 19 9d e8 93 22 ca 12 4c 9f f4 4e 46 4f 8a a7 ef 13 e2 3e 2d cc 8b 83 07 85 f0 14 45 53 ee 55 36 e0 0d 5c f3 94 b2 80 fa 3a 52 c6 ca 9d ca 29 9c dd 50 9a 4a 03 a7 67 03 ae 36 8c 6a 20 ed 07 f5 10 f7 a0 35 d9 11 b9 0b d9 0e 45 28 ae 3e 1f 35 06 bd 76 Data Ascii: N}nY!h}w).{J\|]+ePyNd2:0d-,X<^O?RUp$4.B.5w8pf0G(wxyx,[!%da6r""j"C?"LNFO>-ESU6\:R)PJg6j 5E(>5v
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 74 6e 29 e1 f9 4e 7d f7 12 18 5d 8b d5 4c 64 2d 9d e5 59 6a 47 73 48 00 64 f7 bf 1d d5 71 59 c4 ae d9 c2 f0 f2 f3 d3 22 ac 07 c3 9a 6c 32 2b 86 d0 fd c2 42 9d e6 4b 81 b3 33 bf 7b e0 4f e1 3b 88 cd cb 12 23 50 dd b5 0c 0c c2 89 21 af 81 2c 47 a9 87 62 d4 90 be b4 35 69 ca 83 4c 26 08 01 f0 6d 4b b0 ad ff 35 5f 2c de e9 e4 34 9b 32 93 2f 8e ac bc e5 93 11 77 d4 12 ed aa a7 46 f6 c3 9c 23 78 cf 3e bb 51 ff 12 7c 87 d2 c7 dd 5c 14 ea 53 49 a3 a8 02 6f f7 2c cf 84 7c 59 a7 89 f9 73 e7 70 77 e5 b2 c6 38 ad 6c 94 9c 74 a2 67 5f c7 fd 7b 0c f7 af 8c 7a c6 93 25 18 f6 87 f1 30 c6 bd d1 82 fe 04 6e d6 00 ce 55 ab 4c dd dc 5c 21 ba 53 f5 3a e3 4e b1 c9 f9 57 0d dd 34 9f d9 77 81 9a e8 d8 f8 1d d7 17 06 26 e7 93 35 cb 81 ff 01 0f a6 82 42 6a 45 71 5b 8b bd 76 3f 4a Data Ascii: tn)N}]Ld-YjGsHdqY"l2+BK3{O;#P!,Gb5iL&mK5_,42/wF#x>Q\|\SIo,\|Yspw8ltg_{z%0nUL\!S:NW4w&5BjEq[v?J
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: f8 3b 62 d2 62 fc f5 f0 e8 e2 c2 37 32 a8 dd fa a7 ab 72 08 89 29 e7 70 bd bf 87 eb f5 a4 f7 49 51 29 51 01 d1 a2 24 67 43 30 45 5c 47 31 62 05 45 87 ad c8 8a b0 fd e6 0a ba cd b1 aa 26 e8 0c 57 54 8a 14 7c 1f 05 78 86 90 e3 aa be 97 d2 bb 09 f9 02 4a 64 45 7f 43 d0 a7 88 7a 10 35 f2 04 55 9f 25 a0 7f a0 d2 17 0d f6 55 aa fe 17 00 25 8b 45 8e e3 5e bf 89 35 43 f1 51 af 70 53 1d 68 c7 91 d6 f7 d0 2c 26 51 1b 5c 3c 74 fa c8 07 8b 9d e3 77 d7 4f 3c b1 ab 92 4c 4d 25 f0 e6 9b 6f 9e be 7c f9 dd e3 60 bf 90 4c 55 7c af 92 f1 81 a7 e1 4f e0 25 d4 51 57 f2 d5 1d 16 ba cd 52 87 11 dc f3 bb 87 9b cd c3 df 3e 1c 43 fc a7 8f c2 4b b5 fd 9f d8 5f cb 8a bf fc da 26 de 2f 79 ef 2b f0 43 e5 19 e5 79 94 f7 0e 9a 49 25 96 3c 5f a2 dd 10 1d b2 4c fc a4 a8 06 a9 44 37 cd 97 Data Ascii: ;bb72r)pIQ)Q$gC0E\G1bE&WT\|xJdECz5U%U%E^5CQpSh,&Q\<twO<LM%o\|`LU\|O%QWR>CK_&/y+CyI%<_LD7
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: a9 6c b9 dd ee 80 ec f9 07 33 ac a1 ca 5f 6f 85 3d c8 62 c6 42 16 5e 5c 5f 65 17 d8 43 04 48 c2 42 35 ba 9b e1 f9 43 6a 93 45 2c 82 47 8b ac 98 7e 91 7d 71 71 91 7d 91 fd fe 0d 76 27 2b 7e d1 65 45 f6 1d 20 d3 78 72 99 4d ce 1e c4 fa c7 73 02 d5 8f e7 04 24 1e fa 32 41 8b e0 36 ca 9c f0 4e 06 60 78 07 43 57 a3 ea f3 f5 99 45 53 b5 2d a2 ed dd 0e f7 7f bc af 81 c0 e6 f0 5a 92 d4 30 e6 26 4e bc 26 63 d2 75 e5 17 11 c7 5f c8 70 3c 40 8b 68 a1 3d cc 4c 6c a0 3f b3 8d e6 69 c0 86 51 bb ef 40 a3 9d 6e 07 fb 3c 86 2f 6d fd b3 4c 0a a1 71 36 a1 79 f4 c8 d6 9f 1f 59 fc a7 eb 5f e2 fc cc 2c 13 4c cc 9e e1 1c 5e 68 96 bf 26 53 46 58 7c 61 7c 1d be 30 3e fb d9 d3 ea b1 19 c6 66 8e a9 28 cd 07 94 31 bc 8a eb 3b a4 9c 50 4e a3 64 b2 c7 66 69 2f 3f 4b fa a7 18 b3 87 1f Data Ascii: l3_o=bB^\_eCHB5CjE,G~}qq}v'+~eE xrMs$2A6N`xCWES-Z0&N&cu_p<@h=Ll?iQ@n</mLq6yY_,L^h&SFX\|a\|0>f(1;PNdfi/?K
2024-05-24 06:26:52 UTC	919	IN	Data Raw: 54 b5 f6 8d 1a bd cf b8 48 c5 ec 13 b3 08 39 67 35 b6 c0 ff f8 8f 79 95 f0 9f 68 50 e5 1c bb 7c e7 83 0f 5e 16 fa 2e 4d eb 6b 46 e6 d7 d7 32 bb f1 64 86 50 99 40 61 10 f9 59 82 37 7b 69 ca 70 af 27 7c 0f ed c8 86 09 03 4c e0 ee df 79 6c 95 81 ad 25 5c ad 56 ee 7e 6c eb 2f 76 6b a5 dc a2 26 f6 72 93 dd ae 1a 70 eb 91 93 f7 0e 18 6f 88 9c ea 02 88 ab 37 9f 3f ab 33 ad a1 aa 5d a6 6b 67 0d 55 56 97 98 b1 b3 ee 7b 90 43 bd 26 73 ea 5e c1 0f 71 99 63 90 58 fc f1 da 7a 2b a1 ad 78 6e 8e 24 71 2b 81 d7 b6 fe 3a f2 dc e2 5f 04 79 2f fa 66 e4 79 d1 43 21 d6 fc a2 e7 47 df 55 b2 7c cf 4b b8 be a7 d1 43 e4 71 dc 44 e9 61 c4 a6 34 b7 a3 12 3e 39 62 18 26 2b 12 5e 6a 13 a0 9f a0 fe e8 c3 fa f8 a3 ed f0 50 af d9 ec 35 1f ea d6 eb dd e9 43 41 b5 1a 20 aa 77 ba d3 c8 c9 Data Ascii: TH9g5yhP\|^.MkF2dP@aY7{ip'\|Lyl%\V~l/vk&rpo7?3]kgUV{C&s^qcXz+xn$q+:_y/fyC!GU\|KCqDa4>9b&+^jP5CA w
2024-05-24 06:26:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	694	OUT	GET /fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: font/woff2 Content-Length: 14160 Connection: close CF-Ray: 888b377328677cf0-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 311225 Cache-Control: public, max-age=31536000 Expires: Thu, 15 May 2025 07:55:59 GMT Last-Modified: Thu, 01 Jun 2023 22:52:57 GMT cf-apo-via: proxy Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A8hLmAyOW2RKsXyOonRSQ3YXT1J5h9fRt30%2BTAok6bfRPiSv%2F8tDsIghQ94ho3aW1DteKgy7D9VFsbv3oYO9oTiM01ZUUsZYVrh89LPkFTQJnUSDikhJYQ3KZq5Zj7CXRpY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-24 06:26:52 UTC	669	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 37 50 00 0d 00 00 00 00 7e c4 00 00 36 f9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 74 1b bc 62 1c 8d 26 06 60 00 84 62 0a 81 8b 10 ed 64 0b 84 5c 00 01 36 02 24 03 89 34 04 20 05 85 04 07 8c 02 1b d5 6c 25 ec d8 8b 02 ba 03 27 4a e5 99 fa 47 51 36 59 6b 8f 48 c5 b9 2a f8 ff cf 09 6a 8c 21 8f eb 1e d1 6c 6d 41 18 71 10 46 6a f6 ea de 77 ac 35 63 12 73 ce 7b 36 74 53 0b 71 e1 c9 74 95 3a f0 69 b2 e7 7a 9d bb 63 2d bd 1f 5d e2 93 9e 38 59 ab d5 df 71 c6 6b e4 4d b9 0c f1 fb eb ae 81 62 10 65 cb 29 a9 cf bc 2f ca 83 49 7e 76 c2 83 15 82 40 88 8d 85 40 10 c8 48 2b 6b 72 2e 77 06 b8 93 23 12 4f 12 54 6b ff f6 ec c3 0f 84 41 54 40 e8 90 64 2a 12 d0 a2 b0 f1 11 36 15 61 88 55 d8 11 dd f1 38 e7 df 7b Data Ascii: wOF27P~6tb&`bd\6$4 l%'JGQ6YkHj!lmAqFjw5cs{6tSqt:izc-]8YqkMbe)/I~v@@H+kr.w#OTkAT@d6aU8{
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 88 84 1b 12 11 12 bd f3 7f 8f b1 d9 02 fd 4a 72 9c d0 1e a5 fe 0f 42 4d 15 47 65 6d 99 91 09 83 48 e5 9d 67 df 19 eb b3 46 00 83 00 d5 30 22 68 24 0b 85 05 9b 50 d8 71 08 c1 04 30 1f 48 b0 60 48 24 bd 74 71 dc d2 0c 11 95 26 53 42 ba 7c 4d d2 94 e9 92 66 9c 61 69 26 9a 2d dd 14 73 a4 e9 03 31 1a 0e 11 10 50 c9 df 28 e9 4b ee 63 53 01 ff 99 31 aa 14 b2 91 80 ac 9b 79 60 02 8b 76 40 92 f9 d9 47 5f 8d 28 05 09 e2 ff ee 04 80 82 45 25 63 e8 29 a0 a2 a1 76 03 4e d7 9d c4 ea 7a 2c 7f df ea c6 aa 11 1f 0f c8 b5 fe 93 ed e1 33 ff c7 53 86 1b ee 00 05 9a 5e 27 7f 06 2e 40 db f5 86 a4 7c c5 1f ed 8a 81 7f 7f e0 00 18 d6 f9 97 af cf 6c 6e 84 1a 38 ce 8a 59 49 89 c2 e2 97 77 cf c6 3f 64 59 d8 30 4a 0d 98 4f 84 63 5c af 17 5c 2c 01 9a 51 83 7a 85 80 06 77 89 fc 85 8a Data Ascii: JrBMGemHgF0"h$Pq0H`H$tq&SB\|Mfai&-s1P(KcS1y`v@G_(E%c)vNz,3S^'.@\|ln8YIw?dY0JOc\\,Qzw
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: bf 01 c3 f8 47 cc cc 97 b3 bd af d4 b5 18 18 2d de 42 4f 65 a8 81 f8 f8 3e d7 a7 22 6d de 0b b1 b3 02 cb 90 cd 3b 86 b0 cc b7 d0 46 bb ec 81 60 93 cd 00 9a 00 70 a0 66 40 63 ed 56 23 e6 ed 70 09 25 2c 22 11 f3 d5 52 ca 25 21 5b 12 ad 0f d4 c2 02 0b 87 00 0f a8 aa 64 67 59 8a 28 6f 66 e4 5b a6 20 a0 61 4a 31 49 35 e8 9d 61 b7 02 f0 00 22 89 74 ab 62 18 69 7e 18 59 18 26 6c 0c 63 bb ea c9 75 09 23 4e 7f ec 40 7d 35 c6 89 b3 e2 52 c0 f0 c0 69 5b ad b6 90 51 b9 38 44 3a 42 8d 56 e0 96 39 68 cf bd c2 c7 55 73 5c 2d a1 3a 0e ea c9 18 8f 69 20 d3 78 5c f3 71 84 5a 32 75 28 46 14 8e 9a 03 75 17 53 7f 21 c6 7b d5 70 31 8d 47 35 9f 89 d0 78 a0 e9 34 2d c7 60 3a 2a 13 10 08 90 2d 5e 80 a5 f6 b8 ba b4 aa d7 ba 41 94 51 b1 dc 20 6a 1c 4a b5 84 ea 75 da e1 a9 21 a3 c6 Data Ascii: G-BOe>"m;F`pf@cV#p%,"R%![dgY(of[ aJ1I5a"tbi~Y&lcu#N@}5Ri[Q8D:BV9hUs\-:i x\qZ2u(FuS!{p1G5x4-`:*-^AQ jJu!
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 1a 61 00 0f 76 ea fa 8c 21 6b aa 5f a2 be 3e 5c f9 8f ce a9 df 53 7c 46 97 d9 e3 79 0c c1 55 10 c6 2b 9e 29 a6 7b 69 43 35 22 59 a6 10 c0 ae 37 43 40 11 0f 46 85 12 40 c4 89 d1 48 85 12 80 76 6c bb f9 19 50 a1 04 10 51 8b 30 d3 0c 97 32 94 a1 4c 58 69 ee 2a 34 40 8d 46 2a 94 00 c2 72 1c b1 90 a9 52 06 8c 88 65 9a a8 52 06 d4 a2 ac a9 a4 29 16 a5 28 45 b9 94 4d d9 94 4d d9 61 d2 c2 c5 da 4c 33 4d 54 29 af 0b 72 87 40 44 67 1a 63 81 74 75 06 ec 47 7d ca 8f 2d 63 35 c1 69 82 54 c5 22 08 92 e0 61 12 c0 c1 cf 1d 47 65 e1 5b 64 02 a4 61 fe 77 e3 df 25 38 c8 3d 89 e4 ba 40 d7 02 e2 6d 5b 03 fd 22 48 3c a9 66 d1 08 c2 64 8a 1f d9 2d 10 93 c8 b8 0b 10 ae 4a 9d 61 73 dc 74 c1 63 af 75 a3 67 29 f3 cc 9c ee bd 3e 38 64 e5 e3 88 d0 1c c7 eb 21 73 c1 5c 61 8b 23 2e 78 Data Ascii: av!k_>\S\|FyU+){iC5"Y7C@F@HvlPQ02LXi4@FrReR)(EMMaL3MT)r@DgctuG}-c5iT"aGe[daw%8=@m["H<fd-Jastcug)>8d!s\a#.x
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 8f ec 12 ad 4c a4 0a df 4a ed d9 c4 57 8b 18 f9 f8 4e 2a 36 2e e5 1a d3 9c 3b 38 21 5f fe 6e ab bf 15 84 15 c3 ad 3a 18 c6 01 59 5c d9 69 98 c7 1c de 88 ae a5 4e 3e 4e 76 2d 85 ab 74 e6 8f b1 78 03 37 83 96 85 1b 3a 52 0d 91 20 95 e0 c1 d1 97 43 fe d3 d8 f6 c7 a9 80 da 9b a1 7f 54 1b ae 20 04 7b 3d b8 56 6c 0d 3a eb 09 35 bc c0 9a cd c3 e8 cc 22 0c d4 9b b9 ec 44 d3 38 4d 37 e3 59 c0 9a 78 cf fc fa ce 94 cc c5 75 be e4 c4 35 17 35 2b 99 25 a8 af 75 15 7a 85 7c 0a 1a 6c d6 3d 30 47 18 03 34 c9 61 32 91 38 b1 ca 16 97 ae e2 7a aa a7 2d ab 02 37 02 e3 76 48 d0 39 d1 10 d9 c3 b9 e8 e3 4e e3 d5 25 bf 7f aa 21 ba 1d 3d c8 6d 2e ca c6 ab d7 70 80 7a cc e0 3d d3 eb af 49 35 a8 64 3e a1 65 e6 ce b2 04 5d 8d cd d4 5d 8e 87 d1 4b af 96 e6 5e 2a 6f 57 63 c9 57 9b f7 Data Ascii: LJWN6.;8!_n:Y\iN>Nv-tx7:R CT {=Vl:5"D8M7Yxu55+%uz\|l=0G4a28z-7vH9N%!=m.pz=I5d>e]]K^oWcW
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: a7 47 10 5c fa ba db 39 fe ff e5 41 a8 51 e7 95 da d6 17 74 50 7e 8f db a9 ef 20 a4 cd b8 81 4d 30 d1 44 03 01 6d 5a 06 67 58 66 05 a7 49 a4 24 bd 94 32 53 9a a7 fd 58 56 af 32 57 1b 67 64 9c 0b 36 99 4d 29 cd 95 06 24 d0 0c ad 31 07 f7 f0 5d eb fd c1 b3 47 05 98 e9 ab 1a f4 53 d0 7f fa 10 83 61 b4 b7 a4 ae 36 23 a6 35 84 bc 63 b7 09 c5 75 9e 48 b4 f2 0f ca ac c7 b5 29 39 64 e5 ba ac f8 03 87 70 7a 8d ee e3 ed 9e 64 a1 c9 b2 a7 66 78 8a d7 44 96 17 a2 e8 91 e0 f5 fd 34 be 67 89 6b 97 c0 2f c5 66 9e 2e 9b c5 af 5e c4 a0 6a cf 38 81 18 2e 25 cf 08 5c 54 97 fd 42 97 bb e8 78 ae e5 6c 17 7b ee 79 5e 97 22 0d f9 b4 0a 25 79 5e 99 17 7f bf 78 fc c2 1d 38 2b 81 d0 e6 94 af 37 11 d1 72 c8 04 7c 4b f3 fa d1 79 3e 75 62 4c 93 be 43 29 4b b3 eb c9 07 3b a7 42 94 af Data Ascii: G\9AQtP~ M0DmZgXfI$2SXV2Wgd6M)$1]GSa6#5cuH)9dpzdfxD4gk/f.^j8.%\TBxl{y^"%y^x8+7r\|Ky>ubLC)K;B
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 90 81 d5 6b ad 88 08 04 f4 b7 00 01 69 eb ff 91 0e eb a9 97 11 29 5e 56 31 eb e5 10 c2 52 10 06 6c c2 95 f3 95 5f 01 55 fd 9d 38 f7 af fe 21 17 24 71 21 8d 08 91 11 7a d5 62 a7 92 2d 94 66 39 ac 58 0b f3 03 63 7f d1 8f 92 b4 4f d3 ff 80 8a 63 f7 47 c9 dd d1 6f 3a 87 17 0f 83 62 5a a7 cd ab 18 6e 71 cd ea 98 3c 95 90 e6 65 78 63 d3 37 a6 00 55 fa 53 ed 64 2b 2a e0 e7 d3 15 93 2d 5f 97 1b 68 6a 31 22 cb 53 0b d5 62 97 4a 7f d0 82 26 d7 13 8b 05 cd 18 38 91 b8 fd d8 2c 4c e2 73 ed b9 c6 eb b4 a7 ba 31 62 62 f7 d8 82 d5 1c d8 53 43 03 fb 50 bb 39 5e 1d dc 69 d4 8b cd b0 50 fd 97 6e 02 bc 87 cb b7 6b 6b 33 dc 41 88 bb 66 5f 09 98 7e 91 9b 9e d7 88 df b5 1f e0 e0 bb 43 e3 7c 2e 22 02 e6 22 71 17 ae 3f dd 54 ce e5 16 dd 31 2d 3f bb 0b ac 2f 06 f0 d9 37 3d 8a 7a Data Ascii: ki)^V1Rl_U8!$q!zb-f9XcOcGo:bZnq<exc7USd+*-_hj1"SbJ&8,Ls1bbSCP9^iPnkk3Af_~C\|.""q?T1-?/7=z
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 87 b9 42 8d 44 ff af 15 20 bf b2 32 ed 83 ee a6 e0 8c 98 b2 57 bd e0 26 a0 66 d7 7a 57 0f 57 c7 b8 15 5c 88 2d 26 22 44 7c e7 85 30 83 ef 2f af 30 8a 99 d5 be da 91 4e bf a5 60 86 0e ec a7 75 49 e4 fd b2 98 4d 28 30 86 ed 72 61 40 57 7f c5 53 c5 68 c3 b3 d0 42 9c be f4 c5 78 b2 a6 da 1b f6 e8 d5 f6 88 ad 00 85 28 2c b0 5a 55 d1 c4 07 7d 7a 92 4f 15 2e ac de 1e f4 ac 0d 5c 0f 80 90 53 b4 67 a2 79 48 1d 4a d9 2b 05 07 68 5d b5 e6 61 91 17 11 ca 58 16 26 db 29 d4 7c 2d 22 dc fc 61 9a 07 62 67 ea be 14 5e 9b 32 6a 6d ad 09 06 9c fa 8e 76 15 98 70 ce 14 18 84 e9 37 c8 36 86 14 46 e0 62 37 49 33 bd b0 e9 13 89 47 ca aa d3 c6 a1 7d 9e fe 36 1d 22 36 f2 b5 b2 62 15 1c d6 6b 86 b3 02 93 02 14 92 25 58 ee d6 48 9a 6b b4 60 9c 62 c0 f6 62 c7 46 af 47 92 a5 5b b3 3e Data Ascii: BD 2W&fzWW\-&"D\|0/0N`uIM(0ra@WShBx(,ZU}zO.\SgyHJ+h]aX&)\|-"abg^2jmvp76Fb7I3G}6"6bk%XHk`bbFG[>
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 14 ce 43 ca 9e 7b c7 25 65 77 c8 fe 32 4e 2b d0 87 3f f4 9c f6 bb 6e f6 3e 0e 06 5e 16 ca 2f cf fe d1 e8 79 7c 34 87 ef 71 28 ec a1 28 67 ce a1 8c 97 98 eb af 76 2e a8 a6 15 48 58 c7 2b 8c 70 9d 06 0e 9b 36 99 5b 18 bd 52 3d 27 86 3d ff 81 c8 4a e5 fe ad 7b fc 94 82 c1 10 69 55 7f fd c7 73 dd 9d 8b 01 aa f7 c9 93 41 9e 99 8a fb 81 31 5f 41 a1 5c 3d 47 13 7f 2e d0 c4 3a ea ac e3 1b c0 6c 5a 60 e0 e5 ac ba bb cc 8e 82 21 e1 8a e5 cb 38 96 c0 cc e2 7f 6d 1d d7 1d 1e d0 09 9e 85 68 5f 5e b7 c9 2b a1 37 fc 03 ae d6 54 b6 a3 b8 15 a5 0f fc 29 2b 38 5d f7 e6 5f 11 bc 1f 02 6a 64 e8 02 15 b4 c0 08 f5 67 fe 98 8e 94 62 53 cb 89 98 6c 4e 83 f0 ea cb cd 8b b1 c9 3b 8f 69 c1 fb 62 0e cb 60 a0 81 24 a3 fc 16 0e 37 c1 22 e4 e3 0a 3e 93 19 f7 8a 6d 3e 73 48 96 8a 28 85 Data Ascii: C{%ew2N+?n>^/y\|4q((gv.HX+p6[R='=J{iUsA1_A\=G.:lZ`!8mh_^+7T)+8]_jdgbSlN;ib`$7">m>sH(
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: a8 84 61 60 8c 15 69 6a f9 20 95 0d 3d 27 c2 3d 07 ea 4e bc ce 29 d8 fc e4 96 58 98 8b b9 9e 4f a3 a1 af 1f f8 2d 93 27 cc 1b 87 02 58 c5 0a f4 ac ea 72 75 71 b4 43 40 2e a7 1f 31 73 8f 0e 8a 0d 57 45 ad 5c 7d 71 0a db 34 05 43 fc 76 d1 9a 09 3d ae 62 2a 9a f4 d8 77 ed 3f 83 fe d8 5f 5d bc e0 bf 51 60 c9 17 a4 aa 0c 81 9a ff fa d9 51 23 a8 ef 5b 4b 0f b2 ce 7a 2d 2b d2 eb 76 0d 4e ab eb 9a a6 17 ad e7 09 9f 43 ee cc 6b f5 37 7e aa b5 8c 68 4f d8 18 ac fa 6f 80 19 65 37 e2 92 bf 98 89 f2 fb 36 1e dc 4b c1 05 7f 31 13 e6 d7 8f 6f de d0 ba 7a 23 1f 20 6a b2 42 1b 33 21 b0 14 f0 99 c4 a0 7b 60 1e cb 44 27 3d 30 c9 c0 0c 6b 29 19 59 44 49 d9 35 d1 3d 89 65 a2 93 b6 33 94 eb a6 48 68 2a f7 3d e1 8f 56 9d 37 d6 4d 75 4e db 22 17 0a 5a ac d6 c4 4e 8a 65 a2 93 b2 Data Ascii: a`ij ='=N)XO-'XruqC@.1sWE\}q4Cv=bw?_]Q`Q#[Kz-+vNCk7~hOoe76K1oz# jB3!{`D'=0k)YDI5=e3Hh=V7MuN"ZNe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49759	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 06:26:52 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=207802 Date: Fri, 24 May 2024 06:26:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49768	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:51 UTC	695	OUT	GET /fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: font/woff2 Content-Length: 14712 Connection: close CF-Ray: 888b3773582042e8-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 311225 Cache-Control: public, max-age=31536000 Expires: Mon, 19 May 2025 01:40:13 GMT Last-Modified: Thu, 01 Jun 2023 22:52:57 GMT cf-apo-via: proxy Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uMgw75CP%2F7IxFJGu4w4MhBmF0xES3Hu8OVPwv1KqSHWlGIeYeS4gp8Az30KBJlCXqytuj5KdnJxcnmAwWqlU5qF3sUGZw2PQ7dr%2Bv5jSLneXXC5k4w5VjAySyDnq8uizBLg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-24 06:26:52 UTC	669	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 39 78 00 0d 00 00 00 00 88 38 00 00 39 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 3c 1c 90 1c 06 60 00 84 62 0a 81 87 7c eb 40 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 7c 07 8c 34 1b b5 76 25 ca 6d 17 05 9c 07 20 46 4f f2 23 46 22 6c c5 64 b5 a8 23 03 c1 c6 01 82 84 3f 74 f0 ff 27 24 1d 32 06 f3 6e 83 93 59 65 10 31 24 a0 b0 5d dd bd d9 c3 24 73 a7 ae 57 b7 73 39 a8 3c 25 d3 4c b5 31 7d 59 79 06 36 91 82 88 2d a4 20 62 e1 be 10 5b f9 9d b4 d0 eb 0c 37 21 09 19 3c 4b dd 57 7c be 69 6a f3 87 66 9c cd 3f cd a4 5c 3b b1 ee d0 1a 1b 4e f0 24 f5 08 54 28 14 7d f4 39 eb 22 30 6e e1 a3 e6 d4 cb f3 ff 8d 85 de f7 67 29 40 ac 57 45 11 95 40 03 a3 8c 2e b9 5a 56 b1 95 3d 55 c0 e8 ca 3b c3 Data Ascii: wOF29x89n<`b\|@d6$D \|4v%m FO#F"ld#?t'$2nYe1$]$sWs9<%L1}Yy6- b[7!<KW\|ijf?\;N$T(}9"0ng)@WE@.ZV=U;
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 53 b1 b2 dc fb 61 ac a9 4c 24 56 03 ff bb 00 ef fd ec 82 1d 4b 92 64 e6 46 3d 7e 47 61 ed f5 60 97 54 ac 48 90 90 06 11 11 91 65 7b 5c ff f0 d7 5e cd 03 34 63 61 70 11 db fb 6f 21 60 39 e6 2d 13 64 ac f2 ef af c0 da c6 b4 f6 5f fb 6b ba 4e 61 07 93 40 10 af 1f 05 02 d8 0a 60 3e 04 64 18 2a 05 45 a0 04 a5 4e 10 04 01 0d 21 11 44 45 05 a2 a3 83 60 65 03 29 50 00 52 aa 0c 82 9f 1f a4 51 13 48 a7 2e 90 91 46 41 30 03 f2 5b 55 10 12 04 98 ab dc 49 f0 e1 97 d1 0a 64 bc ff 1f 17 a0 bc b2 79 7b 06 fc eb 4a 5e 02 90 c0 00 fd 7f 0d d2 10 a8 f8 5d 23 04 0a b9 6b 48 80 e0 cf 0e 30 10 04 7d ed f7 43 80 7c 62 7d 81 6e 19 c8 0a 9d af 37 24 63 16 20 90 80 f7 03 81 d7 16 16 b0 fd 95 79 9d de a2 9f 04 2d 18 30 da f4 1e 7d 9a 94 44 1c 85 23 8a c8 ff 3e 7d 02 51 c7 82 81 f6 Data Ascii: SaL$VKdF=~Ga`THe{\^4capo!`9-d_kNa@`>d*EN!DE`e)PRQH.FA0[UIdy{J^]#kH0}C\|b}n7$c y-0}D#>}Q
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: a8 20 99 ac da 66 a7 ce fb 0e 76 4c 26 8e 38 ce b8 f5 60 13 6a d2 70 82 4c 15 cb 7b c8 ed 81 ba dc 29 1e b0 86 12 7d 94 e8 7b c8 c3 90 e3 11 72 3d 4a 8e c7 da bb 1e f7 24 db 53 14 7a 8e 0a 2f 50 e1 25 2a bc 4c 75 af 52 ee 75 0a bc 4d 91 77 a8 e4 fd cd 3a 93 b7 d3 06 eb a1 91 8e 13 66 91 ca 25 9d 47 94 4f ba 80 4c a1 c3 db 1b e1 a0 87 01 46 58 c6 d8 04 32 22 ea a4 69 26 a4 45 94 96 82 06 1d ba 13 72 75 91 a1 db 61 cd 8c b0 d1 45 1f 43 2c a1 90 a4 a7 45 6f 1a 7a 5e 6c 99 91 6e 39 59 76 91 6b f7 3e 9a 3d 0e b6 0b 5d 11 7d 8f 04 6d cc 30 c5 b4 26 bd 3b d2 98 f0 59 08 ef 25 4f 17 98 da 11 1c f5 78 a5 f0 e3 8b 99 0e 8b c6 1e 77 57 4f fe fd 7e 8d 78 05 b3 15 a4 fe 13 f9 45 63 a6 be a8 b7 0a 72 13 7b 7a d8 5b 3f 3c 10 01 d4 01 17 df ef bd b0 9e cd 1b 14 59 b5 ac Data Ascii: fvL&8`jpL{)}{r=J$Sz/P%*LuRuMw:f%GOLFX2"i&EruaEC,Eoz^ln9Yvk>=]}m0&;Y%OxwWO~xEcr{z[?<Y
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 5c 25 45 cc 71 d5 89 98 8a ad f4 d7 25 c8 6a 2f 1c 52 f5 48 b0 81 08 13 a4 e8 e3 ed 18 60 88 a2 65 66 c4 8a 96 15 91 ac c6 8b 30 c7 79 2d 76 c4 7c 59 04 d9 ef 71 19 b6 c8 68 e0 06 1c 0b d9 05 21 04 42 08 07 2c 93 08 b3 d9 88 ec 61 46 12 7e 20 09 13 47 15 90 80 12 57 1f 02 ea 3c 2b 64 aa a8 18 3d 10 d5 cc 16 56 fa c4 41 54 e4 c4 f8 7d 35 06 f9 07 b0 9e 00 79 c0 32 26 48 30 44 e1 6e 60 be 62 30 ac 28 31 68 44 e2 89 21 00 73 af 9f 1a 04 20 10 91 e8 42 a2 75 a5 fb e1 a2 1b 9e 9a b3 8e 3b 68 8f ed 36 5a 6d a9 f9 e6 e8 35 c9 58 5d 5a 35 b0 a1 7e a5 0a 78 64 c9 60 90 2a 89 94 00 07 0d 09 56 58 a5 83 c2 7b 03 86 7f fc f0 35 4e 5f bd f7 d2 63 77 5d 77 d1 69 47 ed 37 68 ab f5 56 5a 6c 6e 9c 66 99 aa c7 68 90 de 05 02 64 cb ae 07 a5 87 c8 0b 09 67 2a 56 e6 ce 68 79 Data Ascii: \%Eq%j/RH`ef0y-v\|Yqh!B,aF~ GW<+d=VAT}5y2&H0Dn`b0(1hD!s Bu;h6Zm5X]Z5~xd`VX{5N_cw]wiG7hVZlnfhdgVhy
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 59 fc 8c 0f c0 ff ff b3 b8 bf bd cf ec cd 03 f8 e2 eb 8b e6 a7 57 9e d6 3d dd f0 85 e3 a9 ba bb f8 f3 86 27 f5 8f 5f 3c be 87 90 04 71 03 6e 02 dc 03 78 c4 14 c0 4b 80 1f 80 cc 07 00 64 84 28 32 01 c4 4f 49 21 f2 e8 da 7c 81 a5 8e 7a eb ab 31 96 2c 83 66 fb fc 6a c0 06 fd 76 7f 53 bb fd 9f fe f0 97 45 8e fc 6a fc d9 4e ff d8 1a 12 76 d9 63 d0 bf 20 0b 7d f4 ce 1b ef ed b5 bf 21 70 d0 73 eb fc 67 83 43 05 c1 6b 7f 3b e1 64 30 8c 76 c0 e6 42 e0 b8 17 d6 fb e6 bb 5f 2c a6 67 60 64 e2 96 c6 2c 5d 86 4c 16 3f 58 d9 65 71 70 72 c9 36 5c b9 0a 95 aa 74 aa 56 a3 56 9d 7a 0d 7e d7 a8 59 8b 56 6d da 8d d0 c1 a6 69 b5 c4 8f ef 72 2d b3 dc 2a 2b ac b4 1a 20 d3 00 75 49 20 eb 03 4b 5e 04 ac ba 05 80 e1 f1 40 7b 3a 80 21 a0 20 41 10 a0 8b 81 a8 96 4e 10 8b 45 f7 9f 4a Data Ascii: YW='_<qnxKd(2OI!\|z1,fjvSEjNvc }!psgCk;d0vB_,g`d,]L?Xeqpr6\tVVz~YVmir-*+ uI K^@{:! ANEJ
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 48 a2 c8 cd 55 8c 27 cd 49 4e b8 68 60 01 08 55 45 64 3d ca 4b 45 26 00 9e 82 e0 44 c7 9c 15 f5 68 33 9f 54 95 3e f1 03 5a 05 c5 ea ae 3c f2 10 f2 27 84 a8 ef 24 4b 46 a3 27 f8 58 66 4a 22 c2 34 48 6e 1b d6 19 8a 4b fd d3 7c 91 b5 5c d6 e3 78 0e ba cf d2 02 a9 6a ad 0f 40 96 2d 99 bc fb 48 ab bc 90 9e 2f 12 f6 9a 3e d9 90 93 67 11 c7 fa e8 bb cc 84 e7 4b bc bf d3 06 15 01 ee 3f da 53 fd fb 31 cd 62 fb 2c 4a 63 63 e7 7f a9 05 6f a4 d3 13 ec 5c 30 9c 75 30 fe 5a 78 37 07 40 e6 03 2f de 3c 38 26 08 4e b8 ce 7c 0a f9 50 8d 22 12 04 de 46 06 9a 54 f9 40 af 59 e0 9d fb da f6 b7 5a fd 95 ff ad d6 f9 13 48 d2 ea 47 d6 a9 d2 40 d3 e2 85 30 4b bf 72 d4 51 a5 ff a0 87 f7 c1 72 78 7a a3 5f db 1c f6 b1 24 d9 a9 96 35 34 f4 d6 7a 21 1f 1c 73 37 06 1b 55 ff 6a 92 55 f4 Data Ascii: HU'INh`UEd=KE&Dh3T>Z<'$KF'XfJ"4HnK\|\xj@-H/>gK?S1b,Jcco\0u0Zx7@/<8&N\|P"FT@YZHG@0KrQrxz_$54z!s7UjU
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 38 81 73 34 4c d6 65 68 f5 7a d7 70 6e 9a 6f 92 51 1e cc e4 50 13 4c eb 5d 23 72 e3 06 87 b9 40 01 ca f9 53 a6 b3 bf be ce 3d bf 37 cb a9 2e 93 42 d6 c2 49 75 4c 81 59 c2 2f d4 95 67 37 9a b9 2f 3a ad 5e 47 11 b0 f6 ee 2d 9f ad cf 9a d1 d4 64 9f 3d c3 54 2c 68 27 27 39 63 85 5e 9b 4d 98 eb 64 25 91 7d 0d e6 77 07 4c 78 3c f2 f1 dc a1 dd d9 77 c6 a2 ee a0 79 cf bb 9f ff 0b ea 50 79 b3 32 dd fd f5 75 9e f9 33 b3 72 d2 2a 64 5f 2d 85 13 47 f1 2d 45 8d a5 e5 de 46 2f 36 6f 5f 53 5d e7 67 01 a6 49 38 bc 44 df df cf fe ee ef ed c7 3c c3 5c 2f 77 2f 78 86 ca a8 50 92 ca d2 31 ff 13 b9 63 b5 eb fa 76 a9 e3 aa 0a 86 2d 39 3f 14 fc 7e c8 ca 93 c8 b7 93 57 2c 8d c8 2c db 36 96 c7 20 2c 58 d6 0a 3f 7d 11 65 09 bc 24 74 51 25 7d 79 ef a4 2f b4 40 5b 90 5d 04 27 2c 2c Data Ascii: 8s4LehzpnoQPL]#r@S=7.BIuLY/g7/:^G-d=T,h''9c^Md%}wLx<wyPy2u3r*d_-G-EF/6o_S]gI8D<\/w/xP1cv-9?~W,,6 ,X?}e$tQ%}y/@[]',,
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: ed f3 67 fe 37 ff eb d2 78 c7 60 ed 20 dc a3 9c c8 71 80 8e 63 b8 80 17 c4 c6 62 6c 10 bb 65 71 f5 e1 e7 fd a6 9b 2b c2 8d fd 70 33 c6 34 3e e5 e6 f4 4d bf d6 2b dc 36 1e e0 d8 af 08 f7 b5 34 d9 ae 88 ee b4 00 51 19 af 60 14 0e 56 73 0a b3 66 24 4e 7b d3 fd d7 84 1b 23 6f cc 85 bb e7 0d ec d0 f7 83 16 6e 66 b2 21 fb 3c 6d b8 b1 74 35 af 34 27 68 1d 99 ca cc c2 79 e4 6a ad 34 36 ce f5 99 e2 23 59 e4 12 f7 03 8c 24 61 cd cf 52 48 e5 f7 e6 c2 09 b7 43 a2 41 5b 61 9f 29 7b 76 53 93 67 c6 5c 7d c9 a6 ee df 27 5c 1d 79 75 2e d4 bd a9 1d bf 14 9f ec 61 89 73 ec 76 b1 d7 c3 01 95 42 8b 2e 13 26 1c 34 c3 2b 46 a5 8d 2a f7 ff 5f b3 cc 9b d6 cc 31 e4 db ad c6 92 16 a1 d1 3b f2 ab b3 d3 2f 3b 9b e2 04 c7 50 42 6d 2c 53 cf b3 8f cb 9d 1d 46 c5 f1 62 7e 4f 90 15 7f ac Data Ascii: g7x` qcbleq+p34>M+64Q`Vsf$N{#onf!<mt54'hyj46#Y$aRHCA[a){vSg\}'\yu.asvB.&4+F*_1;/;PBm,SFb~O
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 2d 91 28 e5 6e a6 24 33 85 7d f7 c8 d2 b9 32 cd 77 0e 36 96 8b 9d 6e f0 cd 3e 79 f6 a5 2c 93 ee 1c 59 36 97 31 76 8a 6d cf e1 a9 45 94 27 53 f8 a4 c2 7f 16 19 a9 2f 21 9f de 96 f9 dc 70 d0 ef 10 c5 1b 87 a5 19 6b d3 18 ff 9f 2a 08 30 81 08 79 9a c1 3e 08 2a 8b fe 3f 9d 17 d0 02 8b bd 9c 4d 0c ef 54 43 ea 2c b0 47 31 71 a6 5f f7 d6 36 cc 13 1f d4 29 da ba b6 36 0a f8 67 fd 3f cc b5 2e f9 a6 fa d4 f9 65 6f ea 62 0f 8a 62 b9 a2 5d 6c ce 2e 11 37 56 34 08 50 d7 b9 1e ba c0 85 9d a9 95 86 47 3d 3d d1 e4 29 5e b6 bc 58 72 bb b6 06 45 79 09 98 b6 33 1f 52 94 84 6a 6a b3 8a e2 52 a2 fb 7b 07 f0 cc 2b b8 61 ab 38 5a 61 03 c2 79 b6 ca a3 95 b6 1b 05 e0 fd 3c dd 43 07 cb a0 a3 92 6c c0 03 59 49 34 ad 91 e9 78 a8 53 db 22 a9 05 3c 2e d2 22 4a 96 e6 c2 b9 d2 64 11 32 Data Ascii: -(n$3}2w6n>y,Y61vmE'S/!pk0y>?MTC,G1q_6)6g?.eobb]l.7V4PG==)^XrEy3RjjR{+a8Zay<ClYI4xS"<."Jd2
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: bd 27 54 f6 c4 21 68 b2 cd a3 87 03 b7 4e 89 54 cb bd c5 92 d4 24 27 0f 67 b7 c3 6e 02 f7 93 38 a2 4c d2 ef 1d 17 88 a6 0d 7d 17 8c 3c 07 0e f7 2d 30 2d 50 a4 8b 77 cd 61 cd 93 f6 6c 27 68 af c0 47 f1 a1 57 d2 d3 5f 29 76 99 16 2a 16 d2 87 5c 1f c8 42 f9 a6 34 e3 1a 53 8d ae 40 b4 ae 5b da b0 e1 26 ae 71 fa 88 72 61 76 ec 6f 0e 1b 63 32 29 6e fa de db 19 4f 02 50 9a ee 90 57 32 37 df fe 89 4f 39 c0 cb ca 4c f1 c6 83 08 6e 51 31 ba 6d 7c 7d 9a a2 aa 58 7b af c4 51 58 f6 d1 a3 cb bb b3 12 a3 97 7e 50 16 ec 35 90 b1 45 f3 bd 42 96 46 f4 97 5a 0d 36 a2 8a 56 65 cb 6c 70 ad 70 ef 76 ff f6 bd 75 ad 73 03 f4 28 ff 45 3f e8 6c 34 a7 4f 9f 31 7d a6 a1 19 33 67 98 05 b3 68 05 76 b7 d1 57 17 19 ef 19 3a ca bc cf 60 d4 56 09 4b c0 a7 aa 0b db 2b b1 93 11 db 92 27 89 Data Ascii: 'T!hNT$'gn8L}<-0-Pwal'hGW_)v*\B4S@[&qravoc2)nOPW27O9LnQ1m\|}X{QX~P5EBFZ6Velppvus(E?l4O1}3ghvW:`VK+'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49772	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	536	OUT	GET /script/US/1/13376 HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 115602 Connection: close Expires: Fri, 24 May 2024 06:27:40 GMT Cache-Control: public, max-age=14400 Etag: "9b34e74784c09f573dad5e75855710ad8c69097d" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: HIT Age: 12 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=37MZ9crX9ILdmLFUPXQymq%2FQNeZy6%2BH6z1vNeEDmVb3ZjyJevJmQJY2hIKt6S5BnU8PY2%2BijAnsJlGAWFdvvaqO0o%2BF9ehk81WKQngSvUfEDmC1ped1XWpP%2BSem%2B80C6rCdAL%2B0U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37736a1341a6-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:52 UTC	580	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 73 74 2e 74 79 70 65 28 65 29 3b 72 65 74 75 72 6e 20 73 74 2e 69 73 57 69 6e 64 6f 77 28 65 29 3f 21 31 3a 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 74 3f 21 30 3a 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 6e 26 26 28 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 30 26 26 74 2d 31 Data Ascii: document.getElementsByTagName=HTMLDocument.prototype.getElementsByTagName;(function(e,t){"use strict";function n(e){var t=e.length,n=st.type(e);return st.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 5d 2e 74 6f 4a 53 4f 4e 3d 73 74 2e 6e 6f 6f 70 29 29 2c 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 26 26 28 69 3f 63 5b 66 5d 3d 73 74 2e 65 78 74 65 6e 64 28 63 5b 66 5d 2c 6e 29 3a 63 5b 66 5d 2e 64 61 74 61 3d 73 74 2e 65 78 74 65 6e 64 28 63 5b 66 5d 2e 64 61 74 61 2c 6e 29 29 2c 6f 3d 63 5b 66 5d 2c 69 7c 7c 28 6f 2e 64 61 74 61 7c 7c 28 6f 2e 64 61 74 61 3d 7b 7d 29 2c 6f 3d 6f 2e 64 61 74 61 29 2c 72 21 3d 3d 74 26 26 28 6f 5b 73 74 2e 63 61 6d 65 6c 43 61 73 65 28 6e 29 5d 3d 72 29 2c 75 3f 28 61 3d 6f 5b 6e 5d 2c 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6f 5b 73 74 2e 63 61 6d 65 6c 43 61 73 65 28 6e 29 5d 29 29 3a 61 3d 6f 2c 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 Data Ascii: ].toJSON=st.noop)),("object"==typeof n\|\|"function"==typeof n)&&(i?c[f]=st.extend(c[f],n):c[f].data=st.extend(c[f].data,n)),o=c[f],i\|\|(o.data\|\|(o.data={}),o=o.data),r!==t&&(o[st.camelCase(n)]=r),u?(a=o[n],null==a&&(a=o[st.camelCase(n)])):a=o,a}}function o(
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 72 3d 73 74 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7d 29 3b 69 66 28 57 74 2e 74 65 73 74 28 74 29 29 72 65 74 75 72 6e 20 73 74 2e 66 69 6c 74 65 72 28 74 2c 72 2c 21 6e 29 3b 74 3d 73 74 2e 66 69 6c 74 65 72 28 74 2c 72 29 7d 72 65 74 75 72 6e 20 73 74 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 74 2e 69 6e 41 72 72 61 79 28 65 2c 74 29 3e 3d 30 3d 3d 3d 6e 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 74 3d 7a 74 2e 73 70 6c 69 74 28 22 7c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 69 66 28 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 66 6f Data Ascii: ){var r=st.grep(e,function(e){return 1===e.nodeType});if(Wt.test(t))return st.filter(t,r,!n);t=st.filter(t,r)}return st.grep(e,function(e){return st.inArray(e,t)>=0===n})}function p(e){var t=zt.split("\|"),n=e.createDocumentFragment();if(n.createElement)fo
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 63 6b 65 64 3d 74 2e 63 68 65 63 6b 65 64 3d 65 2e 63 68 65 63 6b 65 64 2c 74 2e 76 61 6c 75 65 21 3d 3d 65 2e 76 61 6c 75 65 26 26 28 74 2e 76 61 6c 75 65 3d 65 2e 76 61 6c 75 65 29 29 3a 22 6f 70 74 69 6f 6e 22 3d 3d 3d 6e 3f 74 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 74 2e 73 65 6c 65 63 74 65 64 3d 65 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3a 28 22 69 6e 70 75 74 22 3d 3d 3d 6e 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 6e 29 26 26 28 74 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 74 3f 65 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: cked=t.checked=e.checked,t.value!==e.value&&(t.value=e.value)):"option"===n?t.defaultSelected=t.selected=e.defaultSelected:("input"===n\|\|"textarea"===n)&&(t.defaultValue=e.defaultValue)}}function b(e,n){var r,i,o=0,a=e.getElementsByTagName!==t?e.getElemen
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 61 72 67 69 6e 22 3d 3d 3d 6e 26 26 28 61 2b 3d 73 74 2e 63 73 73 28 65 2c 6e 2b 77 6e 5b 6f 5d 2c 21 30 2c 69 29 29 2c 72 3f 28 22 63 6f 6e 74 65 6e 74 22 3d 3d 3d 6e 26 26 28 61 2d 3d 73 74 2e 63 73 73 28 65 2c 22 70 61 64 64 69 6e 67 22 2b 77 6e 5b 6f 5d 2c 21 30 2c 69 29 29 2c 22 6d 61 72 67 69 6e 22 21 3d 3d 6e 26 26 28 61 2d 3d 73 74 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 22 2b 77 6e 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 69 29 29 29 3a 28 61 2b 3d 73 74 2e 63 73 73 28 65 2c 22 70 61 64 64 69 6e 67 22 2b 77 6e 5b 6f 5d 2c 21 30 2c 69 29 2c 22 70 61 64 64 69 6e 67 22 21 3d 3d 6e 26 26 28 61 2b 3d 73 74 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 22 2b 77 6e 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 69 29 29 29 3b 72 65 74 75 72 6e 20 61 7d Data Ascii: argin"===n&&(a+=st.css(e,n+wn[o],!0,i)),r?("content"===n&&(a-=st.css(e,"padding"+wn[o],!0,i)),"margin"!==n&&(a-=st.css(e,"border"+wn[o]+"Width",!0,i))):(a+=st.css(e,"padding"+wn[o],!0,i),"padding"!==n&&(a+=st.css(e,"border"+wn[o]+"Width",!0,i)));return a}
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 5b 5d 3b 69 66 28 73 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 29 29 66 6f 72 28 3b 72 3d 6f 5b 69 2b 2b 5d 3b 29 22 2b 22 3d 3d 3d 72 5b 30 5d 3f 28 72 3d 72 2e 73 6c 69 63 65 28 31 29 7c 7c 22 2a 22 2c 28 65 5b 72 5d 3d 65 5b 72 5d 7c 7c 5b 5d 29 2e 75 6e 73 68 69 66 74 28 6e 29 29 3a 28 65 5b 72 5d 3d 65 5b 72 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 6e 2c 72 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 75 29 7b 76 61 72 20 6c 3b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 73 74 2e 65 61 63 68 28 65 5b 75 5d 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 75 29 7b 76 61 72 20 63 3d 75 28 6e 2c 72 2c 69 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 63 7c 7c 73 7c 7c 61 5b 63 5d Data Ascii: [];if(st.isFunction(n))for(;r=o[i++];)"+"===r[0]?(r=r.slice(1)\|\|"*",(e[r]=e[r]\|\|[]).unshift(n)):(e[r]=e[r]\|\|[]).push(n)}}function L(e,n,r,i){function o(u){var l;return a[u]=!0,st.each(e[u]\|\|[],function(e,u){var c=u(n,r,i);return"string"!=typeof c\|\|s\|\|a[c]
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 3a 6e 3f 63 3a 22 4e 6f 20 63 6f 6e 76 65 72 73 69 6f 6e 20 66 72 6f 6d 20 22 2b 6c 2b 22 20 74 6f 20 22 2b 69 7d 7d 7d 6c 3d 69 7d 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 73 75 63 63 65 73 73 22 2c 64 61 74 61 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 51 6e 3d 74 7d 29 Data Ascii: :n?c:"No conversion from "+l+" to "+i}}}l=i}return{state:"success",data:t}}function _(){try{return new e.XMLHttpRequest}catch(t){}}function F(){try{return new e.ActiveXObject("Microsoft.XMLHTTP")}catch(t){}}function O(){return setTimeout(function(){Qn=t})
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 73 2e 71 75 65 75 65 7d 29 29 2c 6c 2e 70 72 6f 67 72 65 73 73 28 6c 2e 6f 70 74 73 2e 70 72 6f 67 72 65 73 73 29 2e 64 6f 6e 65 28 6c 2e 6f 70 74 73 2e 64 6f 6e 65 2c 6c 2e 6f 70 74 73 2e 63 6f 6d 70 6c 65 74 65 29 2e 66 61 69 6c 28 6c 2e 6f 70 74 73 2e 66 61 69 6c 29 2e 61 6c 77 61 79 73 28 6c 2e 6f 70 74 73 2e 61 6c 77 61 79 73 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 3b 66 6f 72 28 6e 20 69 6e 20 65 29 69 66 28 72 3d 73 74 2e 63 61 6d 65 6c 43 61 73 65 28 6e 29 2c 69 3d 74 5b 72 5d 2c 6f 3d 65 5b 6e 5d 2c 73 74 2e 69 73 41 72 72 61 79 28 6f 29 26 26 28 69 3d 6f 5b 31 5d 2c 6f 3d 65 5b 6e 5d 3d 6f 5b 30 5d 29 2c 6e 21 3d 3d 72 26 26 28 65 5b 72 5d 3d 6f 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 29 2c 61 3d Data Ascii: s.queue})),l.progress(l.opts.progress).done(l.opts.done,l.opts.complete).fail(l.opts.fail).always(l.opts.always)}function R(e,t){var n,r,i,o,a;for(n in e)if(r=st.camelCase(n),i=t[r],o=e[n],st.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),a=
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 76 61 72 20 74 3b 73 74 2e 5f 72 65 6d 6f 76 65 44 61 74 61 28 65 2c 22 66 78 73 68 6f 77 22 29 3b 66 6f 72 28 74 20 69 6e 20 68 29 73 74 2e 73 74 79 6c 65 28 65 2c 74 2c 68 5b 74 5d 29 7d 29 3b 66 6f 72 28 72 3d 30 3b 61 3e 72 3b 72 2b 2b 29 69 3d 67 5b 72 5d 2c 6c 3d 70 2e 63 72 65 61 74 65 54 77 65 65 6e 28 69 2c 6d 3f 73 5b 69 5d 3a 30 29 2c 68 5b 69 5d 3d 73 5b 69 5d 7c 7c 73 74 2e 73 74 79 6c 65 28 65 2c 69 29 2c 69 20 69 6e 20 73 7c 7c 28 73 5b 69 5d 3d 6c 2e 73 74 61 72 74 2c 6d 26 26 28 6c 2e 65 6e 64 3d 6c 2e 73 74 61 72 74 2c 6c 2e 73 74 61 72 74 3d 22 77 69 64 74 68 22 3d 3d 3d 69 7c 7c 22 68 65 69 67 68 74 22 3d 3d 3d 69 3f 31 3a 30 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 Data Ascii: ion(){var t;st._removeData(e,"fxshow");for(t in h)st.style(e,t,h[t])});for(r=0;a>r;r++)i=g[r],l=p.createTween(i,m?s[i]:0),h[i]=s[i]\|\|st.style(e,i),i in s\|\|(s[i]=l.start,m&&(l.end=l.start,l.start="width"===i\|\|"height"===i?1:0))}}function $(e,t,n,r,i){retur
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 73 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 69 3d 22 3c 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 22 3e 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 26 26 65 2e 6c 65 6e 67 74 68 3e 3d 33 3f 5b 6e 75 6c 6c 2c 65 2c 6e 75 6c 6c 5d 3a 66 74 2e 65 78 65 63 28 65 29 2c 21 69 7c 7c 21 69 5b 31 5d 26 26 6e 29 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 5f 5f 73 68 3f 28 6e 7c 7c 72 29 2e 66 69 6e 64 28 65 29 3a 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 29 2e 66 69 6e 64 28 65 29 3b 69 66 28 69 5b 31 5d 29 7b 69 66 28 6e 3d 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 74 3f 6e 5b 30 5d 3a 6e 2c 73 74 2e 6d 65 72 67 65 28 74 68 69 73 2c 73 74 2e 70 61 72 73 65 48 54 4d 4c 28 69 5b 31 5d Data Ascii: s;if("string"==typeof e){if(i="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:ft.exec(e),!i\|\|!i[1]&&n)return!n\|\|n.__sh?(n\|\|r).find(e):this.constructor(n).find(e);if(i[1]){if(n=n instanceof st?n[0]:n,st.merge(this,st.parseHTML(i[1]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	693	OUT	GET /wp-content/uploads/2024/01/mick-pic-150x150.jpg HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	858	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=4949 etag: W/"65a54e4c-1355" expires: Wed, 19 Jun 2024 15:59:32 GMT last-modified: Mon, 15 Jan 2024 15:25:00 GMT vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 311225 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pGjOo3Qpy8ELr%2FECbfcrtmsGHbUsVCrOfBqg%2B%2BBsTaULBmNxfk2i%2F7LnD3CrrOi8yYbOa7ybbe47w3RyS1658Qw2wtwEcQZ1VFT8%2BmhODMGl4D5sn5sytUAGjQ65%2BlfJ8Qg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37735d8641b2-EWR
2024-05-24 06:26:52 UTC	511	IN	Data Raw: 31 31 64 32 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c2 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 02 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 bd 02 2c fb 66 08 fa 1f Data Ascii: 11d2JFIF``!'"#%%%),($+!$%$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"4,f
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: c2 ac 0a 3d 41 37 a1 e9 79 89 d5 91 d2 b2 2d 1b 43 06 df d3 43 6a 56 45 34 80 d6 0d 80 ce 2c c1 6e 58 da 9f b3 fc 79 bc c3 b7 f8 c7 10 b5 34 9a d0 6f 14 f1 b5 4c 94 38 ca 86 fb 29 d0 31 6b 79 93 7a 56 37 71 b9 99 b8 29 09 21 28 59 34 93 03 5c 36 1d d9 0c 33 45 2f 2d 56 8d 51 53 7d 9d 25 50 99 a3 b1 66 ce ae 70 88 bd 44 80 b2 52 92 14 fa a1 73 b5 e7 7b 76 d1 7b 15 ee 56 ec 85 c0 f7 a0 f8 ae 4e d2 6a a1 11 05 80 90 4b 49 08 2e 7c c7 68 1e 85 f1 e6 ff 00 47 4a e9 05 34 ce 8e a5 3a 23 42 c2 ce bd 2f ae fa d9 c1 25 41 94 05 39 1d d2 ba e6 2d 70 ae 7a 08 48 54 6e 1a 98 1a 49 34 40 88 e9 f8 1d 3b 94 d0 18 db d9 0d 08 0d 6c 52 58 06 a4 72 07 77 2b 01 3c aa c0 44 ea c0 0c db 1f ff c4 00 3d 10 00 01 03 02 03 05 05 05 05 06 07 00 00 00 00 00 01 00 02 03 04 11 05 12 Data Ascii: =A7y-CCjVE4,nXy4oL8)1kyzV7q)!(Y4\63E/-VQS}%PfpDRs{v{VNjKI.\|hGJ4:#B/%A9-pzHTnI4@;lRXrw+<D=
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 6a 07 dd 35 cb 32 2e 45 c8 b9 02 33 02 ab e5 73 ae d1 c5 da 7a 21 36 e2 a6 37 b3 e0 78 70 fa 15 49 38 9e 9d 8f ea 01 4f 60 72 a8 1b b3 a6 a5 41 14 81 d7 71 e2 38 2c 58 0d 40 2a 7a 76 17 39 f7 ed 28 63 39 53 96 d7 cd dd c1 18 f9 b3 7f ef e6 b0 19 8b 60 54 92 12 ed 53 5c b3 22 e5 99 5d 47 30 df 4b cc b7 80 53 e6 2e e1 6f 54 5b 77 12 b6 3e a4 56 60 14 92 71 21 81 87 d4 69 fa 27 9b 37 cd 48 18 08 71 3a a9 67 9a 2b 96 b8 fa 2a bc 42 a2 b1 f3 46 05 8b 46 6f 55 08 70 90 e7 2e bf 9a 75 4e 96 6f 12 9d 31 b8 05 6d 3c d9 ab 59 1f c8 dd 7e ab 0d ab 31 68 1d 65 85 d7 09 48 6e 70 5f d1 31 fa 2c c8 95 99 66 55 50 86 de 56 92 1c 9e fc f1 65 06 ef 23 9a 7b 32 1c bc d7 ec cf 17 0c 33 e1 72 3a d7 3b d8 bf 51 f9 27 3c 66 ca a4 74 a6 52 d6 30 3d a0 f5 b2 9a a7 2b 8b 4d 0c 97 Data Ascii: j52.E3sz!67xpI8O`rAq8,X@zv9(c9S`TS\"]G0KS.oT[w>V`q!i'7Hq:g+BFFoUp.uNo1m<Y~1heHnp_1,fUPVe#{23r:;Q'<ftR0=+M
2024-05-24 06:26:52 UTC	1321	IN	Data Raw: 3f aa 9b 16 74 ea 6f cf ad 2d 0a 75 60 be 21 01 86 dc 4a c1 61 69 7f 3f a0 9a 66 8a 99 1a b9 74 54 bc ca 4c 7c 26 fe 1f cc 55 1c ac ca 92 fb 51 45 1a 7f 8a 22 3a 22 81 ae 73 fc 54 ce b8 da dc 2b 3c d8 8c e2 57 2a ad a7 82 fc ca 65 55 55 6e 86 a6 c6 5e c4 69 85 4b 83 35 29 02 b0 eb c3 7e 20 c2 22 5d 39 5d 7f b1 80 9d cf 57 ba 04 1b 1e 2e 98 a5 53 ff 00 23 01 dd 05 f8 4b 2d a2 26 ee 51 49 69 62 37 57 72 d4 e6 61 c7 ca cf 85 82 69 fd 57 c0 b1 22 ab 70 8c 2e e0 b4 28 dd 34 54 b2 c2 35 51 c4 4d fb dc a1 9a b5 a4 26 12 a7 a2 5f 4e 62 cc 1d ea 5f 90 a3 e5 95 0f a9 00 11 54 31 6d 05 0b 40 e7 38 0b 5c af 99 de 98 48 fe 8a 07 63 80 b4 ef c4 77 05 02 70 2f 12 dc e5 87 9b 2e 1b 1c 12 f6 25 92 d6 f9 95 6d ac c1 1a 5b 03 c0 98 a8 a1 4e 30 30 4d 42 98 bd f8 95 8a a7 88 Data Ascii: ?to-u`!Jai?ftTL\|&UQE":"sT+<W*eUUn^iK5)~ "]9]W.S#K-&QIib7WraiW"p.(4T5QM&_Nb_T1m@8\Hcwp/.%m[N00MB
2024-05-24 06:26:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	377	OUT	GET /wp-content/uploads/2024/01/logo-1.png HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	841	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=1958 etag: W/"65a50401-7a6" expires: Fri, 21 Jun 2024 19:52:09 GMT last-modified: Mon, 15 Jan 2024 10:08:01 GMT vary: Accept x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 117255 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odq89Bd617ZsdDeI4oBMTJLsV5N%2BabHfL0pZ3fZLkazTKT3Arkxcrw93UWgQ2BwSBpcZ7CHKqFOciS4hkufNn%2B3Od7sXzhGCcIcK03ix%2FWtXnszTrGrlzP7WzRGxJhRBQfY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37736e0e4295-EWR
2024-05-24 06:26:52 UTC	528	IN	Data Raw: 37 34 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 2d 08 03 00 00 00 84 70 47 84 00 00 00 57 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 1e 82 a4 57 00 00 00 1c 74 52 4e 53 00 04 07 0e 15 1f 26 2d 30 37 41 4f 5e 68 72 81 8f 9a a5 b3 c1 ca d2 db e1 e8 f0 f9 c8 5a 81 53 00 00 06 82 49 44 41 54 78 da dd 99 e9 96 ab 28 10 80 0b b7 44 5c 11 35 28 f5 fe cf 39 1d 8b c5 15 73 ef c9 99 99 d3 5f ff 11 15 c3 c7 52 85 36 fc 31 ec 59 89 d7 00 bf 95 b4 6c 07 8d 6f 4a 08 92 73 22 7f 66 31 6c e1 0b 09 bc 89 f8 09 Data Ascii: 746PNGIHDR-pGWPLTEGpLWtRNS&-07AO^hrZSIDATx(D\5(9s_R61YloJs"f1l
2024-05-24 06:26:52 UTC	1341	IN	Data Raw: ce 02 17 38 03 80 0e 1d 53 b4 74 d6 4a bc 06 b6 fc 6d 6a 43 8f 0b b1 57 f4 27 3b 58 68 a8 a4 00 a8 be 29 3f a9 74 91 13 3c 35 ec 89 f2 ca 04 d8 29 fb 44 91 fb 70 10 2f 1d a8 35 fa 78 b5 56 3c d6 f6 ed 4f bd a2 0b 5a 73 6c 5a a4 70 21 07 c2 29 ae 28 14 5e c2 d9 f5 38 bf 92 0f 14 0b af 58 d1 69 e9 57 e7 bd a2 38 8c a2 7b a4 80 ad 53 1d 50 4c 66 bc 64 ce 02 e3 3c 26 01 45 4d 8d 94 fe 07 47 92 2d 5c c0 b9 57 2c b4 99 84 5e d1 39 94 bb 07 74 01 45 28 f1 9a 57 fc ce fd 6a 93 19 45 f9 88 07 72 0c 85 1b ce 79 d1 6b 97 eb 73 73 14 51 57 b5 61 45 25 a5 ec d5 69 44 15 3b 87 84 ca 7d 48 91 f5 78 cd 74 1e 7e 92 d7 d2 01 d9 67 49 43 b8 39 27 ec c1 c4 82 8a eb b0 ae 1f 1b c5 ce 1d 11 8c ca 43 48 11 32 8d 41 7c de f7 a4 8b e3 cc 3f 51 9c 13 80 78 b6 8b 3b c7 85 e2 46 d1 Data Ascii: 8StJmjCW';Xh)?t<5)Dp/5xV<OZslZp!)(^8XiW8{SPLfd<&EMG-\W,^9tE(WjErykssQWaE%iD;}Hxt~gIC9'CH2A\|?Qx;F
2024-05-24 06:26:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49773	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	388	OUT	GET /wp-content/uploads/2024/05/israel-dc-768x403.png HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	836	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=174671 etag: W/"664636c8-2aa4f" expires: Wed, 19 Jun 2024 16:10:50 GMT last-modified: Thu, 16 May 2024 16:39:36 GMT vary: Accept x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Lumk%2Bi2b9c8qXAVLX9eE6g%2Fr50APaBe4IC4zWoOTRgLiTMuGVXEOsJ08%2BkBLKqjzVZUvMi9RyKY8yTu3mDkh%2BCkOEHFa78Xp0NGRFXjk9pFx1Uj8ueQtv5oFhBjD%2FTdrVI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37736e97432e-EWR
2024-05-24 06:26:52 UTC	533	IN	Data Raw: 33 32 65 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 01 93 08 03 00 00 00 a8 32 85 78 00 00 03 00 50 4c 54 45 d9 00 02 ff ff ff fa f9 f9 f0 f5 f8 f5 ef ef ea ed f5 f3 e5 df e2 ea f1 e7 e8 e9 e4 e3 dc d8 e1 f2 d9 de eb d8 de db ef d3 cb d6 d9 ea da d8 d9 d0 d9 ea c9 d8 f6 ca d9 e9 db d5 cb d0 d5 df c9 d3 e9 c9 d3 e4 cf d1 cd b9 d6 e0 b9 d7 d9 ea c3 bb c8 cd df be cf ed b7 d5 de b6 d6 d9 ec c3 a6 b8 d2 d9 b3 d3 df b1 d5 d9 c0 cb df b4 d1 d9 b8 cd e3 af d2 db ba ce d1 b8 cd d9 c8 c8 c7 b2 ce da b2 cd d0 c0 c4 c1 cd be ba d1 bd ad ea ad a2 ac bc e4 be bb b9 b2 be b9 af ba cf da af 8c d3 aa a9 88 c5 e1 bd b2 b4 bb b4 a6 9f b3 dc aa b2 b5 dd 9d 91 ac b0 a6 bd a3 a4 cd a3 76 9b ab ce 9d a9 bf b4 a4 90 9b ab ac a9 a5 a1 df 8b 86 8d Data Ascii: 32e0PNGIHDR2xPLTEv
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 49 57 37 98 2e 38 67 46 37 57 4b 44 3f 4e 72 49 57 26 4d 57 14 49 4a 50 b6 1a 29 57 46 38 43 48 5a 7d 2f 36 da 08 09 1e 4a 9d 49 46 3e 62 3b 30 16 50 8a 43 45 4a 43 4e 11 cc 09 09 3e 4a 27 56 39 2d 49 3d 35 bd 06 05 1b 3e 8c 3b 3d 3c 3a 45 0f 0f 3e 9d 1f 3e 71 33 3a 4e 38 3c 2e 4b 33 28 5e 25 25 32 3f 10 a1 07 0d 3e 33 2a 0b 36 92 33 32 34 11 33 81 34 33 21 7c 10 17 44 29 1f 27 30 38 28 37 0e 0a 2c 8d 19 2f 56 26 30 25 34 28 22 0c 2a 70 3e 1f 17 68 0a 10 20 2f 0c 21 27 32 09 23 7f 22 25 24 30 20 17 1c 28 10 54 09 0b 1d 1e 27 23 1c 19 14 25 0d 45 0b 0b 32 13 0e 08 16 68 25 18 10 11 1a 38 14 19 27 09 12 5d 14 18 1e 16 19 12 0c 1d 09 1b 12 12 08 1a 14 25 0d 09 09 0d 51 0c 12 21 08 0d 43 11 10 16 08 17 09 09 10 16 10 0e 0c 18 0a 09 08 09 34 07 11 08 08 09 25 Data Ascii: IW7.8gF7WKD?NrIW&MWIJP)WF8CHZ}/6JIF>b;0PCEJCN>J'V9-I=5>;=<:E>>q3:N8<.K3(^%%2?>36324343!\|D)'08(7,/V&0%4("p>h /!'2#"%$0 (T'#%E2h%8']%Q!C4%
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 9f 3d 7d ee 34 c3 f9 2f be 38 f7 c5 a5 73 e7 bf b8 74 fe 8b be b3 a7 ba 4f 9d 3a d5 dd 73 ba af af ef 6c df b9 73 67 cf f6 9d 3d 7b fa 54 8f 58 e5 2c 57 a7 b9 ef e3 e1 e9 b3 7c 15 3e d8 d1 d9 0d 31 9e ea e6 ef 1d 7e f4 cf 32 c0 ff fe df 4c e6 e2 81 65 25 5d cc f8 05 1b db f3 ca 36 17 df 1d 53 71 d1 19 e0 cd 0f 3e fb ec b3 37 5f ae d8 50 57 75 fb ed cb ee e1 63 3e af de b4 ee 1e 38 e1 07 d5 cd 55 25 75 ad 4d ad 75 25 cb 4a 8a 2b 2b 2b cb 8b cb 44 45 e5 65 15 a5 79 69 a0 55 80 8c d2 15 10 77 58 f9 f5 95 ef 1d f6 01 42 83 ef be fe 61 f4 bd a3 17 90 06 8c 10 61 28 bf 0b 98 22 fa 73 dc 04 a3 ff 04 64 17 d1 d7 c6 55 13 ec a7 8d 1f 26 4e 9a c8 f5 0d 93 6f b8 61 82 86 71 93 27 df 30 15 c0 01 f9 b1 e3 40 e8 d8 c4 c4 b1 93 00 31 e8 06 9b e2 03 7e 82 1f 01 e0 f6 1c Data Ascii: =}4/8stO:slsg={TX,W\|>1~2Le%]6Sq>7_PWuc>8U%uMu%J+++DEeyiUwXBaa("sdU&Noaq'0@1~
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 07 94 a2 9f 00 ab e9 11 ac 83 fc 2b 95 18 df fd c1 95 7c 11 28 ea 51 7d 3f aa f7 7f 55 4f 8a be 35 35 25 4a 51 8d 3e a0 af fd c9 01 6f 69 9f 1c 28 fc fe 04 fd 7e fa 44 f4 fb 09 93 a7 df 00 37 dc 30 69 02 6a cb e4 09 53 26 31 d3 c3 01 13 05 ee c9 13 34 2b 4f 1d 3b 36 c4 83 44 69 e4 7a a8 77 13 a4 d5 48 42 20 33 90 01 a6 37 8d 65 07 fc 02 f3 38 e3 06 24 00 48 b7 7d 82 a0 cd 5c ae 93 f0 1f b0 04 5f b1 3b d6 61 09 36 88 2b fb 04 11 c3 09 f0 f3 52 84 06 64 57 e3 12 d3 0a 37 98 82 13 39 c2 dc 88 03 30 75 5b ea 9a f5 f0 57 5b 7e be 3f dc d9 16 06 e5 48 06 21 df 14 1f 46 00 c3 ce 7d 2b dc 81 f6 cc cf bb 6e d4 d5 ed d4 51 db d4 50 b3 6a 15 c8 77 5a c5 b1 7c c5 aa e5 b3 46 27 a1 f0 8c 19 3d 1a b4 8f 1e 2d 11 90 e0 f8 4f d3 f4 0f fc a1 e1 e8 47 9a fd c1 be 8f c3 47 Data Ascii: +\|(Q}?UO55%JQ>oi(~D70ijS&14+O;6DizwHB 37e8$H}\_;a6+RdW790u[W[~?H!F}+nQPjwZ\|F'=-OGG
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 46 08 9d 17 ea 68 db b2 a5 71 4b 2b 73 1f 84 73 13 17 7f 9b 31 02 2c 70 f8 60 f8 b0 4c 5f 53 7b 18 5d 03 b2 0d cc b8 2e c4 0d cf b9 e8 e4 ce ec 4f 58 62 db 4a 57 7f 9e 7e 6b 3b 23 61 00 68 81 3c 3c e3 c7 26 8d 81 60 80 91 a3 99 f5 d1 85 60 01 e4 80 6b ff cc fd 63 46 b8 01 a0 51 a2 60 f0 50 84 00 f8 4f 18 8e d5 20 d2 f4 8f 05 0d 1f 20 01 0a 62 37 74 bb f6 6f be a0 be 5e d0 0c fe 5d df ef eb e9 ed 05 f8 97 d0 83 ce 22 08 be f8 e2 fc 59 5e 05 c0 ef 43 01 92 55 cc 61 7f 69 f1 b6 64 57 63 5d e5 61 24 c0 d7 c0 af 03 01 b0 09 cf 57 41 de 9b 30 80 a9 40 35 45 f1 d7 d6 7c 2e 1b e0 e8 b6 ef ae 2c 58 be 03 06 d8 9f 9d 8f fa 03 f8 ab 9d 07 50 85 96 e5 df 76 5b 6e 61 f9 86 da da cd e5 38 fe d9 99 fe c1 ff aa b5 ce 00 51 b7 b9 31 40 94 03 22 b8 e7 ad a6 6d 9d 78 1f 75 Data Ascii: FhqK+ss1,p`L_S{].OXbJW~k;#ah<<&``kcFQ`PO b7to^]"Y^CUaidWc]a$WA0@5E\|.,XPv[na8Q1@"mxu
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 07 fd 17 00 7d df 85 f3 5f 7e f1 25 3a 10 d7 36 ff 43 30 0d 5f 49 38 9c ed e6 a7 bb f9 9b e3 f0 42 95 6a aa 6d eb 39 c3 9c ff e7 e8 17 cd 04 09 c3 5d 9f 59 08 e0 b3 c2 19 7b 8f 3d 5c 34 68 e0 86 0b 9f 39 6d 2c 3d 40 3c f8 c0 8e 9d d9 f9 0a 01 c3 02 70 80 f0 af 40 18 c1 df da 86 27 6b 6b 37 94 4b 05 2a 12 17 94 42 70 40 69 61 56 66 ba b2 65 42 d0 74 70 67 c8 67 de d7 e0 d8 77 c6 08 31 a9 0b ec 89 81 33 54 d8 e7 81 a0 9a a2 0b 31 01 ef ed 25 39 32 9c b4 07 27 46 7d 0b b2 0d fd 92 06 dc 68 93 2a cf 46 9a 82 ac d9 a9 d2 75 38 09 ee 76 c9 99 83 0f 98 a1 13 d1 7f 42 a1 c9 68 37 a1 b1 21 53 fc a7 8e 9d 68 7e 9b c9 63 79 3d 9d 07 48 03 f4 94 e9 b2 04 42 e8 2f 60 16 10 33 24 22 1a 12 d9 74 6f 86 2e f3 bf b4 23 20 2d 98 83 7c c7 ad 88 60 b1 f0 2e af e5 04 6e ec ca Data Ascii: }_~%:6C0_I8Bjm9]Y{=\4h9m,=@<p@'kk7KBp@iaVfeBtpggw13T1%92'F}hFu8vBh7!Sh~cy=HB/`3$"to.# -\|`.n
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 7c 79 6e cc b5 65 17 0d fe 3c 66 f8 e0 d3 cf 8e bf bc b1 bc 8a bc 69 c2 00 32 85 c5 0a 44 05 d6 94 e4 97 e0 02 ad 95 01 50 5b 53 5e cc 00 6d 63 83 36 54 3c 5c 5a 56 54 58 54 98 05 32 9d 40 b5 90 47 ee ae 28 32 fb 73 a5 91 a7 08 02 2e d9 35 98 04 60 64 80 47 24 19 fc 89 fb 4d 45 11 e7 0f 5f c0 04 89 e8 27 06 7c 76 b4 19 80 9f 38 25 11 50 cb a7 63 9c c4 c1 0e ac f9 72 ba 78 0a b5 26 e4 6c 10 0a 31 e0 fa 9f c2 ef 10 cb 4c 07 a1 4c ec 80 7b 4a e2 54 3e 03 a6 9a fb 01 2e a8 c7 44 c6 1f aa b4 4f 47 2f a8 e6 e3 89 98 09 7c 70 c3 d8 a9 32 73 95 02 21 04 4f e0 20 77 c1 3d 9f 3c e6 89 34 27 64 03 03 dc 20 d4 6b 70 84 fb 05 24 f9 f0 55 cd 27 14 70 08 c3 94 d2 9a 9d db 8c 1a a4 fa eb 54 03 35 d4 20 01 08 80 35 6e 0e 1f 6c ef dc bf b9 16 fc 6f fe c9 41 2c 61 d4 9d 17 Data Ascii: \|yne<fi2DP[S^mc6T<\ZVTXT2@G(2s.5`dG$ME_'\|v8%Pcrx&l1LL{JT>.DOG/\|p2s!O w=<4'd kp$U'pT5 5nloA,a
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 01 7c 8a 5e 08 f1 40 50 4e 1f 58 01 1e e1 87 6e c0 7c e0 16 9d 64 b2 1c 3e a8 52 82 b6 19 ca 32 0c f0 9e e2 b6 41 a5 02 c5 1c 4c cb 88 09 24 06 3f c2 f4 8c 6e c3 cf c1 01 b8 45 c7 19 98 41 39 24 dc cb 0e 06 f4 76 35 51 87 2e 2d d7 9f 93 00 6f 85 04 d2 fd 01 fe 38 b8 44 d7 53 08 1e e8 cf 72 af 68 90 ef ef ef 26 b9 07 d4 67 9a 72 76 ae f9 df bd a1 a1 d1 42 60 8a fc 76 36 36 34 22 8f 37 6f de fb 62 c3 4f 7e 82 29 70 f0 70 87 7c 41 e0 1f fd 27 4c 96 74 e3 41 69 3c 9e fb 80 8b e7 6c 77 17 92 00 5d 01 f4 eb 11 e9 6f 1d 04 cd 3a 31 82 5f 2b 4f 8d 1b 9c b4 70 e1 02 68 a9 8b 80 ad 18 c0 87 9e 7a 60 cf a1 97 5e da b3 6f 2b 32 60 c4 88 f1 e3 97 3e b6 67 cf a1 57 5f da f7 f4 14 f9 3f 71 71 9a 5f df c3 5f 58 c7 5c 8c 18 2b 5e 18 0e c9 58 e6 01 b5 33 0a 91 c1 12 32 0a Data Ascii: \|^@PNXn\|d>R2AL$?nEA9$v5Q.-o8DSrh&grvB`v664"7obO~)pp\|A'LtAi<lw]o:1_+Ophz`^o+2`>gW_?qq__X\+^X32
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 51 70 f8 06 de a3 10 89 57 54 1d 30 d9 d0 ae c3 b1 ee 14 49 78 86 42 88 01 0f 1f eb ee 72 ce c4 a4 42 03 fd c6 9a 08 71 b7 19 95 b3 a8 bc b1 3d dc 49 0c a0 b6 8e 4c e7 ae ce f0 c1 c6 86 cd 35 38 27 90 0c ca fa f7 ea 5f 51 97 b2 83 04 7c 99 00 1f 76 9f 7a ff 54 f7 59 69 42 7a 80 64 c0 08 ee 3a d6 d9 b5 0d d5 7f ee 9c b4 39 d3 17 2f 46 fd 5f ec 2a 10 1c f0 18 e6 ef 5b 4f cf 1a 3f 7e fc 8a dd 28 41 2f 41 7b d0 7d 50 ff 61 81 07 c6 8f 24 14 80 29 1b 47 0a 1c 2c 00 ff 8c 37 e7 27 a3 a7 05 e9 00 fc 48 09 f0 cf 15 0f 2c 32 1c 8b 1c 30 09 40 ee f4 92 b2 9b 62 5f 54 e9 a3 a5 79 3a 79 66 83 07 07 f4 06 b4 b3 a3 e0 f4 f6 11 0d 36 02 f4 16 29 bb e8 32 81 b7 81 4f 54 22 40 12 e0 2a 91 60 6a 61 ba ad f4 85 70 ef b6 9a c2 bc 79 e9 05 19 d7 5c 93 45 18 80 ed 83 9d 1b 97 Data Ascii: QpWT0IxBrBq=IL58'_Q\|vzTYiBzd:9/F_[O?~(A/A{}Pa$)G,7'H,20@b_Ty:yf6)2OT"@`japy\E
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 0e 08 4e 08 8a e0 ad 5f c8 91 c3 98 05 58 c0 a7 3e 3c f5 7e 77 d7 c1 0d 39 a9 69 63 07 0f 1c 38 b0 7f ec 2c 26 7f b9 80 34 2c 04 ff 4b 09 03 bf 85 1b 74 0f b8 87 f6 bc a4 f3 be a7 66 4d 99 32 67 f7 a1 43 8f cd 52 41 80 26 76 e9 3c 1c ca 7e 80 09 20 b7 80 ad 52 58 a2 21 6e a8 02 60 16 2e 30 01 c0 18 0b 5f e8 09 f9 a4 4b 0a e7 c5 6c 38 86 c7 27 20 14 1b c1 df 2b 73 b8 e2 8c a7 b3 8f 41 18 3f ed be 20 d2 82 60 02 46 23 d7 80 5c 79 82 f0 8b 5e a2 22 ec eb 26 b0 4e d5 df cb cf ca ca ce be 29 66 d0 a0 41 43 e0 80 61 f1 77 de 74 cd b5 a9 1f 21 02 8c 0e 60 1d e0 1d 6a 7f f3 68 4d 69 4b 5b cb a6 e6 d6 66 e6 7c 27 cb 89 d8 d4 c2 03 78 81 22 c9 65 cb 4a 90 00 95 4d b5 04 06 1e 2e 2a 45 02 88 01 d2 a7 a7 4d 05 db da d8 0d d7 6e 0b 2b f3 41 c0 0d 58 c3 d5 23 c1 dd 3e Data Ascii: N_X><~w9ic8,&4,KtfM2gCRA&v<~ RX!n`.0_Kl8' +sA? `F#\y^"&N)fACawt!`jhMiK[f\|'x"eJM.*EMn+AX#>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49776	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	528	OUT	GET /script/US/1/13376 HTTP/1.1 Host: ruamupr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	777	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 114769 Connection: close Expires: Fri, 24 May 2024 06:27:10 GMT Cache-Control: public, max-age=28800 Etag: "cfd11f24b188467716fa20c05ce9a19117ba0690" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: HIT Age: 42 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NfvG0UVjSe3tUSDKNhQHoH%2BkJzMw%2BhQs6%2BjaEsggo9dCDUIrFXvwa93wDRhauyJQdTUdkMtESkeEBHWo1M6QfBO3Tym1i4ooVecbNO61UnuZM4zwD3Wwva61JarnFg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37761e2943a4-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:52 UTC	592	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 73 74 2e 74 79 70 65 28 65 29 3b 72 65 74 75 72 6e 20 73 74 2e 69 73 57 69 6e 64 6f 77 28 65 29 3f 21 31 3a 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 74 3f 21 30 3a 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 6e 26 26 28 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 30 26 26 74 2d 31 Data Ascii: document.getElementsByTagName=HTMLDocument.prototype.getElementsByTagName;(function(e,t){"use strict";function n(e){var t=e.length,n=st.type(e);return st.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 6e 6f 6f 70 29 29 2c 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 26 26 28 69 3f 63 5b 66 5d 3d 73 74 2e 65 78 74 65 6e 64 28 63 5b 66 5d 2c 6e 29 3a 63 5b 66 5d 2e 64 61 74 61 3d 73 74 2e 65 78 74 65 6e 64 28 63 5b 66 5d 2e 64 61 74 61 2c 6e 29 29 2c 6f 3d 63 5b 66 5d 2c 69 7c 7c 28 6f 2e 64 61 74 61 7c 7c 28 6f 2e 64 61 74 61 3d 7b 7d 29 2c 6f 3d 6f 2e 64 61 74 61 29 2c 72 21 3d 3d 74 26 26 28 6f 5b 73 74 2e 63 61 6d 65 6c 43 61 73 65 28 6e 29 5d 3d 72 29 2c 75 3f 28 61 3d 6f 5b 6e 5d 2c 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6f 5b 73 74 2e 63 61 6d 65 6c 43 61 73 65 28 6e 29 5d 29 29 3a 61 3d 6f 2c 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 29 7b 69 66 28 73 74 Data Ascii: noop)),("object"==typeof n\|\|"function"==typeof n)&&(i?c[f]=st.extend(c[f],n):c[f].data=st.extend(c[f].data,n)),o=c[f],i\|\|(o.data\|\|(o.data={}),o=o.data),r!==t&&(o[st.camelCase(n)]=r),u?(a=o[n],null==a&&(a=o[st.camelCase(n)])):a=o,a}}function o(e,t,n){if(st
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7d 29 3b 69 66 28 57 74 2e 74 65 73 74 28 74 29 29 72 65 74 75 72 6e 20 73 74 2e 66 69 6c 74 65 72 28 74 2c 72 2c 21 6e 29 3b 74 3d 73 74 2e 66 69 6c 74 65 72 28 74 2c 72 29 7d 72 65 74 75 72 6e 20 73 74 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 74 2e 69 6e 41 72 72 61 79 28 65 2c 74 29 3e 3d 30 3d 3d 3d 6e 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 74 3d 7a 74 2e 73 70 6c 69 74 28 22 7c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 69 66 28 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 66 6f 72 28 3b 74 2e 6c 65 6e 67 74 68 3b Data Ascii: rep(e,function(e){return 1===e.nodeType});if(Wt.test(t))return st.filter(t,r,!n);t=st.filter(t,r)}return st.grep(e,function(e){return st.inArray(e,t)>=0===n})}function p(e){var t=zt.split("\|"),n=e.createDocumentFragment();if(n.createElement)for(;t.length;
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 65 64 3d 65 2e 63 68 65 63 6b 65 64 2c 74 2e 76 61 6c 75 65 21 3d 3d 65 2e 76 61 6c 75 65 26 26 28 74 2e 76 61 6c 75 65 3d 65 2e 76 61 6c 75 65 29 29 3a 22 6f 70 74 69 6f 6e 22 3d 3d 3d 6e 3f 74 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 74 2e 73 65 6c 65 63 74 65 64 3d 65 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3a 28 22 69 6e 70 75 74 22 3d 3d 3d 6e 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 6e 29 26 26 28 74 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 74 3f 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 Data Ascii: ed=e.checked,t.value!==e.value&&(t.value=e.value)):"option"===n?t.defaultSelected=t.selected=e.defaultSelected:("input"===n\|\|"textarea"===n)&&(t.defaultValue=e.defaultValue)}}function b(e,n){var r,i,o=0,a=e.getElementsByTagName!==t?e.getElementsByTagName(
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 28 61 2b 3d 73 74 2e 63 73 73 28 65 2c 6e 2b 77 6e 5b 6f 5d 2c 21 30 2c 69 29 29 2c 72 3f 28 22 63 6f 6e 74 65 6e 74 22 3d 3d 3d 6e 26 26 28 61 2d 3d 73 74 2e 63 73 73 28 65 2c 22 70 61 64 64 69 6e 67 22 2b 77 6e 5b 6f 5d 2c 21 30 2c 69 29 29 2c 22 6d 61 72 67 69 6e 22 21 3d 3d 6e 26 26 28 61 2d 3d 73 74 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 22 2b 77 6e 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 69 29 29 29 3a 28 61 2b 3d 73 74 2e 63 73 73 28 65 2c 22 70 61 64 64 69 6e 67 22 2b 77 6e 5b 6f 5d 2c 21 30 2c 69 29 2c 22 70 61 64 64 69 6e 67 22 21 3d 3d 6e 26 26 28 61 2b 3d 73 74 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 22 2b 77 6e 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 69 29 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 Data Ascii: (a+=st.css(e,n+wn[o],!0,i)),r?("content"===n&&(a-=st.css(e,"padding"+wn[o],!0,i)),"margin"!==n&&(a-=st.css(e,"border"+wn[o]+"Width",!0,i))):(a+=st.css(e,"padding"+wn[o],!0,i),"padding"!==n&&(a+=st.css(e,"border"+wn[o]+"Width",!0,i)));return a}function E(e
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 29 66 6f 72 28 3b 72 3d 6f 5b 69 2b 2b 5d 3b 29 22 2b 22 3d 3d 3d 72 5b 30 5d 3f 28 72 3d 72 2e 73 6c 69 63 65 28 31 29 7c 7c 22 2a 22 2c 28 65 5b 72 5d 3d 65 5b 72 5d 7c 7c 5b 5d 29 2e 75 6e 73 68 69 66 74 28 6e 29 29 3a 28 65 5b 72 5d 3d 65 5b 72 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 6e 2c 72 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 75 29 7b 76 61 72 20 6c 3b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 73 74 2e 65 61 63 68 28 65 5b 75 5d 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 75 29 7b 76 61 72 20 63 3d 75 28 6e 2c 72 2c 69 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 63 7c 7c 73 7c 7c 61 5b 63 5d 3f 73 3f 21 28 6c 3d 63 29 3a 74 3a Data Ascii: unction(n))for(;r=o[i++];)"+"===r[0]?(r=r.slice(1)\|\|"*",(e[r]=e[r]\|\|[]).unshift(n)):(e[r]=e[r]\|\|[]).push(n)}}function L(e,n,r,i){function o(u){var l;return a[u]=!0,st.each(e[u]\|\|[],function(e,u){var c=u(n,r,i);return"string"!=typeof c\|\|s\|\|a[c]?s?!(l=c):t:
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 76 65 72 73 69 6f 6e 20 66 72 6f 6d 20 22 2b 6c 2b 22 20 74 6f 20 22 2b 69 7d 7d 7d 6c 3d 69 7d 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 73 75 63 63 65 73 73 22 2c 64 61 74 61 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 51 6e 3d 74 7d 29 2c 51 6e 3d 73 74 2e 6e 6f 77 28 29 Data Ascii: version from "+l+" to "+i}}}l=i}return{state:"success",data:t}}function _(){try{return new e.XMLHttpRequest}catch(t){}}function F(){try{return new e.ActiveXObject("Microsoft.XMLHTTP")}catch(t){}}function O(){return setTimeout(function(){Qn=t}),Qn=st.now()
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 2e 70 72 6f 67 72 65 73 73 28 6c 2e 6f 70 74 73 2e 70 72 6f 67 72 65 73 73 29 2e 64 6f 6e 65 28 6c 2e 6f 70 74 73 2e 64 6f 6e 65 2c 6c 2e 6f 70 74 73 2e 63 6f 6d 70 6c 65 74 65 29 2e 66 61 69 6c 28 6c 2e 6f 70 74 73 2e 66 61 69 6c 29 2e 61 6c 77 61 79 73 28 6c 2e 6f 70 74 73 2e 61 6c 77 61 79 73 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 3b 66 6f 72 28 6e 20 69 6e 20 65 29 69 66 28 72 3d 73 74 2e 63 61 6d 65 6c 43 61 73 65 28 6e 29 2c 69 3d 74 5b 72 5d 2c 6f 3d 65 5b 6e 5d 2c 73 74 2e 69 73 41 72 72 61 79 28 6f 29 26 26 28 69 3d 6f 5b 31 5d 2c 6f 3d 65 5b 6e 5d 3d 6f 5b 30 5d 29 2c 6e 21 3d 3d 72 26 26 28 65 5b 72 5d 3d 6f 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 29 2c 61 3d 73 74 2e 63 73 73 48 6f 6f 6b 73 5b Data Ascii: .progress(l.opts.progress).done(l.opts.done,l.opts.complete).fail(l.opts.fail).always(l.opts.always)}function R(e,t){var n,r,i,o,a;for(n in e)if(r=st.camelCase(n),i=t[r],o=e[n],st.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),a=st.cssHooks[
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 73 74 2e 5f 72 65 6d 6f 76 65 44 61 74 61 28 65 2c 22 66 78 73 68 6f 77 22 29 3b 66 6f 72 28 74 20 69 6e 20 68 29 73 74 2e 73 74 79 6c 65 28 65 2c 74 2c 68 5b 74 5d 29 7d 29 3b 66 6f 72 28 72 3d 30 3b 61 3e 72 3b 72 2b 2b 29 69 3d 67 5b 72 5d 2c 6c 3d 70 2e 63 72 65 61 74 65 54 77 65 65 6e 28 69 2c 6d 3f 73 5b 69 5d 3a 30 29 2c 68 5b 69 5d 3d 73 5b 69 5d 7c 7c 73 74 2e 73 74 79 6c 65 28 65 2c 69 29 2c 69 20 69 6e 20 73 7c 7c 28 73 5b 69 5d 3d 6c 2e 73 74 61 72 74 2c 6d 26 26 28 6c 2e 65 6e 64 3d 6c 2e 73 74 61 72 74 2c 6c 2e 73 74 61 72 74 3d 22 77 69 64 74 68 22 3d 3d 3d 69 7c 7c 22 68 65 69 67 68 74 22 3d 3d 3d 69 3f 31 3a 30 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 24 2e 70 72 6f 74 Data Ascii: st._removeData(e,"fxshow");for(t in h)st.style(e,t,h[t])});for(r=0;a>r;r++)i=g[r],l=p.createTween(i,m?s[i]:0),h[i]=s[i]\|\|st.style(e,i),i in s\|\|(s[i]=l.start,m&&(l.end=l.start,l.start="width"===i\|\|"height"===i?1:0))}}function $(e,t,n,r,i){return new $.prot
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 69 3d 22 3c 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 22 3e 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 26 26 65 2e 6c 65 6e 67 74 68 3e 3d 33 3f 5b 6e 75 6c 6c 2c 65 2c 6e 75 6c 6c 5d 3a 66 74 2e 65 78 65 63 28 65 29 2c 21 69 7c 7c 21 69 5b 31 5d 26 26 6e 29 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 5f 5f 73 68 3f 28 6e 7c 7c 72 29 2e 66 69 6e 64 28 65 29 3a 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 29 2e 66 69 6e 64 28 65 29 3b 69 66 28 69 5b 31 5d 29 7b 69 66 28 6e 3d 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 74 3f 6e 5b 30 5d 3a 6e 2c 73 74 2e 6d 65 72 67 65 28 74 68 69 73 2c 73 74 2e 70 61 72 73 65 48 54 4d 4c 28 69 5b 31 5d 2c 6e 26 26 6e 2e 6e 6f 64 65 54 79 Data Ascii: "==typeof e){if(i="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:ft.exec(e),!i\|\|!i[1]&&n)return!n\|\|n.__sh?(n\|\|r).find(e):this.constructor(n).find(e);if(i[1]){if(n=n instanceof st?n[0]:n,st.merge(this,st.parseHTML(i[1],n&&n.nodeTy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49783	104.19.130.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	578	OUT	GET /p/j/pjnewsletter.com.1171406.es6.js HTTP/1.1 Host: jsc.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	1065	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: text/javascript Content-Length: 357469 Connection: close Cf-Bgj: minify Cf-Polished: origSize=357470 ETag: "df933e48118a8b52faffe7acfa12fefe" Last-Modified: Tue, 21 May 2024 10:26:52 GMT x-amz-id-2: 5SheNjPvSeFzmv7SuCmUSsgnzMtCxnqVnmXlz2ZXAEJmtAh/uUTlx/yaSFG1vUTF2FMXxy9osKQ= x-amz-request-id: 2J7T2D6EXAE9E6DT x-amz-server-side-encryption: AES256 x-amz-version-id: kIgswwz5xFUUtQcPtZjl6jTTlsSYEZb6 CF-Cache-Status: HIT Age: 5312 Expires: Fri, 24 May 2024 09:26:52 GMT Cache-Control: public, max-age=10800 Accept-Ranges: bytes Set-Cookie: __cf_bm=nV9A4IaUjflSGrZwvw72maVPqAKVuym8qbSqWWznRHQ-1716532012-1.0.1.1-5fV1GR.0jJOU5EUucCG25pK9PO6WxQ_7CQGbgrs2JG6BMV7z7HXybifw61iBUXYglmSwvN39bw5b1NzpbTxAbg; path=/; expires=Fri, 24-May-24 06:56:52 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b3776e8e38cdc-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:52 UTC	304	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 6c 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 43 65 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 68 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 64 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 78 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 75 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 3d 28 67 2c 74 29 3d 3e 28 29 3d 3e 28 67 26 26 28 74 3d 67 28 67 3d 30 29 29 2c 74 29 3b 76 61 72 20 6e 65 3d 28 67 2c 74 29 3d 3e 28 29 3d 3e 28 74 7c 7c 67 28 28 74 3d Data Ascii: (()=>{var ln=Object.create;var Ce=Object.defineProperty;var hn=Object.getOwnPropertyDescriptor;var dn=Object.getOwnPropertyNames;var xn=Object.getPrototypeOf,un=Object.prototype.hasOwnProperty;var $=(g,t)=>()=>(g&&(t=g(g=0)),t);var ne=(g,t)=>()=>(t\|\|g((t=
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 65 20 69 6e 20 74 29 43 65 28 67 2c 65 2c 7b 67 65 74 3a 74 5b 65 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 66 6e 3d 28 67 2c 74 2c 65 2c 69 29 3d 3e 7b 69 66 28 74 26 26 74 79 70 65 6f 66 20 74 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 66 6f 72 28 6c 65 74 20 73 20 6f 66 20 64 6e 28 74 29 29 21 75 6e 2e 63 61 6c 6c 28 67 2c 73 29 26 26 73 21 3d 3d 65 26 26 43 65 28 67 2c 73 2c 7b 67 65 74 3a 28 29 3d 3e 74 5b 73 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 69 3d 68 6e 28 74 2c 73 29 29 7c 7c 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 3b 72 65 74 75 72 6e 20 67 7d 3b 76 61 72 20 6f 65 3d 28 67 2c 74 2c 65 29 3d 3e 28 65 3d 67 21 3d 6e 75 6c 6c 3f 6c 6e 28 78 6e 28 67 Data Ascii: r(var e in t)Ce(g,e,{get:t[e],enumerable:!0})},fn=(g,t,e,i)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let s of dn(t))!un.call(g,s)&&s!==e&&Ce(g,s,{get:()=>t[s],enumerable:!(i=hn(t,s))\|\|i.enumerable});return g};var oe=(g,t,e)=>(e=g!=null?ln(xn(g
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 67 69 64 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 41 64 63 68 6f 69 63 65 73 2e 73 76 67 22 0a 09 09 09 09 09 20 20 20 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 61 6c 74 20 2f 3e 0a 09 09 09 09 3c 2f 61 3e 0a 09 09 09 3c 2f 6f 62 6a 65 63 74 3e 0a 09 09 3c 2f 61 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 74 79 6c 65 3e 0a 09 2e 6d 67 68 65 61 64 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e Data Ascii: !important; position: static;" src="https://cdn.mgid.com/images/logos/Adchoices.svg" width="20" height="20" alt /></a></object></a></div></div><style>.mghead { font-weight: 700; font-size: 14px; text-tran
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 35 65 29 20 28 28 6f 6e 7c 5b 69 21 31 5d 6e 20 74 68 65 29 20 29 3f 28 68 5b 65 33 5d 72 65 7c 6d 65 7c 70 6c 65 61 73 65 7c 61 64 73 7c 74 6f 7c 65 6e 20 63 75 61 6c 71 75 5b 69 21 31 5d 65 72 20 61 6e 75 6e 63 5b 69 21 31 5d 6f 7c 71 75 5c 75 31 45 41 33 6e 67 20 63 5c 78 45 31 6f 7c 6e 61 20 5b 69 21 31 5d 6d 65 67 65 6e 7c 6e 6a 65 20 6e 67 61 20 72 65 6b 6c 61 6d 61 74 7c 6e 6f 20 61 6e 5c 78 46 41 6e 63 5b 69 21 31 5d 6f 7c 72 65 6b 6c 61 6d 65 6e 7c 65 6d 20 61 6c 67 75 6d 61 20 70 72 6f 70 61 67 61 6e 64 61 7c 5b 69 21 31 5d 6b 6c 61 6e 20 61 74 61 6e 7c 62 65 6c 6f 77 20 62 61 6e 6e 65 72 29 22 2c 22 70 72 65 73 5b 69 31 21 5d 6f 6e 61 20 5c 75 30 34 34 31 75 61 6c 71 75 5b 69 31 21 5d 65 72 20 5b 69 31 21 5d 6d 61 67 65 6e 22 2c 22 74 6f 63 61 Data Ascii: 5e) ((on\|[i!1]n the) )?(h[e3]re\|me\|please\|ads\|to\|en cualqu[i!1]er anunc[i!1]o\|qu\u1EA3ng c\xE1o\|na [i!1]megen\|nje nga reklamat\|no an\xFAnc[i!1]o\|reklamen\|em alguma propaganda\|[i!1]klan atan\|below banner)","pres[i1!]ona \u0441ualqu[i1!]er [i1!]magen","toca
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 52 53 5f 4e 45 57 53 5d 22 3a 22 50 61 72 74 6e 65 72 20 4e 65 77 73 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 50 4f 50 55 4c 41 52 5d 22 3a 22 50 6f 70 75 6c 61 72 20 69 6e 20 6e 65 74 77 6f 72 6b 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 50 52 4f 4d 4f 54 45 44 5f 43 4f 4e 54 45 4e 54 5d 22 3a 22 50 72 6f 6d 6f 74 65 64 20 43 6f 6e 74 65 6e 74 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 53 4d 49 5d 22 3a 22 49 6e 20 6f 74 68 65 72 20 6d 65 64 69 61 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 53 50 4f 4e 53 4f 52 45 44 5f 43 4f 4e 54 45 4e 54 5d 22 3a 22 53 70 6f 6e 73 6f 72 65 64 20 43 6f 6e 74 65 6e 74 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 53 55 47 47 45 53 54 45 44 5f 4e 45 57 53 5d 22 3a 22 53 75 67 67 65 Data Ascii: RS_NEWS]":"Partner News","[WIDGET_TITLE_POPULAR]":"Popular in network","[WIDGET_TITLE_PROMOTED_CONTENT]":"Promoted Content","[WIDGET_TITLE_SMI]":"In other media","[WIDGET_TITLE_SPONSORED_CONTENT]":"Sponsored Content","[WIDGET_TITLE_SUGGESTED_NEWS]":"Sugge
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 69 6c 65 22 29 3d 3d 3d 22 31 22 7c 7c 21 31 7d 6c 6f 67 28 74 2c 65 3d 22 6c 6f 67 22 2c 69 3d 6e 75 6c 6c 29 7b 69 66 28 74 68 69 73 2e 69 73 44 65 62 75 67 45 6e 61 62 6c 65 64 29 7b 6c 65 74 20 6f 3d 5b 22 6c 6f 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 2e 69 6e 64 65 78 4f 66 28 65 29 21 3d 3d 2d 31 3f 65 3a 22 6c 6f 67 22 3b 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 6f 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6f 3d 22 6c 6f 67 22 29 2c 69 26 26 69 2e 73 74 61 63 6b 26 26 69 2e 6d 65 73 73 61 67 65 3f 63 6f 6e 73 6f 6c 65 5b 6f 5d 28 60 57 49 44 47 45 54 5f 31 31 37 31 34 30 36 5f 24 7b 74 68 69 73 2e 61 70 70 2e 75 6e 69 71 49 64 7d 60 2c 74 2c 69 2e 73 74 61 63 6b 29 3a 63 6f 6e 73 6f 6c 65 5b 6f 5d 28 60 Data Ascii: ile")==="1"\|\|!1}log(t,e="log",i=null){if(this.isDebugEnabled){let o=["log","info","warn","error"].indexOf(e)!==-1?e:"log";typeof console[o]!="function"&&(o="log"),i&&i.stack&&i.message?console[o](`WIDGET_1171406_${this.app.uniqId}`,t,i.stack):console[o](`
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 68 74 3d 22 32 37 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 32 20 32 37 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 25 33 45 25 33 43 2f 73 76 67 25 33 45 60 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 43 6f 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 5b 22 77 61 67 65 73 22 5d 27 29 2c 74 68 69 73 2e 72 6f 6f 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 2c 74 68 69 73 2e 64 65 62 75 67 42 6c 6f 63 6b 3d 6e 65 77 20 72 65 28 74 68 69 73 29 2c 74 68 69 73 2e 6c 69 66 65 43 79 63 6c 65 4c 6f 61 64 52 65 73 6f 6c 76 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 77 61 69 74 43 6f 6e 73 65 6e 74 52 65 73 6f 6c Data Ascii: ht="277" viewBox="0 0 492 277" %3E%3C/svg%3E`,this.enabledCooperationTypes=JSON.parse('["wages"]'),this.root=this.context.document.getElementById(t),this.debugBlock=new re(this),this.lifeCycleLoadResolver=null,this.waitConsentResol
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 6e 65 5c 5c 22 3e 5c 5c 6e 20 20 20 20 20 20 20 20 7b 69 66 20 24 62 61 6e 6e 65 72 7d 7b 24 62 61 6e 6e 65 72 7d 7b 5c 5c 2f 69 66 7d 5c 5c 6e 20 20 20 20 20 20 20 20 7b 69 66 20 24 74 65 61 73 65 72 7d 5c 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 5c 22 69 6d 61 67 65 2d 77 69 74 68 2d 74 65 78 74 5c 5c 22 3e 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 5c 22 6d 63 69 6d 67 5c 5c 22 3e 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 7b 24 74 61 72 67 65 74 7d 20 7b 24 68 72 65 66 7d 20 3e 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 5c 22 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 5c 5c 22 3e 5c 5c 6e 20 20 20 20 20 Data Ascii: ne\\">\\n {if $banner}{$banner}{\\/if}\\n {if $teaser}\\n <div class=\\"image-with-text\\">\\n <div class=\\"mcimg\\">\\n <a {$target} {$href} >\\n <div class=\\"image-container\\">\\n
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 22 3a 7b 22 73 74 79 6c 65 73 22 3a 7b 22 6d 61 78 57 69 64 74 68 22 3a 31 32 32 30 7d 7d 2c 22 70 72 69 63 65 22 3a 66 61 6c 73 65 2c 22 74 68 65 6d 65 22 3a 22 23 32 62 33 39 37 62 22 2c 22 77 69 64 74 68 22 3a 22 31 30 30 25 22 2c 22 62 75 74 74 6f 6e 22 3a 31 2c 22 6d 63 64 65 73 63 22 3a 7b 22 73 74 79 6c 65 73 22 3a 7b 22 66 6f 6e 74 22 3a 22 76 65 72 64 61 6e 61 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6e 6f 6e 65 22 2c 22 66 6f 6e 74 53 69 7a 65 22 3a 31 31 2c 22 66 6f 6e 74 53 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 74 65 78 74 41 6c 69 67 6e 22 3a 22 63 65 6e 74 65 72 22 2c 22 66 6f 6e 74 57 65 69 67 68 74 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 22 Data Ascii: ":{"styles":{"maxWidth":1220}},"price":false,"theme":"#2b397b","width":"100%","button":1,"mcdesc":{"styles":{"font":"verdana","color":"#666666","display":"none","fontSize":11,"fontStyle":"normal","textAlign":"center","fontWeight":"normal","textDecoration"
2024-05-24 06:26:52 UTC	1369	IN	Data Raw: 6c 45 66 66 65 63 74 22 3a 22 30 22 2c 22 74 65 78 74 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 61 75 74 6f 70 6c 61 63 65 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 66 6f 72 6d 61 74 43 68 61 6e 67 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 73 49 6e 74 65 72 73 74 69 74 69 61 6c 22 3a 22 22 2c 22 70 6f 70 75 70 46 72 65 71 75 65 6e 63 79 22 3a 31 35 2c 22 69 73 5f 69 6e 74 5f 65 78 63 68 61 6e 67 65 22 3a 22 30 22 2c 22 6d 6f 62 69 6c 65 57 69 64 67 65 74 49 6d 67 22 3a 22 68 74 74 70 73 3a 5c 5c 2f 5c 5c 2f 63 64 6e 2e 6d 67 69 64 2e 63 6f 6d 5c 5c 2f 69 6d 61 67 65 73 5c 5c 2f 6d 6f 62 69 6c 65 2d 77 69 64 67 65 74 2d 70 72 65 76 69 65 77 2e 70 6e 67 22 2c 22 73 68 6f 77 45 66 66 65 63 74 Data Ascii: lEffect":"0","textPosition":"bottom","autoplacement":"off","formatChanged":true,"customGradient":"","isInterstitial":"","popupFrequency":15,"is_int_exchange":"0","mobileWidgetImg":"https:\\/\\/cdn.mgid.com\\/images\\/mobile-widget-preview.png","showEffect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49784	199.232.192.134	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	608	OUT	GET /count-data.js?1=27459637%20https%3A%2F%2Fthepatriotjournal.com%2F%3Fp%3D27459637 HTTP/1.1 Host: thepatriotjournal.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	576	IN	HTTP/1.1 200 OK Connection: close Content-Length: 300 Server: nginx Content-Type: application/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN p3p: CP="DSP IDC CUR ADM DELi STP NAV COM UNI INT PHY DEM" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=600 Age: 0 Date: Fri, 24 May 2024 06:26:52 GMT Vary: Accept-Encoding Strict-Transport-Security: max-age=300; includeSubdomains Cross-Origin-Resource-Policy: cross-origin Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
2024-05-24 06:26:52 UTC	300	IN	Data Raw: 76 61 72 20 44 49 53 51 55 53 57 49 44 47 45 54 53 3b 0a 0a 69 66 20 28 74 79 70 65 6f 66 20 44 49 53 51 55 53 57 49 44 47 45 54 53 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 44 49 53 51 55 53 57 49 44 47 45 54 53 2e 64 69 73 70 6c 61 79 43 6f 75 6e 74 28 7b 22 74 65 78 74 22 3a 7b 22 61 6e 64 22 3a 22 61 6e 64 22 2c 22 63 6f 6d 6d 65 6e 74 73 22 3a 7b 22 7a 65 72 6f 22 3a 22 41 64 64 20 61 20 43 6f 6d 6d 65 6e 74 22 2c 22 6d 75 6c 74 69 70 6c 65 22 3a 22 56 69 65 77 20 7b 6e 75 6d 7d 20 43 6f 6d 6d 65 6e 74 73 22 2c 22 6f 6e 65 22 3a 22 56 69 65 77 20 31 20 43 6f 6d 6d 65 6e 74 22 7d 7d 2c 22 63 6f 75 6e 74 73 22 3a 5b 7b 22 69 64 22 3a 22 32 37 34 35 39 36 33 37 20 68 74 74 70 73 3a 5c 2f 5c 2f 74 68 65 70 61 74 72 69 6f 74 6a Data Ascii: var DISQUSWIDGETS;if (typeof DISQUSWIDGETS != 'undefined') { DISQUSWIDGETS.displayCount({"text":{"and":"and","comments":{"zero":"Add a Comment","multiple":"View {num} Comments","one":"View 1 Comment"}},"counts":[{"id":"27459637 https:\/\/thepatriotj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	527	OUT	GET /easylist/13285 HTTP/1.1 Host: souhaija.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	314	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4236 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Cache-Control: no-store ETag: W/"108c-EukE2MafEFzaNndOLwlxn3VVkyo" Cache-Control: no-cache
2024-05-24 06:26:52 UTC	4236	IN	Data Raw: 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 70 69 28 63 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 20 7c 7c 20 21 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 20 7c 7c 20 21 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 2e 67 65 74 48 69 67 68 45 6e 74 72 6f 70 79 56 61 6c 75 65 73 29 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 66 61 6c 73 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 Data Ascii: (function () { function gpi(callback) { try { if (!navigator \|\| !navigator.userAgentData \|\| !navigator.userAgentData.getHighEntropyValues) return callback(false) navigator.userA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49778	157.240.0.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	537	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 06:26:52 UTC	1705	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 06:26:52 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-24 06:26:53 UTC	14599	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-05-24 06:26:53 UTC	16384	IN	Data Raw: 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 61 3d 63 28 61 2c 68 29 3b 76 61 72 20 64 3d 62 28 61 2c 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 Data Ascii: !=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.parameter_selectors;if(Array.isArray(a)){a=c(a,h);var d=b(a,Boolean);if(a.length===d.length)return{parameter_selectors:d}}return
2024-05-24 06:26:53 UTC	16384	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 72 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 29 2c 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 74 3d 73 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 Data Ascii: .getFbeventsModules("SignalsFBEventsUtils"),r=f.getFbeventsModules("signalsFBEventsGetIsIosInAppBrowser"),s=f.getFbeventsModules("SignalsFBEventsURLUtil"),t=s.getURLParameter,u=f.getFbeventsModules("SignalsFBEventsGetValidUrl"),v=f.getFbeventsModules("Sig
2024-05-24 06:26:53 UTC	16384	IN	Data Raw: 5d 3a 6e 75 6c 6c 7d 61 3d 6e 65 77 20 61 28 63 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 Data Ascii: ]:null}a=new a(c);k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetValidUrl",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";j.exports=function(a){if(a==null)return null;try
2024-05-24 06:26:53 UTC	1784	IN	Data Raw: 73 28 7b 65 6e 64 70 6f 69 6e 74 73 3a 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 6f 69 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 75 73 65 50 61 74 68 43 6f 6f 6b 69 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 66 61 6c 6c 62 61 63 6b 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 2c 65 76 65 6e 74 73 46 69 6c 74 65 72 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 69 6c 74 65 72 69 6e 67 4d 6f 64 65 Data Ascii: s({endpoints:b.arrayOf(b.objectWithFields({targetDomain:b.allowNull(b.string()),endpoint:b.allowNull(b.string()),usePathCookie:b.allowNull(b["boolean"]()),fallbackDomain:b.allowNull(b.string())})),eventsFilter:b.allowNull(b.objectWithFields({filteringMode
2024-05-24 06:26:53 UTC	14600	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 6f 70 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 Data Ascii: :function(a){var b=this._opts[a];return b!=null?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){v
2024-05-24 06:26:53 UTC	16384	IN	Data Raw: 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 66 3d 6f 2e 74 72 69 67 67 65 72 28 70 28 62 29 29 3b 66 21 3d 6e 75 6c 6c 26 26 6d 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 21 3d 6e 75 6c 6c 26 26 6d 28 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 69 2e 74 72 69 67 67 65 72 28 62 29 3b 66 3d 65 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 Data Ascii: stomParams\|\|new d(),b.customParams.append(c,a[c])})});f=o.trigger(p(b));f!=null&&m(f,function(a){a!=null&&m(n(a),function(c){b.customParams=b.customParams\|\|new d(),b.customParams.append(c,a[c])})});i.trigger(b);f=e.trigger(b);if(l(f,function(a){return a})
2024-05-24 06:26:53 UTC	16384	IN	Data Raw: 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 5d 2c 74 3d 73 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 6b 65 79 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 71 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 Data Ascii: pertyIsEnumerable","constructor"],t=s.length;function u(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&(typeof a!=="function"\|\|a===null))throw new TypeError("Object.keys called on non-object");var b=[];for(var c in a)q.call(a,c)&&b.push(c);if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49786	172.66.43.213	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	685	OUT	GET /pixel/fetch HTTP/1.1 Host: dotsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:52 UTC	708	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 787 Connection: close Cache-Control: public, max-age=86400 Expires: Sat, 25 May 2024 00:27:23 GMT Last-Modified: Fri, 24 May 2024 00:51:32 GMT Vary: * Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: * P3P: CP="CAO PSA OUR IND" CF-Cache-Status: HIT Age: 948 Accept-Ranges: bytes Server: cloudflare CF-RAY: 888b37781b9080cd-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:52 UTC	661	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 68 65 6c 70 65 72 3d 7b 45 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 53 74 6f 72 61 67 65 2e 47 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 22 49 4e 46 5f 49 42 4c 22 29 2c 74 3b 6e 26 26 28 74 3d 7b 68 6f 73 74 6e 61 6d 65 3a 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 76 61 6c 75 65 3a 6e 7c 7c 6e 75 6c 6c 7d 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 74 2c 22 2a 22 29 29 7d 2c 53 74 6f 72 61 67 65 3a 7b 47 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3b 72 65 74 Data Ascii: <!DOCTYPE html><meta charset=utf-8><script>var helper={Emit:function(){var n=this.Storage.GetLocalStorage("INF_IBL"),t;n&&(t={hostname:document.location.hostname,value:n\|\|null},window.top.postMessage(t,"*"))},Storage:{GetLocalStorage:function(n){var t;ret
2024-05-24 06:26:52 UTC	126	IN	Data Raw: 2c 75 3d 69 5b 74 5d 2e 73 75 62 73 74 72 28 69 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 2b 31 29 2c 72 3d 72 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 2c 72 3d 3d 6e 29 72 65 74 75 72 6e 20 75 6e 65 73 63 61 70 65 28 75 29 7d 7d 7d 3b 74 72 79 7b 68 65 6c 70 65 72 2e 45 6d 69 74 28 29 7d 63 61 74 63 68 7b 7d 3c 2f 73 63 72 69 70 74 3e Data Ascii: ,u=i[t].substr(i[t].indexOf("=")+1),r=r.replace(/^\s+\|\s+$/g,""),r==n)return unescape(u)}}};try{helper.Emit()}catch{}</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49782	99.86.4.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:52 UTC	525	OUT	GET /_js/ajs.js HTTP/1.1 Host: cdn2.decide.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:53 UTC	526	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 5806 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 20 May 2024 04:00:50 GMT ETag: W/"16ae-18f9428c3d3" Date: Thu, 23 May 2024 08:01:52 GMT Via: 1.1 google, 1.1 35c75b7f0ca8c787d67c8ebd22bc7fc2.cloudfront.net (CloudFront) Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: lKFBCEjyKZARxFhvvygavFX7FU5GTMcwTPF7d9pg_MMI71vUYsQlVg== Age: 80699
2024-05-24 06:26:53 UTC	5806	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 2f 2a 40 63 63 5f 6f 6e 20 72 65 74 75 72 6e 20 40 5f 6a 73 63 72 69 70 74 5f 76 65 72 73 69 6f 6e 3b 40 2a 2f 0a 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 69 66 28 22 68 74 6d 6c 5f 70 69 78 65 6c 22 3d 3d 3d 6e 2e 75 73 65 72 5f 73 79 6e 63 5f 74 61 67 5f 74 79 70 65 29 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 2e 73 72 63 3d 6e 2e 75 73 65 72 5f 73 79 6e 63 5f 74 61 67 3b 65 6c 73 65 20 69 66 28 22 73 63 72 69 70 74 5f 74 61 67 22 3d 3d 3d 6e 2e 75 73 65 72 5f 73 79 6e 63 5f 74 61 67 5f 74 79 70 65 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 2e Data Ascii: !function(t,e,n){function i(){/@cc_on return @_jscript_version;@/return!1}function r(t,e,n){if("html_pixel"===n.user_sync_tag_type)new Image(1,1).src=n.user_sync_tag;else if("script_tag"===n.user_sync_tag_type){var i=document.createElement("script");i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49787	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 06:26:53 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=207737 Date: Fri, 24 May 2024 06:26:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-24 06:26:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49790	104.19.130.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:53 UTC	578	OUT	GET /p/j/pjnewsletter.com.1604063.es6.js HTTP/1.1 Host: jsc.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:53 UTC	1065	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:53 GMT Content-Type: text/javascript Content-Length: 336011 Connection: close Cf-Bgj: minify Cf-Polished: origSize=336012 ETag: "3960247ef411665fa4e051e863e81200" Last-Modified: Thu, 23 May 2024 09:58:07 GMT x-amz-id-2: YHNBS9B4Ki8ouVZZMOPHrTvAe1UpcHYIwphWaYFt+xbaLysUxOoDeo3ghuwBY1GBUvDvEgS+bBw= x-amz-request-id: 41EZ9SZMKJJ8MRPP x-amz-server-side-encryption: AES256 x-amz-version-id: b_LJ3LG_DA7L6dCLGW6aY5ED16HU9kk4 CF-Cache-Status: HIT Age: 1536 Expires: Fri, 24 May 2024 09:26:53 GMT Cache-Control: public, max-age=10800 Accept-Ranges: bytes Set-Cookie: __cf_bm=q8xX6N0yBwfkroa8NhLS0625ouH081Ye2GZNAGgDh_s-1716532013-1.0.1.1-RLDGUUlFCpjjZhurg_WhKiWDkPoqAwHQHmOwLa6obEh7W0QkAGAUyzHveJomXqUKcGooODAKlmelmIn58nzZTg; path=/; expires=Fri, 24-May-24 06:56:53 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b377df88d7d11-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:53 UTC	304	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 63 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 45 65 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 6c 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 68 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 64 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 78 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 3d 28 67 2c 74 29 3d 3e 28 29 3d 3e 28 67 26 26 28 74 3d 67 28 67 3d 30 29 29 2c 74 29 3b 76 61 72 20 61 65 3d 28 67 2c 74 29 3d 3e 28 29 3d 3e 28 74 7c 7c 67 28 28 74 3d Data Ascii: (()=>{var cn=Object.create;var Ee=Object.defineProperty;var ln=Object.getOwnPropertyDescriptor;var hn=Object.getOwnPropertyNames;var dn=Object.getPrototypeOf,xn=Object.prototype.hasOwnProperty;var $=(g,t)=>()=>(g&&(t=g(g=0)),t);var ae=(g,t)=>()=>(t\|\|g((t=
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 65 20 69 6e 20 74 29 45 65 28 67 2c 65 2c 7b 67 65 74 3a 74 5b 65 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 75 6e 3d 28 67 2c 74 2c 65 2c 69 29 3d 3e 7b 69 66 28 74 26 26 74 79 70 65 6f 66 20 74 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 66 6f 72 28 6c 65 74 20 73 20 6f 66 20 68 6e 28 74 29 29 21 78 6e 2e 63 61 6c 6c 28 67 2c 73 29 26 26 73 21 3d 3d 65 26 26 45 65 28 67 2c 73 2c 7b 67 65 74 3a 28 29 3d 3e 74 5b 73 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 69 3d 6c 6e 28 74 2c 73 29 29 7c 7c 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 3b 72 65 74 75 72 6e 20 67 7d 3b 76 61 72 20 6e 65 3d 28 67 2c 74 2c 65 29 3d 3e 28 65 3d 67 21 3d 6e 75 6c 6c 3f 63 6e 28 64 6e 28 67 Data Ascii: r(var e in t)Ee(g,e,{get:t[e],enumerable:!0})},un=(g,t,e,i)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let s of hn(t))!xn.call(g,s)&&s!==e&&Ee(g,s,{get:()=>t[s],enumerable:!(i=ln(t,s))\|\|i.enumerable});return g};var ne=(g,t,e)=>(e=g!=null?cn(dn(g
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 67 69 64 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 41 64 63 68 6f 69 63 65 73 2e 73 76 67 22 0a 09 09 09 09 09 20 20 20 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 61 6c 74 20 2f 3e 0a 09 09 09 09 3c 2f 61 3e 0a 09 09 09 3c 2f 6f 62 6a 65 63 74 3e 0a 09 09 3c 2f 61 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 74 79 6c 65 3e 0a 09 2e 6d 67 68 65 61 64 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e Data Ascii: !important; position: static;" src="https://cdn.mgid.com/images/logos/Adchoices.svg" width="20" height="20" alt /></a></object></a></div></div><style>.mghead { font-weight: 700; font-size: 14px; text-tran
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 35 65 29 20 28 28 6f 6e 7c 5b 69 21 31 5d 6e 20 74 68 65 29 20 29 3f 28 68 5b 65 33 5d 72 65 7c 6d 65 7c 70 6c 65 61 73 65 7c 61 64 73 7c 74 6f 7c 65 6e 20 63 75 61 6c 71 75 5b 69 21 31 5d 65 72 20 61 6e 75 6e 63 5b 69 21 31 5d 6f 7c 71 75 5c 75 31 45 41 33 6e 67 20 63 5c 78 45 31 6f 7c 6e 61 20 5b 69 21 31 5d 6d 65 67 65 6e 7c 6e 6a 65 20 6e 67 61 20 72 65 6b 6c 61 6d 61 74 7c 6e 6f 20 61 6e 5c 78 46 41 6e 63 5b 69 21 31 5d 6f 7c 72 65 6b 6c 61 6d 65 6e 7c 65 6d 20 61 6c 67 75 6d 61 20 70 72 6f 70 61 67 61 6e 64 61 7c 5b 69 21 31 5d 6b 6c 61 6e 20 61 74 61 6e 7c 62 65 6c 6f 77 20 62 61 6e 6e 65 72 29 22 2c 22 70 72 65 73 5b 69 31 21 5d 6f 6e 61 20 5c 75 30 34 34 31 75 61 6c 71 75 5b 69 31 21 5d 65 72 20 5b 69 31 21 5d 6d 61 67 65 6e 22 2c 22 74 6f 63 61 Data Ascii: 5e) ((on\|[i!1]n the) )?(h[e3]re\|me\|please\|ads\|to\|en cualqu[i!1]er anunc[i!1]o\|qu\u1EA3ng c\xE1o\|na [i!1]megen\|nje nga reklamat\|no an\xFAnc[i!1]o\|reklamen\|em alguma propaganda\|[i!1]klan atan\|below banner)","pres[i1!]ona \u0441ualqu[i1!]er [i1!]magen","toca
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 52 53 5f 4e 45 57 53 5d 22 3a 22 50 61 72 74 6e 65 72 20 4e 65 77 73 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 50 4f 50 55 4c 41 52 5d 22 3a 22 50 6f 70 75 6c 61 72 20 69 6e 20 6e 65 74 77 6f 72 6b 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 50 52 4f 4d 4f 54 45 44 5f 43 4f 4e 54 45 4e 54 5d 22 3a 22 50 72 6f 6d 6f 74 65 64 20 43 6f 6e 74 65 6e 74 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 53 4d 49 5d 22 3a 22 49 6e 20 6f 74 68 65 72 20 6d 65 64 69 61 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 53 50 4f 4e 53 4f 52 45 44 5f 43 4f 4e 54 45 4e 54 5d 22 3a 22 53 70 6f 6e 73 6f 72 65 64 20 43 6f 6e 74 65 6e 74 22 2c 22 5b 57 49 44 47 45 54 5f 54 49 54 4c 45 5f 53 55 47 47 45 53 54 45 44 5f 4e 45 57 53 5d 22 3a 22 53 75 67 67 65 Data Ascii: RS_NEWS]":"Partner News","[WIDGET_TITLE_POPULAR]":"Popular in network","[WIDGET_TITLE_PROMOTED_CONTENT]":"Promoted Content","[WIDGET_TITLE_SMI]":"In other media","[WIDGET_TITLE_SPONSORED_CONTENT]":"Sponsored Content","[WIDGET_TITLE_SUGGESTED_NEWS]":"Sugge
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 69 6c 65 22 29 3d 3d 3d 22 31 22 7c 7c 21 31 7d 6c 6f 67 28 74 2c 65 3d 22 6c 6f 67 22 2c 69 3d 6e 75 6c 6c 29 7b 69 66 28 74 68 69 73 2e 69 73 44 65 62 75 67 45 6e 61 62 6c 65 64 29 7b 6c 65 74 20 72 3d 5b 22 6c 6f 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 2e 69 6e 64 65 78 4f 66 28 65 29 21 3d 3d 2d 31 3f 65 3a 22 6c 6f 67 22 3b 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 72 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 72 3d 22 6c 6f 67 22 29 2c 69 26 26 69 2e 73 74 61 63 6b 26 26 69 2e 6d 65 73 73 61 67 65 3f 63 6f 6e 73 6f 6c 65 5b 72 5d 28 60 57 49 44 47 45 54 5f 31 36 30 34 30 36 33 5f 24 7b 74 68 69 73 2e 61 70 70 2e 75 6e 69 71 49 64 7d 60 2c 74 2c 69 2e 73 74 61 63 6b 29 3a 63 6f 6e 73 6f 6c 65 5b 72 5d 28 60 Data Ascii: ile")==="1"\|\|!1}log(t,e="log",i=null){if(this.isDebugEnabled){let r=["log","info","warn","error"].indexOf(e)!==-1?e:"log";typeof console[r]!="function"&&(r="log"),i&&i.stack&&i.message?console[r](`WIDGET_1604063_${this.app.uniqId}`,t,i.stack):console[r](`
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 68 74 3d 22 32 37 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 32 20 32 37 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 25 33 45 25 33 43 2f 73 76 67 25 33 45 60 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 43 6f 6f 70 65 72 61 74 69 6f 6e 54 79 70 65 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 5b 22 77 61 67 65 73 22 5d 27 29 2c 74 68 69 73 2e 72 6f 6f 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 2c 74 68 69 73 2e 64 65 62 75 67 42 6c 6f 63 6b 3d 6e 65 77 20 72 65 28 74 68 69 73 29 2c 74 68 69 73 2e 6c 69 66 65 43 79 63 6c 65 4c 6f 61 64 52 65 73 6f 6c 76 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 77 61 69 74 43 6f 6e 73 65 6e 74 52 65 73 6f 6c Data Ascii: ht="277" viewBox="0 0 492 277" %3E%3C/svg%3E`,this.enabledCooperationTypes=JSON.parse('["wages"]'),this.root=this.context.document.getElementById(t),this.debugBlock=new re(this),this.lifeCycleLoadResolver=null,this.waitConsentResol
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 3a 31 2c 22 66 6f 6e 74 22 3a 22 76 65 72 64 61 6e 61 22 2c 22 6b 69 6e 64 22 3a 22 77 61 67 65 73 22 2c 22 72 6f 77 73 22 3a 22 33 22 2c 22 74 79 70 65 22 3a 22 73 69 64 65 62 61 72 2d 77 69 64 67 65 74 22 2c 22 6d 65 64 69 61 22 3a 7b 22 6f 70 61 63 69 74 79 22 3a 38 30 2c 22 64 75 72 61 74 69 6f 6e 22 3a 31 2c 22 6d 69 6e 57 69 64 74 68 22 3a 32 35 30 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 6d 69 6e 48 65 69 67 68 74 22 3a 31 35 30 2c 22 76 69 64 65 6f 4f 76 65 72 6c 61 79 22 3a 31 7d 2c 22 6d 67 62 6f 78 22 3a 7b 22 73 74 79 6c 65 73 22 3a 7b 22 6d 61 78 57 69 64 74 68 22 3a 31 32 32 30 7d 7d 2c 22 74 68 65 6d 65 22 3a 22 23 32 62 33 39 37 62 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 62 75 74 74 6f 6e 22 3a 31 2c 22 6d 63 64 65 Data Ascii: :1,"font":"verdana","kind":"wages","rows":"3","type":"sidebar-widget","media":{"opacity":80,"duration":1,"minWidth":250,"position":"bottom","minHeight":150,"videoOverlay":1},"mgbox":{"styles":{"maxWidth":1220}},"theme":"#2b397b","width":0,"button":1,"mcde
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 65 72 75 6e 41 64 73 22 3a 22 30 22 2c 22 69 73 54 6f 61 73 74 65 72 22 3a 31 2c 22 63 6f 6c 73 4d 6f 62 69 6c 65 22 3a 31 2c 22 69 73 44 72 61 67 44 6f 77 6e 22 3a 31 2c 22 63 6f 6c 6f 72 42 75 74 74 6f 6e 22 3a 22 22 2c 22 69 6d 61 67 65 46 6f 72 6d 61 74 22 3a 34 36 2c 22 69 6d 61 67 65 53 68 61 64 6f 77 22 3a 22 22 2c 22 73 63 72 6f 6c 6c 45 66 66 65 63 74 22 3a 22 30 22 2c 22 74 65 78 74 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 61 75 74 6f 70 6c 61 63 65 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 66 6f 72 6d 61 74 43 68 61 6e 67 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 47 72 61 64 69 65 6e 74 22 3a 22 22 2c 22 69 73 49 6e 74 65 72 73 74 69 74 69 61 6c 22 3a 30 2c 22 70 6f 70 75 70 46 72 65 71 75 65 6e 63 79 22 3a 31 35 2c 22 77 Data Ascii: erunAds":"0","isToaster":1,"colsMobile":1,"isDragDown":1,"colorButton":"","imageFormat":46,"imageShadow":"","scrollEffect":"0","textPosition":"bottom","autoplacement":"off","formatChanged":true,"customGradient":"","isInterstitial":0,"popupFrequency":15,"w
2024-05-24 06:26:53 UTC	1369	IN	Data Raw: 22 77 69 64 67 65 74 5f 63 6f 6e 73 65 6e 74 5f 77 61 69 74 5f 74 69 6d 65 5f 6d 73 22 3a 22 33 30 22 2c 22 77 69 64 67 65 74 5f 63 6f 6e 73 65 6e 74 5f 6f 75 74 64 61 74 65 64 5f 74 69 6d 65 22 3a 22 31 36 38 22 7d 27 29 2c 74 68 69 73 2e 63 75 73 74 6f 6d 42 61 6e 6e 65 72 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 31 36 30 34 30 36 33 22 3a 5b 5d 7d 27 29 2c 74 68 69 73 2e 69 6e 69 74 53 65 72 76 69 63 65 72 52 65 71 75 65 73 74 3d 21 30 2c 74 68 69 73 2e 65 78 63 65 70 74 41 64 73 4c 69 73 74 3d 5b 5d 2c 74 68 69 73 2e 63 6c 69 63 6b 48 61 6e 64 6c 65 72 73 3d 5b 5d 2c 74 68 69 73 2e 73 73 70 44 6f 75 62 6c 65 43 6c 69 63 6b 48 61 73 68 3d 5b 5d 2c 74 68 69 73 2e 72 65 71 75 65 73 74 50 61 72 61 6d 73 3d 7b 7d 2c 74 68 69 73 2e 75 73 65 72 41 67 Data Ascii: "widget_consent_wait_time_ms":"30","widget_consent_outdated_time":"168"}'),this.customBanners=JSON.parse('{"1604063":[]}'),this.initServicerRequest=!0,this.exceptAdsList=[],this.clickHandlers=[],this.sspDoubleClickHash=[],this.requestParams={},this.userAg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49792	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:53 UTC	798	OUT	GET /track?pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&cb=1716532010397&r=pjnewsletter.com&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d65=Control&d66=8&d74=&e=playerLoaded&str=autostart HTTP/1.1 Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:26:54 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49791	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	622	OUT	POST /f/gstats HTTP/1.1 Host: souhaija.site Connection: keep-alive Content-Length: 565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	565	OUT	Data Raw: 76 68 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 25 32 46 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 25 32 46 25 33 46 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 65 6d 61 69 6c 25 32 36 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 61 63 74 65 6e 67 61 67 65 26 6a 75 68 3d 33 63 63 62 30 66 30 32 31 62 33 35 62 37 35 64 62 37 36 64 61 34 64 63 35 33 62 33 32 33 34 61 26 63 73 3d 33 31 61 64 34 65 36 66 35 64 32 65 62 37 38 64 34 66 30 31 36 37 33 65 66 31 61 36 37 33 63 63 26 65 78 3d 31 37 31 36 35 33 32 36 31 32 38 32 30 26 74 30 3d 31 37 31 36 35 33 32 30 31 33 26 70 69 3d 25 37 42 25 32 32 62 72 61 6e 64 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 62 72 Data Ascii: vhref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&juh=3ccb0f021b35b75db76da4dc53b3234a&cs=31ad4e6f5d2eb78d4f01673ef1a673cc&ex=1716532612820&t0=1716532013&pi=%7B%22brands%22%3A%5B%7B%22br
2024-05-24 06:26:54 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Cache-Control: no-store ETag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8" Cache-Control: no-cache
2024-05-24 06:26:54 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49794	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	729	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.4.4 HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_6L5Q55KN3H=GS1.1.1716532011.1.0.1716532011.0.0.0; _ga=GA1.1.1010184661.1716532012
2024-05-24 06:26:54 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 04 Jan 2024 16:28:42 GMT vary: Accept-Encoding etag: W/"6596dcba-4904" expires: Wed, 19 Jun 2024 15:59:31 GMT Cache-Control: max-age=2592000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff CF-Cache-Status: HIT Age: 311227 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t7Jnyn1ZCaWxxi4WzerIWMtH8weZo3gD5p5oJjFYEWvlOxgS2FZ2lC9IFYpDkwo27kdc2WQi7ozibErBkjZdXe4lLFIebC0dECVE7roeR6VLDM3Cp3DM7UpSq10RyB7VNi0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37800fa90cc9-EWR
2024-05-24 06:26:54 UTC	563	IN	Data Raw: 34 39 30 34 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 Data Ascii: 4904/! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 20 6e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 63 3d 64 2c 65 3d 4e 28 64 29 2c 62 3d 61 2e 63 61 6c 6c 62 61 63 6b 28 65 2c 61 29 3b 69 66 28 65 26 26 62 29 7b 66 6f 72 28 66 20 69 6e 20 63 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 61 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 62 2c 27 22 27 29 2c 75 3d 61 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 65 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e Data Ascii: =typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 64 3f 64 2b 22 78 22 2b 64 3a 64 7d 28 75 2e 73 69 7a 65 7c 7c 6d 2e 73 69 7a 65 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 75 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 6d 2e 63 6c 61 73 73 4e 61 6d 65 2c 6f 6e 65 72 72 6f 72 3a 75 2e 6f 6e 65 72 72 6f 72 7c 7c 6d 2e 6f 6e 65 72 72 6f 72 7d 29 7d 2c 72 65 70 6c 61 63 65 3a 6e 2c 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 68 2e 6c 61 73 74 49 6e 64 65 78 3d 30 3b 64 3d 68 2e 74 65 73 74 28 64 29 3b 72 65 74 75 72 6e 20 68 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 64 7d 7d 2c 75 3d 7b 22 26 22 3a 22 26 61 6d 70 3b 22 2c 22 3c 22 3a 22 26 6c 74 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 7d 2c Data Ascii: n"number"==typeof d?d+"x"+d:d}(u.size\|\|m.size),className:u.className\|\|m.className,onerror:u.onerror\|\|m.onerror})},replace:n,test:function(d){h.lastIndex=0;d=h.test(d);return h.lastIndex=0,d}},u={"&":"&","<":"<",">":">","'":"'",'"':"""},
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 Data Ascii: dc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u2
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 Data Ascii: dd1d\u200d\ud83d\udc68\ud83c[\udffb\udffc\udffe\udfff]\|\ud83d\udc68\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc68\ud83c\udfff\u200d
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 Data Ascii: udc69\ud83c[\udffb\udffc\udffe\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 Data Ascii: [\udffb-\udfff]\|\ud83e\uddd1\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83e\uddd1\ud83c[\udffb-\udffe]\|\ud83e\uddd1\ud83c\udfff\u200d\ud83e\udd1d\u200d\ud83e\uddd1\ud83c[\udffb-\udfff]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\|\ud83d\u
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 66 65 30 66 29 5c 75 32 30 30 64 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 66 65 30 66 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 33 5c 75 64 66 63 34 5c 75 64 66 63 61 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 63 36 65 5c 75 64 63 37 30 5c 75 64 63 37 31 5c 75 64 63 37 33 5c 75 64 63 37 37 5c 75 64 63 38 31 5c 75 64 63 38 32 5c 75 64 63 38 36 5c 75 64 63 38 37 5c 75 64 65 34 35 2d 5c 75 64 65 34 37 5c 75 64 65 34 62 5c 75 64 65 34 64 5c 75 64 65 34 65 5c 75 64 65 61 33 5c 75 64 65 62 34 2d 5c 75 64 65 62 36 5d 7c 5c 75 64 38 33 65 5b 5c 75 64 64 32 36 5c 75 64 64 33 35 5c 75 64 64 33 37 2d 5c 75 64 64 33 39 5c 75 64 64 33 64 5c 75 64 64 Data Ascii: ]\|\u26f9)((?:\ud83c[\udffb-\udfff]\|\ufe0f)\u200d[\u2640\u2642]\ufe0f)\|(?:\ud83c[\udfc3\udfc4\udfca]\|\ud83d[\udc6e\udc70\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea3\udeb4-\udeb6]\|\ud83e[\udd26\udd35\udd37-\udd39\udd3d\udd
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 31 35 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 62 61 7c 5c 75 64 38 33 64 5c 75 64 63 33 62 5c 75 32 30 30 64 5c 75 32 37 34 34 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 34 31 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 64 65 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 65 32 65 5c 75 32 30 30 64 5c Data Ascii: 0f\|\ud83d\udc15\u200d\ud83e\uddba\|\ud83d\udc3b\u200d\u2744\ufe0f\|\ud83d\udc41\u200d\ud83d\udde8\|\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83d\udc6f\u200d\u2640\ufe0f\|\ud83d\udc6f\u200d\u2642\ufe0f\|\ud83d\ude2e\u200d\
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 36 62 31 5c 75 32 36 62 64 5c 75 32 36 62 65 5c 75 32 36 63 34 5c 75 32 36 63 35 5c 75 32 36 63 38 5c 75 32 36 63 66 5c 75 32 36 64 31 5c 75 32 36 64 33 5c 75 32 36 64 34 5c 75 32 36 65 39 5c 75 32 36 65 61 5c 75 32 36 66 30 2d 5c 75 32 36 66 35 5c 75 32 36 66 38 5c 75 32 36 66 61 5c 75 32 36 66 64 5c 75 32 37 30 32 5c 75 32 37 30 38 5c 75 32 37 30 39 5c 75 32 37 30 66 5c 75 32 37 31 32 5c 75 32 37 31 34 5c 75 32 37 31 36 5c 75 32 37 31 64 5c 75 32 37 32 31 5c 75 32 37 33 33 5c 75 32 37 33 34 5c 75 32 37 34 34 5c 75 32 37 34 37 5c 75 32 37 35 37 5c 75 32 37 36 33 5c 75 32 37 36 34 5c 75 32 37 61 31 5c 75 32 39 33 34 5c 75 32 39 33 35 5c 75 32 62 30 35 2d 5c 75 32 62 30 37 5c 75 32 62 31 62 5c 75 32 62 31 63 5c 75 32 62 35 30 5c 75 32 62 35 35 5c 75 33 30 Data Ascii: 6b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\u2747\u2757\u2763\u2764\u27a1\u2934\u2935\u2b05-\u2b07\u2b1b\u2b1c\u2b50\u2b55\u30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49796	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	601	OUT	GET /images/18529/18529-375x250.jpg HTTP/1.1 Host: ruamupr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	754	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: image/jpeg Content-Length: 32319 Connection: close Last-Modified: Wed, 15 May 2024 14:00:19 GMT ETag: "6644bff3-7e3f" Expires: Fri, 24 May 2024 14:01:26 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 59127 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=emEIM5K4sPc6A6LLxFBAhyYfL7hD2DRN9sinUZK4e9TVh2KVh9WVKDYdicns5k%2BdQw1axHA8YbXnP8dW04ckN9l%2FHwPBXxc3Q6J7xT0B6oGOTvFTV7yj0t%2FVwl0Y2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37801eef42cc-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:54 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 31 30 30 0a ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100CCw"
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ad 06 8f e0 a9 e6 10 ff 00 c2 1b a1 87 cf 4f ec 3b 6f fe 37 5b fa 6f 82 3c 1f 24 5b db c2 1a 18 e7 fe 80 36 bf fc 6e b8 eb 7f b4 47 20 71 21 dc 0e 73 5d 3e 83 ac ce aa 62 69 37 67 a6 4f 7a fc fb da d5 ef f9 9f b5 fb 2a 49 68 bf 23 6e db c0 3e 0a fb d2 f8 2b 43 7c fa e8 36 a3 ff 00 69 d1 71 e0 bf 05 c5 97 87 c1 5a 1a 80 3a 0d 0a d7 ff 00 8d d5 65 d4 ae cb 73 29 fc 0d 69 c7 78 d7 10 62 46 1c 2f 3c d2 f6 95 5f da 7f 7b 17 24 7b 15 ad 7c 39 e1 0d bb 5b c1 7a 16 3d b4 2b 5f fe 37 57 b4 ef 0d 78 3c ce 07 fc 21 5a 17 27 a1 d0 ed 7f f8 dd 51 96 79 a0 62 d1 Data Ascii: ?O;o7[o<$[6nG q!s]>bi7gOz*Ih#n>+C\|6iqZ:es)ixbF/<_{${\|9[z=+_7Wx<!Z'Qyb
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 95 60 8a 26 de 10 60 16 25 0e 02 f3 90 49 03 9e 33 cd 74 fa 07 8f b4 99 72 2d 74 f9 82 31 26 24 8a e8 4b b8 75 ce 19 b7 67 f4 aa f6 f0 91 9c b0 92 5a 8e ff 00 85 0d f0 34 ff 00 cd 1b f0 87 fe 12 b6 3f fc 6a 91 fe 03 7c 0e da 71 f0 6f c2 07 fe e5 4b 1f fe 35 5d 06 9d ac d8 6a 90 2c ea 93 40 64 19 58 ee 63 31 93 f4 cf 06 ae 61 50 7d f0 73 c7 0d 9a d5 4a 2f 63 17 49 23 8a 3f 01 3e 09 ab 16 ff 00 85 2f e1 03 c1 38 ff 00 84 52 c7 9f fc 83 5f 31 7e d2 ff 00 08 3e 19 ad 8e a1 10 f8 67 e1 8d b2 46 ea a8 be 17 b1 5d be 98 c4 35 f6 7c a3 62 64 7e b5 f3 bf ed 21 e1 c2 56 e8 4b 2e 54 e7 a0 ec 6b cd cd 23 25 87 bd cf 6b 22 94 56 26 cc fc 23 fd ad 3e 1c e8 9a 57 89 2f ad 34 ed 0a c5 7c b9 9c 28 1a 74 0a 00 f4 01 50 62 be 62 f1 36 89 61 05 f8 69 74 8b 15 ca ff 00 0d a4 Data Ascii: `&`%I3tr-t1&$KugZ4?j\|qoK5]j,@dXc1aP}sJ/cI#?>/8R_1~>gF]5\|bd~!VK.Tk#%k"V&#>W/4\|(tPbb6ait
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: e4 e9 be 60 d2 c5 bb e6 d9 df 06 b9 cd 7b f6 91 f0 df 84 f4 58 e3 bf be d3 c5 d2 61 3c a5 60 ce 40 18 1c 0a e0 60 fd a2 bc 73 e2 5d 7b 0f a0 34 16 f3 b0 16 f7 4b 1e c5 65 f5 24 f0 2b a2 9d 56 b7 38 67 42 2d 36 7d 15 e2 29 a0 f0 6e a3 2c 7a 3e 87 77 7b a7 16 56 49 e4 bd 54 40 0f 27 2c 4e 38 ac ab af 8a 52 6a be 23 13 f8 53 c1 b7 d7 28 14 c4 19 af 02 c2 65 07 91 1b 28 3b fb f3 d3 1c d7 1d f0 9b 50 f1 4e a1 75 79 1d f7 87 74 ed 68 a4 a4 9f ed 1d 44 ac 20 63 a9 c7 a7 b5 75 be 13 7f 1b b4 ee da ef c5 3f 0e 58 5c e9 d2 48 f6 16 fa 22 43 20 b7 19 ce 04 4d c9 7f 51 eb 5d 94 eb 68 79 75 68 2b 33 d6 fc 23 2f 8c ef fe cd ac dc 58 78 86 59 a6 2a 23 b1 bb ba 91 21 c0 e7 cc 55 51 b6 50 30 46 32 33 d8 75 ae f7 44 bb f1 c7 8b 9e 2b 8f 0d 78 06 0b 74 17 12 49 71 7d 3e af Data Ascii: `{Xa<`@`s]{4Ke$+V8gB-6})n,z>w{VIT@',N8Rj#S(e(;PNuythD cu?X\H"C MQ]hyuh+3#/XxY*#!UQP0F23uD+xtIq}>
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 11 93 ea 65 5c 5c dc 24 85 1a 46 fa e6 a9 dd 30 0d e6 30 c9 3c 92 4d 3f 51 bc c5 eb 60 f1 55 af 64 24 2b 01 c1 f5 ad e0 ad b8 b6 65 6b e2 64 04 20 c7 1e b5 4a 05 92 3c a3 e7 f1 35 6a e2 e1 15 4e 71 d3 a5 64 de 6a 24 48 10 31 f4 e0 50 d6 9a 83 96 ba 12 cb aa dd 33 95 51 85 07 00 d5 8b 7d 72 1b 2b 56 8a 64 f9 88 e1 a9 12 3b 71 17 25 7e ee 79 ef 58 d7 d7 a0 31 52 80 8e e4 56 32 b5 f4 2a 32 b1 6e c3 5e 06 f1 92 59 c8 52 70 09 a6 eb 5e 2b 93 4c 01 b4 c6 dd 2b 1d a3 27 8a e7 27 ba 56 9b 68 7e df 99 a9 37 5a 44 a9 7d 77 26 42 73 83 50 d2 6a c3 be b7 3a 68 b5 2b f9 2c 13 50 d5 d8 b1 27 95 5e 48 ab fa 37 89 22 b1 f3 65 b5 b0 91 cb 0c 70 9d 3d eb ce f5 3f 1b ba 6e 16 4c 4e d1 c7 a5 56 b6 f1 9f 88 6e 21 78 fe d6 62 c0 c7 cb c1 aa e4 8b 89 12 ac d3 d0 ee ad fc 7f 65 Data Ascii: e\\$F00<M?Q`Ud$+ekd J<5jNqdj$H1P3Q}r+Vd;q%~yX1RV2*2n^YRp^+L+''Vh~7ZD}w&BsPj:h+,P'^H7"ep=?nLNVn!xbe
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 6d 6e f0 bf 2c a7 af 5a bd a6 dc 47 1c db c4 84 e5 79 af 16 ac 35 3d e8 4e f1 b1 d4 fd a4 4c db 71 c9 e4 d5 db 2b 4f 3f 80 2b 9e 82 f4 24 a1 84 99 c0 e8 4d 74 1a 1e a5 1c 92 63 70 c8 03 bd 62 e2 c5 29 d8 6f 89 61 58 f4 59 81 18 21 78 af 9f be 2a f8 90 59 a3 5a c3 37 cc 47 20 d7 bd f8 c3 50 85 34 e9 62 33 01 b8 71 cd 7c b9 f1 c6 f4 c7 70 67 4e 9e dd eb b7 07 1b 48 f1 71 b5 2e 99 e7 7e 22 ba 7b 89 5d f7 e7 e7 e3 14 55 1b ab cd f1 7c ff 00 79 9b 3d 28 af 6f 91 24 7c ec a6 ee 7d d1 f0 e9 1c 6c 62 0e 36 f6 af 7e f0 12 5c 4f 67 14 25 38 c0 ed da bc 93 e0 d6 83 78 d2 44 26 b3 63 f2 f2 08 ed 5f 45 78 03 c3 b7 3f c3 66 46 31 8f 96 ad ab 1f 48 93 b1 1e a7 a2 48 60 1b 63 38 3d c2 d5 6d 1f 43 9e 0b 83 2e d2 46 3a e3 f4 af 46 8f c2 d7 8d 08 66 b3 6e 47 7a 64 5a 03 45 Data Ascii: mn,ZGy5=NLq+O?+$Mtcpb)oaXY!x*YZ7G P4b3q\|pgNHq.~"{]U\|y=(o$\|}lb6~\Og%8xD&c_Ex?fF1HH`c8=mC.F:FfnGzdZE
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 87 da 81 00 02 3d bc 28 eb f5 ae 92 79 1d a7 7b 5c bf 96 8e 55 d9 38 23 1f d3 eb 5b 24 ec 79 d3 49 4b 42 af 83 fc 33 a4 68 b3 0b cb 2d 5e d2 09 64 6c 99 fe d5 b5 e5 6f 42 bd 18 fd 6b b0 d3 be 26 f8 71 15 f4 5f 12 d8 18 e4 70 ca 35 31 6f 85 07 d6 b2 b4 9f 08 89 e0 5b 85 b6 b7 28 1b 78 49 62 cb 67 d4 57 5b a6 dc e9 37 1a 3b 68 de 20 d2 55 83 29 45 77 8f a0 3e f5 d0 a5 25 b3 39 aa d9 d8 f9 bf f6 bb 88 6a 1f 0b 75 1b d8 ee 12 7f 2a 36 1e 6a 72 ad e9 cd 7e 5a 78 ab 50 fd f5 d2 a7 fc f4 20 8f 4e 6b f5 47 f6 98 f0 bd cf 84 7c 23 af e9 16 37 3e 76 93 a8 5b b4 96 ea 3a 40 e0 12 54 7d 6b f2 3b c4 ba a8 8b 57 bb b7 70 72 93 3e 40 3d f7 1e 6b ca a9 0e 7a d7 3e 93 09 51 53 a2 92 3c 83 e3 e5 bc 57 1b 26 11 20 70 79 20 60 d7 9d 69 6d 10 98 02 d8 ca 81 5e 81 f1 a2 ec cf Data Ascii: =(y{\U8#[$yIKB3h-^dloBk&q_p51o[(xIbgW[7;h U)Ew>%9ju*6jr~ZxP NkG\|#7>v[:@T}k;Wpr>@=kz>QS<W& py `im^
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: aa 81 ce e6 4c 6e 1c fa 57 a5 59 78 b3 c1 f7 7e 1b 9b 4d b3 b8 b0 97 32 f9 31 6d 82 c4 02 a1 ad 3a 03 73 c0 c1 62 00 c8 c6 e2 33 99 0a ec f2 89 ad 6d a1 af f6 9d 28 4e ee 47 5d f0 ca 7d 6a 3b 09 2f e5 f0 5d c4 b1 dc b1 26 39 3c c0 fb 32 cb f3 6d e7 04 c6 eb c1 eb 19 15 ea 77 6f 07 89 6e 74 3f 0c 4d 61 76 44 d2 6e b8 97 ec b2 44 91 29 45 73 80 a7 07 e5 28 7a 9f 95 85 79 65 96 b7 e1 8f 87 fe 15 17 10 2d a2 47 03 c6 90 ac 96 f6 21 49 67 bb 38 cf 9e 30 0f fb d8 00 ae 70 36 16 eb 3e 0e de 6a d8 d3 fc 63 71 2d 92 25 fd b3 ce 03 c5 6a 1e de 2f b1 41 b6 30 16 52 cc 49 3b bb 65 83 11 f3 86 55 c2 ae 5e a3 17 74 6b 47 31 8c a7 cb 7d 4f a9 fc 0f 75 7d a2 b8 7d 3e c1 a1 96 d1 53 ec f0 db da cd b7 60 73 19 88 6f 61 92 cf f2 80 70 01 07 d4 67 d6 f4 cf 1f 69 b7 96 9a 9f Data Ascii: LnWYx~M21m:sb3m(NG]}j;/]&9<2mwont?MavDnD)Es(zye-G!Ig80p6>jcq-%j/A0RI;eU^tkG1}Ou}}>S`soapgi
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 46 27 9d 8d cf 28 60 69 f3 49 9a 3f 17 fe 35 78 4f e1 cd 8c b7 5e 25 d6 03 5c 21 21 2c e3 c1 66 3e 98 1d 3f 1a f9 b7 c7 bf b4 c7 c4 3f 1f a3 59 e9 97 af a5 e9 e4 95 4b 7b 66 2b 23 29 ec ec 3d 6b 9f d7 63 bf d7 75 09 35 3d 66 e1 ee 2e 25 62 ce f3 12 7a fd 6a b4 5a 3b c5 27 ef 94 00 07 61 5e e3 c8 a9 61 d2 e6 5a 9f 29 53 3e c4 e2 db 50 95 93 30 ee 7c 1d a9 f8 86 65 16 d0 49 2b ee 24 04 42 ec 7d 4f af 15 2d 86 85 a0 e8 90 c8 2e 34 54 be 90 82 aa a8 01 c9 23 03 f2 3c fe 15 e8 fe 12 f1 46 a1 f0 e2 ed 26 b9 d2 dc 5a 98 44 93 c1 24 7e 5b 48 8e 30 ad 92 32 39 20 8a e5 75 7b e4 b0 92 6d 71 d1 4c f7 0e ce 19 b2 a2 01 c9 fb a4 02 cc 46 78 c7 18 f7 af 3f 13 86 51 7e ea 3d 0c 32 75 23 79 3b 9c 3d af 85 2e b4 8b d2 da bc 71 92 41 2b 6c ad d0 7f b5 8e fe d5 d9 fc 37 f8 Data Ascii: F'(`iI?5xO^%\!!,f>??YK{f+#)=kcu5=f.%bzjZ;'a^aZ)S>P0\|eI+$B}O-.4T#<F&ZD$~[H029 u{mqLFx?Q~=2u#y;=.qA+l7
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: cc d6 61 5b 9f 68 a3 e8 8f 0f f8 ca 60 d6 3e 16 d1 b4 b9 f5 0d 57 57 43 1c 56 88 08 8d 55 7e f4 92 30 19 0b 8f bc 57 a7 d7 15 f5 8f 83 f4 c3 6d e1 cb 78 35 1f 1d c8 93 41 14 69 74 f1 b8 31 dc b1 03 24 2f 3b 39 20 6d 3f 99 af 83 3e 02 da de 69 ba ad cf c5 6d 5f cc 4f 10 6b d6 d1 c4 14 3f cb 61 6a 39 58 14 02 40 7e 41 72 3a 9c 7a 57 ae f8 bb f6 81 f1 17 80 7c 1a 9e 1d f0 ad cd 84 9e 29 d6 21 74 d2 9b 5b 98 a5 8d a1 0c 03 5d dd b8 23 64 11 92 0e 32 0b b6 d5 5c 93 5f 05 53 0f ec f4 47 da 57 8a 9d 35 2b 1f 68 78 55 b4 ed 3e 3d b6 f3 99 55 80 21 81 c8 e7 db b7 7a ec 34 c6 69 55 48 8c f1 c8 e2 be 6b fd 93 75 99 34 9f 86 f6 7a 6b 78 ab 56 f1 2f d8 25 68 6e fc 4d a9 5a 49 12 6a 97 1d 65 b8 87 78 f9 e2 66 e1 59 7e 52 17 8c e3 35 f4 7f 87 2f e1 bc b4 5b 8b 67 52 a4 Data Ascii: a[h`>WWCVU~0Wmx5Ait1$/;9 m?>im_Ok?aj9X@~Ar:zW\|)!t[]#d2\_SGW5+hxU>=U!z4iUHku4zkxV/%hnMZIjexfY~R5/[gR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49799	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	601	OUT	GET /images/18710/18710-375x250.jpg HTTP/1.1 Host: ruamupr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: image/jpeg Content-Length: 30132 Connection: close Last-Modified: Thu, 23 May 2024 16:00:48 GMT ETag: "664f6830-75b4" Expires: Fri, 24 May 2024 16:01:33 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51921 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YkeBrHeOr5whnUSeYIjv7AFOAPtpYCiXDGIZsXkbyua8ymYm%2FdDxSTDXf1aps9K5IRElrnzxD%2FlNJ5Vz5b1modr6cXUJgGkTi6QKfMQsk7s9Yg2wEuIozu1vLx2gDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37806b654234-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:54 UTC	617	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCw"}!1AQa"q2
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 11 03 11 00 3f 00 f8 91 c8 27 8a 91 4e 18 13 eb 51 54 b1 ab 15 cb 70 7b 1a f2 c0 98 3a 9e 86 96 a3 40 ca 79 93 23 e9 4e 2e 31 c1 a4 95 95 90 0f 07 e5 c7 bf a5 46 f1 bf de 28 71 9e b4 6e 73 c0 6c 7b d2 aa 10 77 1f cf 34 cb 8a b8 e0 37 70 3f 2a 44 47 47 24 0e 3b d2 c4 8c 5c 90 3f 5a 7b 24 bb be 51 d7 de a3 9e 29 d8 96 ac c6 32 87 90 32 9c 01 d4 d3 95 51 8e 15 3f 1a 52 84 0e 9c 9a 74 68 cb f7 c0 1f f0 2a 7c c8 43 63 85 81 cb 1a 96 35 53 9c 1a 4c 82 71 9a 48 d5 ba d6 4a a6 ec d2 31 4c 7c 4a bb b6 e4 7e 35 28 81 48 ce 3f 5a 8b 70 45 07 1c 9a 7a dd b8 c2 a0 3d 39 e2 b3 a9 cb 25 72 b9 13 1e 8c 8a 7a f0 38 db eb 55 ae 9c cb 37 ee c3 7e 55 64 47 bc e4 30 c9 e7 15 a1 a3 68 57 77 a4 ba 42 4a af 57 23 1f ce b1 8c 94 16 a6 b4 d3 72 b2 33 ad 74 fb 89 97 25 72 31 c5 6b Data Ascii: ?'NQTp{:@y#N.1F(qnsl{w47p?DGG$;\?Z{$Q)22Q?Rth\|Cc5SLqHJ1L\|J~5(H?ZpEz=9%rz8U7~UdG0hWwBJW#r3t%r1k
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: d4 03 da bc 97 f6 94 fd 90 7e 0e 7e d3 7a 56 97 a5 7c 4e d2 a6 96 d7 47 b8 f3 ed 63 b5 71 19 1c 0d d1 f1 9f 95 8a a8 c7 60 bc 57 a9 85 cd a1 ed 3f 79 1b 2e a7 d4 c7 8b aa ba 4a 15 17 cc fe 72 3c 41 67 f6 6b fb 7b b7 b3 90 33 86 30 b3 a9 f9 b1 c7 7e dc 8e 6b 9f 99 05 ee a7 3c 52 26 5a 48 18 28 ed 9e f5 fb 7d fb 5d ff 00 c1 1c be 1c fe d0 7e 24 f0 94 bf 0e ee 2c bc 2d 61 a2 a3 43 a9 ac 59 67 78 89 1b 4a 9f e3 c0 c8 c1 c7 4e a7 3c 7c ab fb 6f 7f c1 0e 3c 6f e1 ef 8e 1e 16 d0 bf 64 6f 0f de ea 7a 16 b1 64 57 51 d4 35 07 e2 d2 60 c0 13 23 0c 04 04 1c e7 f4 af ad c1 67 18 1a bc ab 9e d7 3c bc 46 67 4a bc ae 7e 6b f8 58 20 91 f4 7d 52 65 2b 1b 30 8c b1 c9 3d f8 a2 bd 6f f6 ba fd 89 fe 2e 7e c8 ff 00 19 13 e1 57 8e 6c 56 6d 42 e6 c0 5f 58 cf 63 1b 38 30 93 83 ca Data Ascii: ~~zV\|NGcq`W?y.Jr<Agk{30~k<R&ZH(}]~$,-aCYgxJN<\|o<odozdWQ5`#g<FgJ~kX }Re+0=o.~WlVmB_Xc80
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 71 b0 4f 22 be f3 f8 0b fb 42 fc 31 fd b6 3c 31 69 e3 af 00 eb f6 fa 0f 8e b4 f4 54 32 23 ed 0e 40 ff 00 57 2a 0e a3 8c 67 93 d7 b5 7d 0c 1d 3c 4d 28 ce 5a 7e 87 e2 7c 53 c2 55 70 75 25 56 8a bc 37 3e 82 b8 d4 2c 34 29 ac 74 6f 11 6a f6 b0 de 5e 9f 2a d4 48 c1 3e d3 20 19 3b 7b 16 3d 70 2a d4 84 1f dd 2a 67 b1 1d fe 95 c9 f8 4f c7 5a 3f c4 7b c4 f0 0f c5 4f 0d 2d 97 88 f4 d9 bc e1 65 78 9f f2 d1 3a 4d 09 c7 20 8e 72 3a 56 c4 fa b7 89 f4 ff 00 88 49 e1 2d 43 c1 73 7f 65 5c 58 99 ec 7c 47 6f 30 30 bc a3 ef 42 e8 00 64 6e 84 10 48 6c 93 c5 72 55 c3 4e c8 fc ee 74 e5 07 66 5b 9a 3c af 97 bf 00 1e 73 54 e6 8a 38 c9 0d 0e 47 41 5a 52 8c 11 98 ff 00 87 38 c7 43 db dc e6 a1 31 82 3e 71 9f 50 6b 8e 49 87 43 1a e3 4f 8b 20 8e 00 f4 03 a5 47 22 95 60 ea 71 f2 e4 02 Data Ascii: qO"B1<1iT2#@Wg}<M(Z~\|SUpu%V7>,4)toj^H> ;{=p**gOZ?{O-ex:M r:VI-Cse\X\|Go00BdnHlrUNtf[<sT8GAZR8C1>qPkICO G"`q
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 45 3b 77 1f ba 33 8c 53 e6 91 a7 21 9d 03 e0 67 04 62 b4 8a 4d 68 74 aa ed 5d 9c e3 fe e1 f6 cc 48 20 e7 27 a0 15 15 e0 4b bc aa f4 23 19 1f ce b6 2f 2d da 7b 94 79 22 1e 59 ea 48 ea 2b 3e fe 09 2d d7 72 1d d1 f9 9c 6d 5e 40 c5 54 53 be 82 55 d4 b7 39 b7 d2 2d ae d2 41 71 12 ba c9 f2 c9 1b 8e 18 57 84 78 aa 1f 88 7f b2 d7 c4 08 fe 2f fc 19 d4 26 b7 8d 27 dd 79 69 bb e5 91 73 9d a5 47 04 1e 79 f6 af a1 b5 6b 53 35 ab 3d 93 e0 9e dd cd 73 1e 24 d0 9f 53 d2 a4 b0 bb b5 f3 15 d7 1c f2 1b da bb b0 b8 c9 d0 d0 e3 c5 e1 61 5e 0d 4b 5b 9f 54 7e ca 1f b6 cf c1 9f db cf c1 56 3a 47 89 75 97 d1 3c 6f a6 a2 ad bd f4 2c 16 e6 09 31 ce 09 3f 32 fa a9 af a0 3c 27 f1 33 58 d0 35 c8 fe 14 7c 69 b0 48 6f ee 63 29 a6 eb 10 31 16 da a2 8e 85 58 63 64 98 ea 0e 30 79 1d 6b f0 Data Ascii: E;w3S!gbMht]H 'K#/-{y"YH+>-rm^@TSU9-AqWx/&'yisGykS5=s$Sa^K[T~V:Gu<o,1?2<'3X5\|iHoc)1Xcd0yk
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: f1 e6 f6 ee d2 d9 e5 b7 95 8a 5e 42 51 54 0c e1 81 c0 27 d3 ad 7c a3 e2 3f 0d 6a 51 cf 79 73 6e ce 5e 39 93 c8 dc 71 f3 6e c9 af af fc 7d a2 dd 6a cf 04 13 ae 09 38 93 d0 1c d7 92 f8 f3 e1 4d c1 d6 25 6b 26 01 5d d1 b0 3a 75 e6 bd 4c b6 b4 69 cf 54 71 e2 93 96 c7 8e 2d 8b 6a 5a 6c f6 da 6c cd e7 cd 23 7f a4 e7 ee c6 31 91 f9 e6 a7 f8 86 6d 74 cb 2d 3e 16 2c b7 1e 48 cb 2b 1d 84 05 ef fe f7 5a f4 08 7e 19 cd 6d a5 cf 15 84 44 5d 4f 33 20 e3 0b 8e f8 f4 aa f7 ff 00 0c 75 dd 5a ca 0b 19 b4 5f b5 41 bb 7d da 8f e3 20 61 57 27 90 17 be 2b e9 29 57 a4 e5 ef 23 c3 af 0a 8b 66 7c e5 2f 8e 6e 34 d8 67 b9 22 e9 a7 de c9 18 55 c4 51 83 c6 30 6b 96 b8 f8 8f ad 68 4d e7 47 e2 f7 b7 96 37 f3 26 64 75 f9 9b d0 01 5e c9 f1 0f e0 1f 89 6f 6d 6f 2d ad 74 e7 8e 20 40 7f 28 Data Ascii: ^BQT'\|?jQysn^9qn}j8M%k&]:uLiTq-jZll#1mt->,H+Z~mD]O3 uZ_A} aW'+)W#f\|/n4g"UQ0khMG7&du^omo-t @(
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 7c b7 34 8d b6 1d 3c b1 db c7 f3 ca 07 07 22 bc fb c7 fe 33 bd d2 d9 9a da 63 b5 79 f9 4d 6e 78 df 5c 16 36 6c b3 07 ce 38 65 5e a2 bc 6b c4 f7 1a ef 88 16 6f ec cb 29 9d 90 96 2c d9 fb b5 b5 1e 49 c7 de 3a 3d 94 6e ae 5f d4 7f 6b ef 16 f8 59 3f b3 34 30 15 e3 f9 84 a5 bb fb fb 7b 54 3a 57 fc 14 13 e3 b5 89 91 0f 8a ee 7c 97 18 36 e6 5c 82 3f 3a f1 cd 5b c3 de 2e 06 69 e6 d3 ae 1a 20 48 79 52 3c ac 7d f9 20 f1 5d 4f c0 8f d8 5b f6 b1 fd a9 f5 00 3e 0a fc 21 d5 f5 4b 76 7d 8f a9 bc 5e 4d 94 47 b9 69 df 0b f8 0c d4 d4 86 0e 4e f5 6d 6f 33 db a1 2c 5d 28 af 63 73 da 3e 1c 7e d7 96 7e 2a d4 22 6f 13 5d 98 6e cc a0 37 99 27 5a fa 03 c0 fe 3b 83 c6 a3 6e 85 a8 09 54 75 d9 28 ff 00 1a e3 be 0c ff 00 c1 bd 5f b4 0d dd cd b6 a5 f1 c7 e3 af 87 bc 33 01 7c cd 61 a6 Data Ascii: \|4<"3cyMnx\6l8e^ko),I:=n_kY?40{T:W\|6\?:[.i HyR<} ]O[>!Kv}^MGiNmo3,](cs>~~*"o]n7'Z;nTu(_3\|a
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 55 a5 d4 52 e6 72 b1 73 b0 61 c5 71 41 cf 9b 73 a6 7b 58 f3 5f 8d df 0d 74 af 16 da 48 b6 f1 1f 35 03 61 82 f7 af 9d ec ee b5 af 87 5e 24 fb 3d d4 8e 55 18 01 b8 76 f6 af af ef e2 82 ec 8b 5f 30 83 cf 43 5e 3d f1 ef e1 92 ea 11 fd b6 cd 33 2c 48 4b 32 f5 23 ad 7d 26 55 89 69 38 49 dd 1e 16 2a 9f 2e b1 3d fb f6 1c fd bc 3c 49 f0 77 53 b6 4b 5b f9 6e 74 a9 e4 02 f7 4f 69 32 14 1f bc cb 9e 87 1d 40 af bd 7c 2d ae 69 d1 d9 9f da 13 f6 66 98 5f 68 57 ab f6 8f 14 78 3e d9 f1 cb 00 5a 78 14 74 23 92 d1 f4 cf 23 8e 2b f0 df c1 1e 2e d4 7c 27 ad 24 13 ca e2 20 c0 2a 13 d0 e7 ad 7d 7d fb 20 fe d7 de 2d f8 1f e3 33 ac 78 72 f5 e6 b2 69 56 4d 46 c4 b7 ca e8 47 cc df 50 38 af 46 a4 5c 2a 5f a1 f1 b9 e6 45 43 1f 49 d5 a7 a4 8f bd 3f 6a cf d8 97 f6 7b ff 00 82 99 7c 3b Data Ascii: URrsaqAs{X_tH5a^$=Uv_0C^=3,HK2#}&Ui8I.=<IwSK[ntOi2@\|-if_hWx>Zxt##+.\|'$ }} -3xriVMFGP8F\*_ECI?j{\|;
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: f3 7f bd 9e 95 f5 4f c5 bf d9 1f 59 f0 3d ad e6 b9 35 a5 b3 5a 59 22 96 96 35 60 ee 09 ec 30 79 1d f1 da bc 92 2f 09 ad f4 6d 24 25 99 54 6c 45 1c 04 fa d7 c8 63 69 63 70 af df 89 fa 6e 57 57 01 99 53 52 a3 2b 9e 70 9e 12 b9 b4 99 6d 9e 58 07 98 3e 49 16 4e 41 15 d4 78 1f c4 da fe 87 a8 c5 05 cc b2 3c 4a 78 10 a9 67 50 0f de 07 a5 75 31 78 5b 47 82 25 fb 66 9c 80 29 c1 73 27 af d6 aa df e8 b7 7a 5c 91 de c4 a1 60 79 33 6f 34 52 f1 1e 3b f1 da b8 14 a5 5e 36 7b 9e 8d 5c 3d 4c 32 bf 43 dc bc 17 e3 33 26 9b 6f 2d ad ce e5 ea f3 37 c8 4e 31 c1 6e 70 6b d1 34 7b db 2d 5e ca 29 a4 91 a3 b8 dc 4c 43 70 fd e8 cf dd c9 eb 8a f9 6f c0 fe 39 bc d1 af 76 59 5d 31 72 e7 7c 12 2f ca 73 d7 19 f5 af 69 f8 7d e2 98 ef ed 64 d3 e7 32 da 48 47 cd 05 c9 0c 81 ba e5 7d 3f 0a Data Ascii: OY=5ZY"5`0y/m$%TlEcicpnWWSR+pmX>INAx<JxgPu1x[G%f)s'z\`y3o4R;^6{\=L2C3&o-7N1npk4{-^)LCpo9vY]1r\|/si}d2HG}?
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: d4 2d 8d d9 b7 92 40 e0 0c e1 7a 81 5b 16 0e 92 38 96 d9 81 d8 02 e0 f5 35 e7 5a 94 f3 d8 6a 2c d3 c9 fb d0 7e ff 00 f7 85 76 9e 1a d4 23 9a 08 1a 38 f7 e7 92 7d 7d eb cb 92 7b a1 cd 72 c8 ea b4 6d 52 0b 86 96 cd 5a 45 92 26 04 99 13 93 9f 41 e9 ef 57 ef 01 78 8a fc 84 91 d4 1e 7f 2a ca 8d db 79 b8 54 20 91 f7 aa ed b5 d3 a3 2b 11 c7 f1 7d 29 36 fa 9a 72 f3 44 e7 7c 48 b7 16 2e 2e 61 75 76 ce 36 fa 57 17 e2 28 e7 96 61 22 e4 b0 3b a4 5c f4 fc 3f 3a f4 fd 5b 4f b7 d6 25 c2 4b b0 1f e2 c5 70 be 2d d2 a5 91 a6 b3 b7 de f2 10 54 08 c0 cc 9f 5c ff 00 3f 7a e9 c3 c6 2e 5c b6 dc f3 71 52 8c 20 db 3c 8b e2 a7 c5 3b bd 0e 31 68 12 49 65 ea be 52 16 f6 e8 07 5a f7 6f d8 97 f6 af d3 7c 69 e1 f4 f0 97 89 2e a5 b7 d4 74 e1 b6 f6 da f1 4a c9 1f 64 95 41 ea be b9 a7 fc Data Ascii: -@z[85Zj,~v#8}}{rmRZE&AWx*yT +})6rD\|H..auv6W(a";\?:[O%Kp-T\?z.\qR <;1hIeRZo\|i.tJdA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49801	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	601	OUT	GET /images/18662/18662-375x250.jpg HTTP/1.1 Host: ruamupr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	756	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: image/jpeg Content-Length: 27221 Connection: close Last-Modified: Sat, 18 May 2024 16:00:27 GMT ETag: "6648d09b-6a55" Expires: Fri, 24 May 2024 16:01:17 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51937 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1OiBfIynXiUXyqSWFDZtsTLabbX7gpXgyCXkNpTdDBR5AW5o%2F1yyq%2FeGPkcaHs3yWejS4mbf9OysNEyZXxlTXqCNPwvZ9In%2BMN2zQdwvdKGay1o2fw1oDt0qc%2Bq0yA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b3780bbdb0dc7-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:54 UTC	613	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 31 30 30 0a ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100CCw"
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fc d6 b3 20 06 c9 ee 2b 66 c1 ca e5 76 f0 39 fe 55 89 60 bb 9f 69 e8 48 e3 d7 ad 6a 49 78 9a 75 9b 4c c8 59 87 01 45 7c ac 9b 3e a6 92 d0 a7 e2 1d 4e 28 a3 36 60 6e 66 f4 fe 1a ab a2 c4 d0 c6 6e 48 e1 ba 67 bd 53 dd 2e a3 76 64 94 fc cc 72 47 a5 6c 45 1a 18 d6 30 bc 70 00 14 d6 c3 69 dc d7 f0 c4 06 f2 71 39 4c 15 3c 67 a5 75 e4 b4 e9 f2 f2 00 c1 24 56 66 95 6c b6 d6 69 e5 46 07 1e 95 23 df 10 4c 7b f0 7d a8 6d 23 6a 71 6d dd 97 6e 2e ca c6 d0 6c c8 65 e0 82 6a bc ec 76 2c 64 75 18 a8 ad 64 79 1f 6e 0b 54 7a ad d6 c8 b1 1f 0f 9c 56 5c ca 27 41 Data Ascii: ? +fv9U`iHjIxuLYE\|>N(6`nfnHgS.vdrGlE0piq9L<gu$VfliF#L{}m#jqmn.lejv,dudynTzV\'A
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: d7 11 67 e2 1d 73 c4 37 f2 4e 6e 64 65 53 c6 3a 28 ad 55 cc 51 1b ab d9 f6 85 19 0c ff 00 c5 5b 3b 9c f1 96 b7 66 de 89 21 5b 62 93 39 24 1f 5c d6 a6 9f a8 44 27 58 f9 ce 30 09 ae 53 4d d7 4d da 34 90 46 7c ad df 2b 9a e8 fc 15 a7 1d 4f 52 5b 8b 86 3b 10 e4 8a 6d da 07 4a 69 9e 87 e0 1b 13 77 7c a5 f3 c8 18 c8 f7 af 7f f0 26 8a 62 92 0b 0b 72 a6 46 00 b1 c0 fe 75 e1 de 08 81 97 53 51 19 3b 54 f0 14 57 d2 7f 0a f4 6f b0 68 e7 53 b9 5f de cf 82 1d bf 84 7b 57 9b 5e 57 3d 1a 11 6d 9e bf e0 18 ad ed ad 61 b2 b2 90 90 ab f3 10 bd 4f e3 5e d3 e0 8b 0f f4 18 9f 27 20 f3 c5 78 ef c2 88 c3 5b 99 18 7c d9 38 af 67 d0 af 9e c2 c6 31 18 c8 db c8 27 ad 79 f2 6b 9c ed 74 55 8e c2 de e7 63 08 84 9f 2f 70 3b 56 de 98 cc b6 f8 46 ce 17 82 4f 7a e4 b4 2b 96 9d fe d0 e7 08 Data Ascii: gs7NndeS:(UQ[;f![b9$\D'X0SMM4F\|+OR[;mJiw\|&brFuSQ;TWohS_{W^W=maO^' x[\|8g1'yktUc/p;VFOz+
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: aa 78 02 0f b0 59 47 1e 33 bd 41 3c d7 a7 e8 f2 b3 98 e0 70 7e e7 42 6b 80 f0 3e 96 66 bd 06 68 b2 14 74 1d 17 da bd 33 44 b2 5b 78 f7 c8 40 63 8e 49 e9 5e 73 9c 9c b4 3a 25 1b 2d 4e 8f 4d f2 a2 89 22 48 c0 1b 79 3e f5 af a7 3a 8f 9f 03 a5 62 69 96 f7 d3 dc 0b 5b 3b 29 a5 98 a1 65 85 23 2c c4 0f 40 3f 9f 4f 5a ad ab fc 55 f8 59 e0 ab 79 ee bc 5d f1 23 49 b4 4b 60 7e d1 15 bd c7 da 24 b7 00 f3 e6 94 fd da 1c 67 1f 3e 3d c0 ae da 54 6b 4d 6c 72 ce bd 28 2b 36 77 36 d7 0a dd 13 b6 73 5a 16 cf 29 4e 01 1f 8d 7c cb e2 df f8 2a 2f ec 79 e0 9b ff 00 ec ed 37 c4 da 8e bb 26 df 95 b4 e9 23 d9 bb d0 95 0c 3d 7a 1a e4 2e 7f e0 b4 bf 04 ad ee 59 6c 3e 14 6b d3 46 0f c9 24 d7 8d cf e4 a3 bd 7a 34 f0 8e da 9c 7f 5a 8b 7a 1f 67 47 63 3b 4d bd c0 00 f4 35 a9 6d 6a 11 07 Data Ascii: xYG3A<p~Bk>fht3D[x@cI^s:%-NM"Hy>:bi[;)e#,@?OZUYy]#IK`~$g>=TkMlr(+6w6sZ)N\|*/y7&#=z.Yl>kF$z4ZzgGc;M5mj
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 9c 60 55 52 85 b5 33 ab 37 7b 10 99 ed b4 ed 35 ae ee 93 e7 23 28 33 d2 b9 4d 73 c4 da 96 a9 1b 44 64 65 4e a0 7b 52 78 97 c4 29 75 7e d6 66 4c aa f0 36 d4 09 6f 15 ca a8 4c 81 b7 04 e3 b5 76 28 35 13 8a 4d f3 15 6c bc d9 5c 02 32 01 cf 22 bb 0d 16 e2 47 64 52 72 06 2b 12 db 4c 8e 12 3c b6 c9 23 1c d6 fe 8b 6c e0 aa c6 84 90 46 71 52 f6 2e 09 4a 67 61 e1 db 46 b8 60 90 29 25 98 01 5e fb f0 4f c0 92 5d cb 0c 53 7f ab 66 cb 7b 8a f3 6f 83 9e 12 97 53 bd 8e 29 21 24 16 ca e6 be b5 f8 43 e0 78 ec 8a c3 15 b8 3c 67 05 47 07 15 e5 62 aa 38 a3 dd c2 53 3a bf 0c e8 7f d9 da 41 96 08 80 4c 05 c0 e9 8f 5a ef 7e 1c 68 13 49 02 cd 1d b3 1d d2 93 90 bc 1a ce bd d1 9f 4b d0 6d ec 62 8f 6b dc 3a 96 38 e9 93 5e b3 f0 d7 c3 52 da 68 aa b3 3a 45 1d ba 6e 9e e6 67 54 8e 25 Data Ascii: `UR37{5#(3MsDdeN{Rx)u~fL6oLv(5Ml\2"GdRr+L<#lFqR.JgaF`)%^O]Sf{oS)!$Cx<gGb8S:ALZ~hIKmbk:8^Rh:EngT%
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: a7 68 fe 3c b1 d4 e1 8e ee 1b 99 5b 1c 86 07 83 5d 76 8b e2 df 3d 16 58 ad f7 1c 60 fc df ad 7c 0d f0 63 f6 8b d4 d3 65 a5 f6 a2 63 9a 25 50 14 48 59 65 1d 37 7b 57 d4 bf 0e 7e 27 2e b5 a7 c5 34 32 2b e5 46 e2 bd 33 5c 32 ba 66 fc 89 c4 f6 c8 f5 bf 3a 3f 99 76 9c 77 35 62 0b a4 9a 30 3c c0 0f 7c 1a e1 ad 3c 54 c6 40 19 77 64 75 15 b3 61 e2 0b 69 1f 32 02 b4 af 74 4a a7 73 66 e7 6c 80 02 41 19 e9 51 3c ab 6f b4 c7 20 04 76 aa b3 ea 70 c8 99 8f a7 ae 6a 9d c6 af 10 ea e4 ff 00 4a 51 56 1b 83 b1 b6 f7 ea d0 b3 48 c0 30 5e 2b 0f 59 be 41 0e c8 65 1f 7b 9c 1a a7 7f e2 9b 64 8c 5b 47 92 cd c1 27 b0 ae 17 c5 de 3a 3a 5f 9b 12 4d bd 03 70 f9 ef e9 55 7b 92 e1 a1 bf ac 6b 63 4d 91 ae 1e 6f 97 d0 37 5a e1 7c 65 f1 be cf 4a 9b cb 59 90 26 71 f7 f9 af 3b f8 89 f1 e5 Data Ascii: h<[]v=X`\|cec%PHYe7{W~'.42+F3\2f:?vw5b0<\|<T@wduai2tJsflAQ<o vpjJQVH0^+YAe{d[G'::_MpU{kcMo7Z\|eJY&q;
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: c3 97 1a e7 8b 35 58 6f 35 dd 71 8c fe 20 d6 6e 64 f3 25 b8 1b 30 b1 06 c1 da bd 3e 5e 9d 45 72 7f 18 ff 00 69 4f 0d 7c 25 74 f0 bf c2 ff 00 0a da dc 6a 62 17 89 ef ae d4 08 63 52 47 dd 55 ce 48 38 eb 8e a7 8a d2 f8 b1 f1 bf c3 ff 00 0d fc 22 35 0d 64 a4 97 13 b1 8a d6 c8 2e 77 30 53 83 81 5f 2d ea be 21 bd f1 97 88 ee 35 fd 66 54 7b 9b 99 4b 01 10 da b1 a9 3c 22 8f 41 5e d5 3c c1 ca 09 43 44 7c d6 33 28 a5 41 de 73 e6 93 e8 59 f1 df c5 0f 89 5f 10 6e 24 97 c5 3e 2f bc 92 19 32 7e c5 04 c6 38 41 f4 0a 31 f4 af 18 f1 bf c1 df 19 ea 3e 6e a7 e1 0f 19 6a 56 b7 0f 26 5a 2b 9b b9 0a e3 d1 70 7e 53 5e e5 a5 68 36 93 4b 89 80 fc fa 51 e3 71 e1 8f 04 78 72 eb c4 7a f5 cb 25 95 ac 3e 64 8b 12 6e 79 1b 38 08 a3 b9 cf e5 d7 9c 56 53 6a 72 e6 62 85 5a d0 87 24 5e 87 Data Ascii: 5Xo5q nd%0>^EriO\|%tjbcRGUH8"5d.w0S_-!5fT{K<"A^<CD\|3(AsY_n$>/2~8A1>njV&Z+p~S^h6KQqxrz%>dny8VSjrbZ$^
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 6b 8c 55 fb 77 2d 04 a9 45 22 85 c7 c2 fd 3f 4b d3 87 93 13 6d 48 88 38 19 20 e2 be 5c fd a1 6d e3 d2 66 7b 67 2c 03 c9 90 58 73 5f 6e 9b db 3b 8b 46 48 1d 4e e4 eb 9a f8 af f6 d0 3f 62 d7 ad e3 8c 0c bb 9c 9c fb d6 90 6d c5 9c 98 b8 f2 41 58 e2 fe 0c 6b 8d a6 78 d2 17 5c 10 cf 81 fc ab f4 63 e0 9f 88 63 d6 7c 27 02 3b a9 f2 a1 50 40 af cc 8f 87 77 be 47 89 a0 9b 23 e5 6f ef 57 df ff 00 b2 ff 00 89 ac 27 d1 c5 b2 49 f3 49 18 e0 9a f0 33 48 59 a6 8d f0 cf dc 3d 96 f3 6b 20 61 83 9e f4 54 17 0c 59 46 4f e5 45 78 e9 b3 be 2a e8 fd 1f b2 fd 97 7e 03 e9 c8 b1 59 fc 39 b2 4d 83 03 73 3b 8c 7d 09 fe b5 a3 a7 fc 14 f8 5d a3 b6 fb 1f 04 d8 a1 cf fc f2 cf f5 ae c7 ce b6 79 09 dc 73 8e 71 51 4c 61 1d 18 8e 7f 88 d7 df 7b 2a 67 81 ed b1 0f a9 8a 9e 0e f0 b5 b9 06 d7 Data Ascii: kUw-E"?KmH8 \mf{g,Xs_n;FHN?bmAXkx\cc\|';P@wG#oW'II3HY=k aTYFOEx~Y9Ms;}]ysqQLa{g
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: fb cf d9 f3 c3 d3 e9 c9 a6 c9 a7 41 f6 75 4c 2c 61 b6 7c be 9f 29 fc 87 3d 6b 0f aa 50 52 d2 25 4b 3c c6 c1 59 4b 53 f2 17 c4 9f b0 e7 c6 0f 12 de 4f 63 3e 85 a8 43 0e 59 5a 48 1a 2c a3 11 f5 3c d7 01 75 fb 10 7e d0 9e 00 8e eb c3 de 1c d4 bc 45 68 2f 61 08 97 5f 6c 11 ee c6 46 42 7f 11 e6 bf 6d e6 f8 53 a1 78 4a 2b 68 2f 91 2d a1 b8 94 43 6c 06 d0 ac e7 a2 8c 71 fe 7d ab 88 f8 9b f0 bb c3 da 9f 8a 34 db 78 2d 63 6f 23 70 9d 9d 01 31 e7 04 1f c4 77 19 15 aa 72 a6 b4 3c 5a f5 65 5e ab 75 35 6c fc b2 f0 4f ec f9 fb 76 f8 4b 49 b5 b4 b6 f8 85 e2 ef b5 ac 02 23 71 06 a8 f2 43 3a 03 f2 a3 a7 2a a4 0c 7c e3 8a d4 f1 0f c2 2f db 6f c4 f6 69 a7 78 9c eb 97 b6 aa a1 52 3b fb 68 e7 21 40 c6 d0 d8 2c 38 e0 74 af d6 6b 2f 84 7a 57 d8 e2 48 4c 5f 2a 0e 88 16 a4 bd f8 Data Ascii: AuL,a\|)=kPR%K<YKSOc>CYZH,<u~Eh/a_lFBmSxJ+h/-Clq}4x-co#p1wr<Ze^u5lOvKI#qC:\|/oixR;h!@,8tk/zWHL_
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: e9 b8 4a 9d d3 e8 ce 9e 5f db 67 49 86 55 b0 f1 06 8d a8 e9 57 51 a0 fb 45 a5 d4 3f ea db be 18 0c 1f ce ad cd fb 64 7c 34 86 dd f5 0b 5f 15 c3 24 90 c7 e6 1b 70 e0 b0 6c 70 18 67 23 9f d2 b9 4d 4b e3 8f 81 ae bf e4 2d 05 bc a5 78 fd e4 4a 4e 6b cb fe 32 f8 e7 e1 26 b1 a6 cb 73 69 e1 1d 37 ed 72 28 5b 49 56 c9 37 4a 49 00 92 c4 76 e7 8c f1 8a f6 ea 71 16 21 43 b9 e0 4f 83 70 70 87 33 4e 3a ed d0 a1 f0 d0 c1 ac eb f7 be 21 8e 4f 96 ee fa 59 76 af 20 6f 72 dc 57 bd 78 78 ec b5 8d 17 b0 e0 57 8c 7c 18 d2 2c e0 d2 e0 2d 20 ce 49 61 9e a6 bd a7 42 45 48 19 01 38 1d 06 2b e6 5d e7 2e 67 a5 cf 6e 94 63 08 28 27 74 8d eb 21 18 00 91 ce 39 e2 b4 e1 42 57 23 d2 b1 74 c4 92 4b 90 a4 fc a3 a8 cd 6d 44 c1 58 20 ed d3 15 3b 68 74 f2 dd 68 55 bf 13 e1 d5 33 f8 7a 57 1b Data Ascii: J_gIUWQE?d\|4_$plpg#MK-xJNk2&si7r([IV7JIvq!COpp3N:!OYv orWxxW\|,- IaBEH8+].gnc('t!9BW#tKmDX ;hthU3zW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49800	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	599	OUT	GET /pl/3393/13376/yyxxzxyxyy.GIF HTTP/1.1 Host: ruamupr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Etag: "90fe9b8a8142548fdfab29f59cb0a164a0eaef81" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KRr3nLx2t7b7ATO2cPrXcHzfVr%2FP58ET8iy2vGtoUy8Bv6tY%2B5iprpwiMUNQPqPN%2F0Z1KjiiFslwnTa2wgg1v95XJ%2BFetMDw3WB8fuypzMqpFqswtM9pjN57jQcfPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b3780b92d42ca-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:54 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49797	34.149.139.129	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	905	OUT	GET /lad/17027843280544614?pubid=ld-2572-4971&pubo=https%3A%2F%2Fpjnewsletter.com&rid=&width=1000&path=%2Fjewish-americans-send-powerful%2F&x=131.5&y=163.875&utm_medium=email&utm_source=actengage&embed_type=7&embed_frame_container_type=3 HTTP/1.1 Host: decide.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	273	IN	HTTP/1.1 200 OK Cache-Control: no-cache, max-age=0, must-revalidate, no-store Content-Type: text/html; charset=utf-8 Content-Length: 943 Date: Fri, 24 May 2024 06:26:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:26:54 UTC	943	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 76 61 72 20 5f 67 61 71 20 3d 20 7b 20 70 75 73 68 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 20 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 76 61 72 20 71 73 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 70 61 72 61 6d 65 74 65 72 5f 76 61 6c 75 65 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 73 65 61 72 63 68 5f 77 69 74 68 6f 75 74 5f 71 75 65 73 74 69 6f 6e 5f 6d 61 72 6b 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 6c 69 63 65 28 31 29 3b 0a 20 20 20 20 76 61 72 20 73 65 61 72 63 68 5f 70 61 72 61 6d 65 74 65 Data Ascii: <html> <body> <script> var _gaq = { push: function(){} };</script> <script>(function(){ var qs = (function () { var parameter_values = {}; var search_without_question_mark = window.location.search.slice(1); var search_paramete

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49793	104.17.166.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	510	OUT	GET / HTTP/1.1 Host: c.adsco.re Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	1263	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2678400 Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re") Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect Expires: Mon, 24 Jun 2024 06:26:54 GMT ETag: W/"DWg73zXYn5haECmronil2Q==" CF-Cache-Status: HIT Age: 29471 Server: cloudflare CF-RAY: 888b378268f97d13-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:54 UTC	106	IN	Data Raw: 37 61 63 36 0d 0a 2f 2a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 72 61 66 66 69 63 20 76 61 6c 69 64 61 74 69 6f 6e 20 62 79 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 61 64 73 63 6f 72 65 2e 63 6f 6d 27 3e 41 64 73 63 Data Ascii: 7ac6/*<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adsc
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 6f 72 65 3c 2f 61 3e 2c 20 61 20 62 6f 74 20 61 6e 64 20 70 72 6f 78 79 20 64 65 74 65 63 74 69 6f 6e 20 73 65 72 76 69 63 65 20 62 79 20 41 64 73 63 6f 72 65 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 44 4d 43 43 2e 3c 73 63 72 69 70 74 3e 69 66 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 21 3d 27 27 29 7b 74 72 79 7b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 61 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 61 2e 6f 70 65 6e 28 22 47 45 54 22 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f Data Ascii: ore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.locatio
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 39 5d 2c 35 2c 35 36 38 34 34 36 34 33 38 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 34 5d 2c 39 2c 2d 31 30 31 39 38 30 33 36 39 30 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 33 5d Data Ascii: 11],14,643717713);g=W(g,h,l,d,b[0],20,-373897302);d=W(d,g,h,l,b[5],5,-701558691);l=W(l,d,g,h,b[10],9,38016083);h=W(h,l,d,g,b[15],14,-660478335);g=W(g,h,l,d,b[4],20,-405537848);d=W(d,g,h,l,b[9],5,568446438);l=W(l,d,g,h,b[14],9,-1019803690);h=W(h,l,d,g,b[3]
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 2c 68 2c 6c 2c 62 5b 34 5d 2c 36 2c 2d 31 34 35 35 32 33 30 37 30 29 3b 6c 3d 58 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 31 5d 2c 31 30 2c 2d 31 31 32 30 32 31 30 33 37 39 29 3b 68 3d 58 28 68 2c 6c 2c 64 2c 67 2c 62 5b 32 5d 2c 31 35 2c 37 31 38 37 38 37 32 35 39 29 3b 67 3d 58 28 67 2c 68 2c 6c 2c 64 2c 62 5b 39 5d 2c 32 31 2c 2d 33 34 33 34 38 35 35 35 31 29 3b 65 5b 30 5d 3d 64 2b 65 5b 30 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 31 5d 3d 67 2b 65 5b 31 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 32 5d 3d 68 2b 65 5b 32 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 33 5d 3d 6c 2b 65 5b 33 5d 26 34 32 39 34 39 36 37 32 39 35 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 62 2c 64 2c 67 2c 68 2c 6c 29 7b 62 3d 28 62 2b 65 26 34 32 39 34 39 36 37 32 39 35 29 Data Ascii: ,h,l,b[4],6,-145523070);l=X(l,d,g,h,b[11],10,-1120210379);h=X(h,l,d,g,b[2],15,718787259);g=X(g,h,l,d,b[9],21,-343485551);e[0]=d+e[0]&4294967295;e[1]=g+e[1]&4294967295;e[2]=h+e[2]&4294967295;e[3]=l+e[3]&4294967295}function P(e,b,d,g,h,l){b=(b+e&4294967295)
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 2f 67 69 2c 22 5c 5c 21 22 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 69 2c 22 5c 5c 3b 22 29 3a 22 22 2c 62 2b 3d 67 2b 22 3b 22 29 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 76 61 72 20 65 3d 0a 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 65 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 74 72 79 7b 65 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 74 72 79 7b 65 Data Ascii: /gi,"\\!").replace(/;/gi,"\\;"):"",b+=g+";")}return b}function cb(){if(window.XMLHttpRequest)var e=new XMLHttpRequest;else if(window.XDomainRequest)e=new XDomainRequest;else if(window.ActiveXObject)try{e=new ActiveXObject("Msxml2.XMLHTTP")}catch(b){try{e
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 6c 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 69 66 28 34 21 3d 68 2e 72 65 61 64 79 53 74 61 74 65 29 67 28 32 29 3b 65 6c 73 65 20 69 66 28 32 30 30 21 3d 68 2e 73 74 61 74 75 73 29 7b 69 66 28 35 30 30 3d 3d 68 2e 73 74 61 74 75 73 26 26 68 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 63 6c 75 64 65 73 28 22 44 65 63 6f 6d 70 72 65 73 73 65 64 20 73 69 7a 65 20 69 73 20 30 20 62 79 74 65 73 22 29 29 72 65 74 75 72 6e 22 70 22 3d 3d 65 3f 6f 62 28 21 31 29 3a 22 74 22 3d 3d 65 3f 70 62 28 21 31 29 3a 22 62 22 3d 3d 65 26 26 71 62 28 21 31 29 2c 21 30 3b 67 28 31 45 33 2b 68 2e 73 74 61 74 75 73 29 7d 65 6c 73 65 20 64 26 26 64 28 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 30 29 7d 3b 22 6f 6e 65 72 72 6f 72 22 69 6e 20 68 26 26 28 68 2e 6f 6e 65 72 72 6f 72 3d 0a Data Ascii: l=function(v){if(4!=h.readyState)g(2);else if(200!=h.status){if(500==h.status&&h.response.includes("Decompressed size is 0 bytes"))return"p"==e?ob(!1):"t"==e?pb(!1):"b"==e&&qb(!1),!0;g(1E3+h.status)}else d&&d(h.responseText,0)};"onerror"in h&&(h.onerror=
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 3d 64 3f 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 76 5f 22 2b 65 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 65 5f 22 2b 65 29 29 3a 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 76 5f 22 2b 65 2c 62 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 65 5f 22 2b 65 2c 2b 6e 65 77 20 44 61 74 65 2b 33 36 30 30 2a 64 29 29 29 7d 63 61 74 63 68 28 6c 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d Data Ascii: =d?(window.localStorage.removeItem("v_"+e),window.localStorage.removeItem("e_"+e)):(window.localStorage.setItem("v_"+e,b),window.localStorage.setItem("e_"+e,+new Date+3600*d)))}catch(l){}}function K(){return"undefined"!==typeof performance&&"undefined"!==
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 30 3b 62 3c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 65 2e 70 75 73 68 28 45 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 62 5d 29 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 0a 42 28 78 29 3b 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2c 62 3d 5b 5d 3b 62 2e 70 75 73 68 28 65 2e 73 74 61 72 74 45 29 3b 62 2e 70 75 73 68 28 65 2e 6f 6e 4c 6f 61 64 54 29 3b Data Ascii: 0;b<window.location.ancestorOrigins.length;b++)e.push(E(window.location.ancestorOrigins[b]))}catch(d){return-1}return e}();B(x);x=function(){if(!window.chrome\|\|!window.chrome.csi)return"";var e=window.chrome.csi(),b=[];b.push(e.startE);b.push(e.onLoadT);
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 69 70 63 52 65 6e 64 65 72 65 72 29 72 65 74 75 72 6e 20 32 30 3b 69 66 28 22 5f 70 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 22 63 61 6c 6c 50 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 31 3b 69 66 28 22 5f 5f 70 68 61 6e 74 6f 6d 61 73 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 32 3b 69 66 28 22 42 75 66 66 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 33 3b 69 66 28 22 65 6d 69 74 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 34 3b 69 66 28 22 73 70 61 77 6e 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 35 3b 69 66 28 22 77 65 62 64 72 69 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 2e 63 6c 69 65 6e 74 49 6e 66 6f 72 6d 61 74 69 Data Ascii: fined"!==typeof ipcRenderer)return 20;if("_phantom"in window\|\|"callPhantom"in window)return 1;if("__phantomas"in window)return 2;if("Buffer"in window)return 3;if("emit"in window)return 4;if("spawn"in window)return 5;if("webdriver"in window.clientInformati
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 65 6e 74 75 6d 22 29 3f 31 34 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 35 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 72 69 76 65 72 22 29 3f 0a 31 36 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 37 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 77 65 62 64 72 69 76 65 72 22 29 3f 31 38 3a 6e 75 6c 6c Data Ascii: entum")?14:window.document.documentElement.getAttribute("selenium")?15:window.document.documentElement.getAttribute("driver")?16:null!==document.documentElement.getAttribute("selenium")?17:null!==document.documentElement.getAttribute("webdriver")?18:null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49798	34.149.139.129	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	907	OUT	GET /lad/17146331630347110?pubid=ld-9129-2903&pubo=https%3A%2F%2Fpjnewsletter.com&rid=&width=590&path=%2Fjewish-americans-send-powerful%2F&x=131.5&y=4059.84375&utm_medium=email&utm_source=actengage&embed_type=7&embed_frame_container_type=3 HTTP/1.1 Host: decide.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	273	IN	HTTP/1.1 200 OK Cache-Control: no-cache, max-age=0, must-revalidate, no-store Content-Type: text/html; charset=utf-8 Content-Length: 943 Date: Fri, 24 May 2024 06:26:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:26:54 UTC	943	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 76 61 72 20 5f 67 61 71 20 3d 20 7b 20 70 75 73 68 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 20 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 76 61 72 20 71 73 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 70 61 72 61 6d 65 74 65 72 5f 76 61 6c 75 65 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 73 65 61 72 63 68 5f 77 69 74 68 6f 75 74 5f 71 75 65 73 74 69 6f 6e 5f 6d 61 72 6b 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 73 6c 69 63 65 28 31 29 3b 0a 20 20 20 20 76 61 72 20 73 65 61 72 63 68 5f 70 61 72 61 6d 65 74 65 Data Ascii: <html> <body> <script> var _gaq = { push: function(){} };</script> <script>(function(){ var qs = (function () { var parameter_values = {}; var search_without_question_mark = window.location.search.slice(1); var search_paramete

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49802	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	618	OUT	GET /awl/3393/13376/18529,18710,18662/xzyxxyxxzz.GIF HTTP/1.1 Host: ruamupr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	780	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Etag: "90fe9b8a8142548fdfab29f59cb0a164a0eaef81" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wv7Wx3ThIJo%2FmlsAl2hx2RoNGMI1bFKpYWsJ%2BAKOU6mbUBen4qOSAta7%2F5qHHj8GoPJ9rtvINf88uckvCHI1FOpc7hT1aNgo2Lma38w7BHdKhxwirwR%2BYDtFj%2BMTXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37835f2941ac-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:54 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49803	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	609	OUT	GET /images/18529/18529-375x250.jpg HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:54 UTC	758	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:54 GMT Content-Type: image/jpeg Content-Length: 32319 Connection: close Last-Modified: Wed, 15 May 2024 14:00:19 GMT ETag: "6644bff3-7e3f" Expires: Fri, 24 May 2024 14:00:38 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 59176 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oGquhC0rKSC9XpMJRvpWH9LeBLmkWyoKFWP0MW6XmojK88d0dh%2B0A2MoCYEYcA6alfPfsotUvI2tSn2ocZTHGDCcl7JkQ6xlOOhAXqPuYNezGQM%2F1GqaeeP5%2BdYC1eebw1uzq2ZV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37842f8f43d6-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:54 UTC	611	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 31 30 30 0a ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100CCw"
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ad 06 8f e0 a9 e6 10 ff 00 c2 1b a1 87 cf 4f ec 3b 6f fe 37 5b fa 6f 82 3c 1f 24 5b db c2 1a 18 e7 fe 80 36 bf fc 6e b8 eb 7f b4 47 20 71 21 dc 0e 73 5d 3e 83 ac ce aa 62 69 37 67 a6 4f 7a fc fb da d5 ef f9 9f b5 fb 2a 49 68 bf 23 6e db c0 3e 0a fb d2 f8 2b 43 7c fa e8 36 a3 ff 00 69 d1 71 e0 bf 05 c5 97 87 c1 5a 1a 80 3a 0d 0a d7 ff 00 8d d5 65 d4 ae cb 73 29 fc 0d 69 c7 78 d7 10 62 46 1c 2f 3c d2 f6 95 5f da 7f 7b 17 24 7b 15 ad 7c 39 e1 0d bb 5b c1 7a 16 3d b4 2b 5f fe 37 57 b4 ef 0d 78 3c ce 07 fc 21 5a 17 27 a1 d0 ed 7f f8 dd 51 96 Data Ascii: ?O;o7[o<$[6nG q!s]>bi7gOz*Ih#n>+C\|6iqZ:es)ixbF/<_{${\|9[z=+_7Wx<!Z'Q
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 42 3b 81 09 95 60 8a 26 de 10 60 16 25 0e 02 f3 90 49 03 9e 33 cd 74 fa 07 8f b4 99 72 2d 74 f9 82 31 26 24 8a e8 4b b8 75 ce 19 b7 67 f4 aa f6 f0 91 9c b0 92 5a 8e ff 00 85 0d f0 34 ff 00 cd 1b f0 87 fe 12 b6 3f fc 6a 91 fe 03 7c 0e da 71 f0 6f c2 07 fe e5 4b 1f fe 35 5d 06 9d ac d8 6a 90 2c ea 93 40 64 19 58 ee 63 31 93 f4 cf 06 ae 61 50 7d f0 73 c7 0d 9a d5 4a 2f 63 17 49 23 8a 3f 01 3e 09 ab 16 ff 00 85 2f e1 03 c1 38 ff 00 84 52 c7 9f fc 83 5f 31 7e d2 ff 00 08 3e 19 ad 8e a1 10 f8 67 e1 8d b2 46 ea a8 be 17 b1 5d be 98 c4 35 f6 7c a3 62 64 7e b5 f3 bf ed 21 e1 c2 56 e8 4b 2e 54 e7 a0 ec 6b cd cd 23 25 87 bd cf 6b 22 94 56 26 cc fc 23 fd ad 3e 1c e8 9a 57 89 2f ad 34 ed 0a c5 7c b9 9c 28 1a 74 0a 00 f4 01 50 62 be 62 f1 36 89 61 05 f8 69 74 8b 15 ca Data Ascii: B;`&`%I3tr-t1&$KugZ4?j\|qoK5]j,@dXc1aP}sJ/cI#?>/8R_1~>gF]5\|bd~!VK.Tk#%k"V&#>W/4\|(tPbb6ait
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 29 9f c5 1a e4 e9 be 60 d2 c5 bb e6 d9 df 06 b9 cd 7b f6 91 f0 df 84 f4 58 e3 bf be d3 c5 d2 61 3c a5 60 ce 40 18 1c 0a e0 60 fd a2 bc 73 e2 5d 7b 0f a0 34 16 f3 b0 16 f7 4b 1e c5 65 f5 24 f0 2b a2 9d 56 b7 38 67 42 2d 36 7d 15 e2 29 a0 f0 6e a3 2c 7a 3e 87 77 7b a7 16 56 49 e4 bd 54 40 0f 27 2c 4e 38 ac ab af 8a 52 6a be 23 13 f8 53 c1 b7 d7 28 14 c4 19 af 02 c2 65 07 91 1b 28 3b fb f3 d3 1c d7 1d f0 9b 50 f1 4e a1 75 79 1d f7 87 74 ed 68 a4 a4 9f ed 1d 44 ac 20 63 a9 c7 a7 b5 75 be 13 7f 1b b4 ee da ef c5 3f 0e 58 5c e9 d2 48 f6 16 fa 22 43 20 b7 19 ce 04 4d c9 7f 51 eb 5d 94 eb 68 79 75 68 2b 33 d6 fc 23 2f 8c ef fe cd ac dc 58 78 86 59 a6 2a 23 b1 bb ba 91 21 c0 e7 cc 55 51 b6 50 30 46 32 33 d8 75 ae f7 44 bb f1 c7 8b 9e 2b 8f 0d 78 06 0b 74 17 12 49 Data Ascii: )`{Xa<`@`s]{4Ke$+V8gB-6})n,z>w{VIT@',N8Rj#S(e(;PNuythD cu?X\H"C MQ]hyuh+3#/XxY*#!UQP0F23uD+xtI
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 93 c1 a7 66 11 93 ea 65 5c 5c dc 24 85 1a 46 fa e6 a9 dd 30 0d e6 30 c9 3c 92 4d 3f 51 bc c5 eb 60 f1 55 af 64 24 2b 01 c1 f5 ad e0 ad b8 b6 65 6b e2 64 04 20 c7 1e b5 4a 05 92 3c a3 e7 f1 35 6a e2 e1 15 4e 71 d3 a5 64 de 6a 24 48 10 31 f4 e0 50 d6 9a 83 96 ba 12 cb aa dd 33 95 51 85 07 00 d5 8b 7d 72 1b 2b 56 8a 64 f9 88 e1 a9 12 3b 71 17 25 7e ee 79 ef 58 d7 d7 a0 31 52 80 8e e4 56 32 b5 f4 2a 32 b1 6e c3 5e 06 f1 92 59 c8 52 70 09 a6 eb 5e 2b 93 4c 01 b4 c6 dd 2b 1d a3 27 8a e7 27 ba 56 9b 68 7e df 99 a9 37 5a 44 a9 7d 77 26 42 73 83 50 d2 6a c3 be b7 3a 68 b5 2b f9 2c 13 50 d5 d8 b1 27 95 5e 48 ab fa 37 89 22 b1 f3 65 b5 b0 91 cb 0c 70 9d 3d eb ce f5 3f 1b ba 6e 16 4c 4e d1 c7 a5 56 b6 f1 9f 88 6e 21 78 fe d6 62 c0 c7 cb c1 aa e4 8b 89 12 ac d3 d0 ee Data Ascii: fe\\$F00<M?Q`Ud$+ekd J<5jNqdj$H1P3Q}r+Vd;q%~yX1RV2*2n^YRp^+L+''Vh~7ZD}w&BsPj:h+,P'^H7"ep=?nLNVn!xb
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 70 3a 66 b0 6d 6e f0 bf 2c a7 af 5a bd a6 dc 47 1c db c4 84 e5 79 af 16 ac 35 3d e8 4e f1 b1 d4 fd a4 4c db 71 c9 e4 d5 db 2b 4f 3f 80 2b 9e 82 f4 24 a1 84 99 c0 e8 4d 74 1a 1e a5 1c 92 63 70 c8 03 bd 62 e2 c5 29 d8 6f 89 61 58 f4 59 81 18 21 78 af 9f be 2a f8 90 59 a3 5a c3 37 cc 47 20 d7 bd f8 c3 50 85 34 e9 62 33 01 b8 71 cd 7c b9 f1 c6 f4 c7 70 67 4e 9e dd eb b7 07 1b 48 f1 71 b5 2e 99 e7 7e 22 ba 7b 89 5d f7 e7 e7 e3 14 55 1b ab cd f1 7c ff 00 79 9b 3d 28 af 6f 91 24 7c ec a6 ee 7d d1 f0 e9 1c 6c 62 0e 36 f6 af 7e f0 12 5c 4f 67 14 25 38 c0 ed da bc 93 e0 d6 83 78 d2 44 26 b3 63 f2 f2 08 ed 5f 45 78 03 c3 b7 3f c3 66 46 31 8f 96 ad ab 1f 48 93 b1 1e a7 a2 48 60 1b 63 38 3d c2 d5 6d 1f 43 9e 0b 83 2e d2 46 3a e3 f4 af 46 8f c2 d7 8d 08 66 b3 6e 47 7a Data Ascii: p:fmn,ZGy5=NLq+O?+$Mtcpb)oaXY!x*YZ7G P4b3q\|pgNHq.~"{]U\|y=(o$\|}lb6~\Og%8xD&c_Ex?fF1HH`c8=mC.F:FfnGz
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 73 1e a3 23 87 da 81 00 02 3d bc 28 eb f5 ae 92 79 1d a7 7b 5c bf 96 8e 55 d9 38 23 1f d3 eb 5b 24 ec 79 d3 49 4b 42 af 83 fc 33 a4 68 b3 0b cb 2d 5e d2 09 64 6c 99 fe d5 b5 e5 6f 42 bd 18 fd 6b b0 d3 be 26 f8 71 15 f4 5f 12 d8 18 e4 70 ca 35 31 6f 85 07 d6 b2 b4 9f 08 89 e0 5b 85 b6 b7 28 1b 78 49 62 cb 67 d4 57 5b a6 dc e9 37 1a 3b 68 de 20 d2 55 83 29 45 77 8f a0 3e f5 d0 a5 25 b3 39 aa d9 d8 f9 bf f6 bb 88 6a 1f 0b 75 1b d8 ee 12 7f 2a 36 1e 6a 72 ad e9 cd 7e 5a 78 ab 50 fd f5 d2 a7 fc f4 20 8f 4e 6b f5 47 f6 98 f0 bd cf 84 7c 23 af e9 16 37 3e 76 93 a8 5b b4 96 ea 3a 40 e0 12 54 7d 6b f2 3b c4 ba a8 8b 57 bb b7 70 72 93 3e 40 3d f7 1e 6b ca a9 0e 7a d7 3e 93 09 51 53 a2 92 3c 83 e3 e5 bc 57 1b 26 11 20 70 79 20 60 d7 9d 69 6d 10 98 02 d8 ca 81 5e 81 Data Ascii: s#=(y{\U8#[$yIKB3h-^dloBk&q_p51o[(xIbgW[7;h U)Ew>%9ju*6jr~ZxP NkG\|#7>v[:@T}k;Wpr>@=kz>QS<W& py `im^
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 6a dc 42 e4 aa 81 ce e6 4c 6e 1c fa 57 a5 59 78 b3 c1 f7 7e 1b 9b 4d b3 b8 b0 97 32 f9 31 6d 82 c4 02 a1 ad 3a 03 73 c0 c1 62 00 c8 c6 e2 33 99 0a ec f2 89 ad 6d a1 af f6 9d 28 4e ee 47 5d f0 ca 7d 6a 3b 09 2f e5 f0 5d c4 b1 dc b1 26 39 3c c0 fb 32 cb f3 6d e7 04 c6 eb c1 eb 19 15 ea 77 6f 07 89 6e 74 3f 0c 4d 61 76 44 d2 6e b8 97 ec b2 44 91 29 45 73 80 a7 07 e5 28 7a 9f 95 85 79 65 96 b7 e1 8f 87 fe 15 17 10 2d a2 47 03 c6 90 ac 96 f6 21 49 67 bb 38 cf 9e 30 0f fb d8 00 ae 70 36 16 eb 3e 0e de 6a d8 d3 fc 63 71 2d 92 25 fd b3 ce 03 c5 6a 1e de 2f b1 41 b6 30 16 52 cc 49 3b bb 65 83 11 f3 86 55 c2 ae 5e a3 17 74 6b 47 31 8c a7 cb 7d 4f a9 fc 0f 75 7d a2 b8 7d 3e c1 a1 96 d1 53 ec f0 db da cd b7 60 73 19 88 6f 61 92 cf f2 80 70 01 07 d4 67 d6 f4 cf 1f 69 Data Ascii: jBLnWYx~M21m:sb3m(NG]}j;/]&9<2mwont?MavDnD)Es(zye-G!Ig80p6>jcq-%j/A0RI;eU^tkG1}Ou}}>S`soapgi
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: 27 9e 26 69 46 27 9d 8d cf 28 60 69 f3 49 9a 3f 17 fe 35 78 4f e1 cd 8c b7 5e 25 d6 03 5c 21 21 2c e3 c1 66 3e 98 1d 3f 1a f9 b7 c7 bf b4 c7 c4 3f 1f a3 59 e9 97 af a5 e9 e4 95 4b 7b 66 2b 23 29 ec ec 3d 6b 9f d7 63 bf d7 75 09 35 3d 66 e1 ee 2e 25 62 ce f3 12 7a fd 6a b4 5a 3b c5 27 ef 94 00 07 61 5e e3 c8 a9 61 d2 e6 5a 9f 29 53 3e c4 e2 db 50 95 93 30 ee 7c 1d a9 f8 86 65 16 d0 49 2b ee 24 04 42 ec 7d 4f af 15 2d 86 85 a0 e8 90 c8 2e 34 54 be 90 82 aa a8 01 c9 23 03 f2 3c fe 15 e8 fe 12 f1 46 a1 f0 e2 ed 26 b9 d2 dc 5a 98 44 93 c1 24 7e 5b 48 8e 30 ad 92 32 39 20 8a e5 75 7b e4 b0 92 6d 71 d1 4c f7 0e ce 19 b2 a2 01 c9 fb a4 02 cc 46 78 c7 18 f7 af 3f 13 86 51 7e ea 3d 0c 32 75 23 79 3b 9c 3d af 85 2e b4 8b d2 da bc 71 92 41 2b 6c ad d0 7f b5 8e fe d5 Data Ascii: '&iF'(`iI?5xO^%\!!,f>??YK{f+#)=kcu5=f.%bzjZ;'a^aZ)S>P0\|eI+$B}O-.4T#<F&ZD$~[H029 u{mqLFx?Q~=2u#y;=.qA+l
2024-05-24 06:26:54 UTC	1369	IN	Data Raw: bc cf 6b 26 cc d6 61 5b 9f 68 a3 e8 8f 0f f8 ca 60 d6 3e 16 d1 b4 b9 f5 0d 57 57 43 1c 56 88 08 8d 55 7e f4 92 30 19 0b 8f bc 57 a7 d7 15 f5 8f 83 f4 c3 6d e1 cb 78 35 1f 1d c8 93 41 14 69 74 f1 b8 31 dc b1 03 24 2f 3b 39 20 6d 3f 99 af 83 3e 02 da de 69 ba ad cf c5 6d 5f cc 4f 10 6b d6 d1 c4 14 3f cb 61 6a 39 58 14 02 40 7e 41 72 3a 9c 7a 57 ae f8 bb f6 81 f1 17 80 7c 1a 9e 1d f0 ad cd 84 9e 29 d6 21 74 d2 9b 5b 98 a5 8d a1 0c 03 5d dd b8 23 64 11 92 0e 32 0b b6 d5 5c 93 5f 05 53 0f ec f4 47 da 57 8a 9d 35 2b 1f 68 78 55 b4 ed 3e 3d b6 f3 99 55 80 21 81 c8 e7 db b7 7a ec 34 c6 69 55 48 8c f1 c8 e2 be 6b fd 93 75 99 34 9f 86 f6 7a 6b 78 ab 56 f1 2f d8 25 68 6e fc 4d a9 5a 49 12 6a 97 1d 65 b8 87 78 f9 e2 66 e1 59 7e 52 17 8c e3 35 f4 7f 87 2f e1 bc b4 5b Data Ascii: k&a[h`>WWCVU~0Wmx5Ait1$/;9 m?>im_Ok?aj9X@~Ar:zW\|)!t[]#d2\_SGW5+hxU>=U!z4iUHku4zkxV/%hnMZIjexfY~R5/[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49804	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	609	OUT	GET /images/18710/18710-375x250.jpg HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	766	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:55 GMT Content-Type: image/jpeg Content-Length: 30132 Connection: close Last-Modified: Thu, 23 May 2024 16:00:48 GMT ETag: "664f6830-75b4" Expires: Fri, 24 May 2024 16:03:01 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51834 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0XdlK7pI%2FfxM1GQbq6zrwopG%2FcsOSHpjxOkF7Elmp%2Bx1z%2BXvAgXfJjpvRdsCckoDCzQSS4Pjf%2BrhedbD2w%2BLvuJRbEOohqwLpTIm3H4mTiKiZS2KbQh9M8BtIh6wZjfe%2Funv1EK6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b3785ce3ac445-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:55 UTC	603	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCw"}!1AQa"q2
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f8 91 c8 27 8a 91 4e 18 13 eb 51 54 b1 ab 15 cb 70 7b 1a f2 c0 98 3a 9e 86 96 a3 40 ca 79 93 23 e9 4e 2e 31 c1 a4 95 95 90 0f 07 e5 c7 bf a5 46 f1 bf de 28 71 9e b4 6e 73 c0 6c 7b d2 aa 10 77 1f cf 34 cb 8a b8 e0 37 70 3f 2a 44 47 47 24 0e 3b d2 c4 8c 5c 90 3f 5a 7b 24 bb be 51 d7 de a3 9e 29 d8 96 ac c6 32 87 90 32 9c 01 d4 d3 95 51 8e 15 3f 1a 52 84 0e 9c 9a 74 68 cb f7 c0 1f f0 2a 7c c8 43 63 85 81 cb 1a 96 35 53 9c 1a 4c 82 71 9a 48 d5 ba d6 4a a6 ec d2 31 4c 7c 4a bb b6 e4 7e 35 28 81 48 ce 3f 5a 8b 70 45 07 1c 9a 7a dd b8 c2 a0 3d 39 e2 b3 a9 cb 25 72 b9 13 1e 8c 8a 7a f0 38 db eb 55 ae 9c cb 37 ee c3 7e 55 64 47 bc e4 30 c9 e7 15 a1 a3 68 57 77 a4 ba 42 4a af 57 23 1f ce b1 8c 94 16 a6 b4 Data Ascii: ?'NQTp{:@y#N.1F(qnsl{w47p?DGG$;\?Z{$Q)22Q?Rth\|Cc5SLqHJ1L\|J~5(H?ZpEz=9%rz8U7~UdG0hWwBJW#
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 68 c9 1b a3 96 35 75 6c 73 d0 f1 c1 c1 e9 d4 03 da bc 97 f6 94 fd 90 7e 0e 7e d3 7a 56 97 a5 7c 4e d2 a6 96 d7 47 b8 f3 ed 63 b5 71 19 1c 0d d1 f1 9f 95 8a a8 c7 60 bc 57 a9 85 cd a1 ed 3f 79 1b 2e a7 d4 c7 8b aa ba 4a 15 17 cc fe 72 3c 41 67 f6 6b fb 7b b7 b3 90 33 86 30 b3 a9 f9 b1 c7 7e dc 8e 6b 9f 99 05 ee a7 3c 52 26 5a 48 18 28 ed 9e f5 fb 7d fb 5d ff 00 c1 1c be 1c fe d0 7e 24 f0 94 bf 0e ee 2c bc 2d 61 a2 a3 43 a9 ac 59 67 78 89 1b 4a 9f e3 c0 c8 c1 c7 4e a7 3c 7c ab fb 6f 7f c1 0e 3c 6f e1 ef 8e 1e 16 d0 bf 64 6f 0f de ea 7a 16 b1 64 57 51 d4 35 07 e2 d2 60 c0 13 23 0c 04 04 1c e7 f4 af ad c1 67 18 1a bc ab 9e d7 3c bc 46 67 4a bc ae 7e 6b f8 58 20 91 f4 7d 52 65 2b 1b 30 8c b1 c9 3d f8 a2 bd 6f f6 ba fd 89 fe 2e 7e c8 ff 00 19 13 e1 57 8e 6c 56 Data Ascii: h5uls~~zV\|NGcq`W?y.Jr<Agk{30~k<R&ZH(}]~$,-aCYgxJN<\|o<odozdWQ5`#g<FgJ~kX }Re+0=o.~WlV
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: cf b2 57 12 ea da 44 0c 54 48 b9 e5 81 1f 71 b0 4f 22 be f3 f8 0b fb 42 fc 31 fd b6 3c 31 69 e3 af 00 eb f6 fa 0f 8e b4 f4 54 32 23 ed 0e 40 ff 00 57 2a 0e a3 8c 67 93 d7 b5 7d 0c 1d 3c 4d 28 ce 5a 7e 87 e2 7c 53 c2 55 70 75 25 56 8a bc 37 3e 82 b8 d4 2c 34 29 ac 74 6f 11 6a f6 b0 de 5e 9f 2a d4 48 c1 3e d3 20 19 3b 7b 16 3d 70 2a d4 84 1f dd 2a 67 b1 1d fe 95 c9 f8 4f c7 5a 3f c4 7b c4 f0 0f c5 4f 0d 2d 97 88 f4 d9 bc e1 65 78 9f f2 d1 3a 4d 09 c7 20 8e 72 3a 56 c4 fa b7 89 f4 ff 00 88 49 e1 2d 43 c1 73 7f 65 5c 58 99 ec 7c 47 6f 30 30 bc a3 ef 42 e8 00 64 6e 84 10 48 6c 93 c5 72 55 c3 4e c8 fc ee 74 e5 07 66 5b 9a 3c af 97 bf 00 1e 73 54 e6 8a 38 c9 0d 0e 47 41 5a 52 8c 11 98 ff 00 87 38 c7 43 db dc e6 a1 31 82 3e 71 9f 50 6b 8e 49 87 43 1a e3 4f 8b 20 Data Ascii: WDTHqO"B1<1iT2#@Wg}<M(Z~\|SUpu%V7>,4)toj^H> ;{=p**gOZ?{O-ex:M r:VI-Cse\X\|Go00BdnHlrUNtf[<sT8GAZR8C1>qPkICO
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: db 3f 95 29 0d 9f ef af 4a d4 4d 6e 39 e1 45 3b 77 1f ba 33 8c 53 e6 91 a7 21 9d 03 e0 67 04 62 b4 8a 4d 68 74 aa ed 5d 9c e3 fe e1 f6 cc 48 20 e7 27 a0 15 15 e0 4b bc aa f4 23 19 1f ce b6 2f 2d da 7b 94 79 22 1e 59 ea 48 ea 2b 3e fe 09 2d d7 72 1d d1 f9 9c 6d 5e 40 c5 54 53 be 82 55 d4 b7 39 b7 d2 2d ae d2 41 71 12 ba c9 f2 c9 1b 8e 18 57 84 78 aa 1f 88 7f b2 d7 c4 08 fe 2f fc 19 d4 26 b7 8d 27 dd 79 69 bb e5 91 73 9d a5 47 04 1e 79 f6 af a1 b5 6b 53 35 ab 3d 93 e0 9e dd cd 73 1e 24 d0 9f 53 d2 a4 b0 bb b5 f3 15 d7 1c f2 1b da bb b0 b8 c9 d0 d0 e3 c5 e1 61 5e 0d 4b 5b 9f 54 7e ca 1f b6 cf c1 9f db cf c1 56 3a 47 89 75 97 d1 3c 6f a6 a2 ad bd f4 2c 16 e6 09 31 ce 09 3f 32 fa a9 af a0 3c 27 f1 33 58 d0 35 c8 fe 14 7c 69 b0 48 6f ee 63 29 a6 eb 10 31 16 da Data Ascii: ?)JMn9E;w3S!gbMht]H 'K#/-{y"YH+>-rm^@TSU9-AqWx/&'yisGykS5=s$Sa^K[T~V:Gu<o,1?2<'3X5\|iHoc)1
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 2f 63 d8 57 73 e5 8a d0 e2 95 4e 69 1e 1d f1 e6 f6 ee d2 d9 e5 b7 95 8a 5e 42 51 54 0c e1 81 c0 27 d3 ad 7c a3 e2 3f 0d 6a 51 cf 79 73 6e ce 5e 39 93 c8 dc 71 f3 6e c9 af af fc 7d a2 dd 6a cf 04 13 ae 09 38 93 d0 1c d7 92 f8 f3 e1 4d c1 d6 25 6b 26 01 5d d1 b0 3a 75 e6 bd 4c b6 b4 69 cf 54 71 e2 93 96 c7 8e 2d 8b 6a 5a 6c f6 da 6c cd e7 cd 23 7f a4 e7 ee c6 31 91 f9 e6 a7 f8 86 6d 74 cb 2d 3e 16 2c b7 1e 48 cb 2b 1d 84 05 ef fe f7 5a f4 08 7e 19 cd 6d a5 cf 15 84 44 5d 4f 33 20 e3 0b 8e f8 f4 aa f7 ff 00 0c 75 dd 5a ca 0b 19 b4 5f b5 41 bb 7d da 8f e3 20 61 57 27 90 17 be 2b e9 29 57 a4 e5 ef 23 c3 af 0a 8b 66 7c e5 2f 8e 6e 34 d8 67 b9 22 e9 a7 de c9 18 55 c4 51 83 c6 30 6b 96 b8 f8 8f ad 68 4d e7 47 e2 f7 b7 96 37 f3 26 64 75 f9 9b d0 01 5e c9 f1 0f e0 Data Ascii: /cWsNi^BQT'\|?jQysn^9qn}j8M%k&]:uLiTq-jZll#1mt->,H+Z~mD]O3 uZ_A} aW'+)W#f\|/n4g"UQ0khMG7&du^
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 6c b9 cf b1 a7 c6 59 81 50 d8 ef 9a e6 9a 7c b7 34 8d b6 1d 3c b1 db c7 f3 ca 07 07 22 bc fb c7 fe 33 bd d2 d9 9a da 63 b5 79 f9 4d 6e 78 df 5c 16 36 6c b3 07 ce 38 65 5e a2 bc 6b c4 f7 1a ef 88 16 6f ec cb 29 9d 90 96 2c d9 fb b5 b5 1e 49 c7 de 3a 3d 94 6e ae 5f d4 7f 6b ef 16 f8 59 3f b3 34 30 15 e3 f9 84 a5 bb fb fb 7b 54 3a 57 fc 14 13 e3 b5 89 91 0f 8a ee 7c 97 18 36 e6 5c 82 3f 3a f1 cd 5b c3 de 2e 06 69 e6 d3 ae 1a 20 48 79 52 3c ac 7d f9 20 f1 5d 4f c0 8f d8 5b f6 b1 fd a9 f5 00 3e 0a fc 21 d5 f5 4b 76 7d 8f a9 bc 5e 4d 94 47 b9 69 df 0b f8 0c d4 d4 86 0e 4e f5 6d 6f 33 db a1 2c 5d 28 af 63 73 da 3e 1c 7e d7 96 7e 2a d4 22 6f 13 5d 98 6e cc a0 37 99 27 5a fa 03 c0 fe 3b 83 c6 a3 6e 85 a8 09 54 75 d9 28 ff 00 1a e3 be 0c ff 00 c1 bd 5f b4 0d dd cd Data Ascii: lYP\|4<"3cyMnx\6l8e^ko),I:=n_kY?40{T:W\|6\?:[.i HyR<} ]O[>!Kv}^MGiNmo3,](cs>~~*"o]n7'Z;nTu(_
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 18 fd 69 b7 2c 6d 67 1b 58 92 38 6f 63 ed 55 a5 d4 52 e6 72 b1 73 b0 61 c5 71 41 cf 9b 73 a6 7b 58 f3 5f 8d df 0d 74 af 16 da 48 b6 f1 1f 35 03 61 82 f7 af 9d ec ee b5 af 87 5e 24 fb 3d d4 8e 55 18 01 b8 76 f6 af af ef e2 82 ec 8b 5f 30 83 cf 43 5e 3d f1 ef e1 92 ea 11 fd b6 cd 33 2c 48 4b 32 f5 23 ad 7d 26 55 89 69 38 49 dd 1e 16 2a 9f 2e b1 3d fb f6 1c fd bc 3c 49 f0 77 53 b6 4b 5b f9 6e 74 a9 e4 02 f7 4f 69 32 14 1f bc cb 9e 87 1d 40 af bd 7c 2d ae 69 d1 d9 9f da 13 f6 66 98 5f 68 57 ab f6 8f 14 78 3e d9 f1 cb 00 5a 78 14 74 23 92 d1 f4 cf 23 8e 2b f0 df c1 1e 2e d4 7c 27 ad 24 13 ca e2 20 c0 2a 13 d0 e7 ad 7d 7d fb 20 fe d7 de 2d f8 1f e3 33 ac 78 72 f5 e6 b2 69 56 4d 46 c4 b7 ca e8 47 cc df 50 38 af 46 a4 5c 2a 5f a1 f1 b9 e6 45 43 1f 49 d5 a7 a4 8f Data Ascii: i,mgX8ocURrsaqAs{X_tH5a^$=Uv_0C^=3,HK2#}&Ui8I.=<IwSK[ntOi2@\|-if_hWx>Zxt##+.\|'$ }} -3xriVMFGP8F\*_ECI
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 41 67 e1 0b b9 25 11 c9 0e d5 7c aa a7 95 f3 7f bd 9e 95 f5 4f c5 bf d9 1f 59 f0 3d ad e6 b9 35 a5 b3 5a 59 22 96 96 35 60 ee 09 ec 30 79 1d f1 da bc 92 2f 09 ad f4 6d 24 25 99 54 6c 45 1c 04 fa d7 c8 63 69 63 70 af df 89 fa 6e 57 57 01 99 53 52 a3 2b 9e 70 9e 12 b9 b4 99 6d 9e 58 07 98 3e 49 16 4e 41 15 d4 78 1f c4 da fe 87 a8 c5 05 cc b2 3c 4a 78 10 a9 67 50 0f de 07 a5 75 31 78 5b 47 82 25 fb 66 9c 80 29 c1 73 27 af d6 aa df e8 b7 7a 5c 91 de c4 a1 60 79 33 6f 34 52 f1 1e 3b f1 da b8 14 a5 5e 36 7b 9e 8d 5c 3d 4c 32 bf 43 dc bc 17 e3 33 26 9b 6f 2d ad ce e5 ea f3 37 c8 4e 31 c1 6e 70 6b d1 34 7b db 2d 5e ca 29 a4 91 a3 b8 dc 4c 43 70 fd e8 cf dd c9 eb 8a f9 6f c0 fe 39 bc d1 af 76 59 5d 31 72 e7 7c 12 2f ca 73 d7 19 f5 af 69 f8 7d e2 98 ef ed 64 d3 e7 Data Ascii: Ag%\|OY=5ZY"5`0y/m$%TlEcicpnWWSR+pmX>INAx<JxgPu1x[G%f)s'z\`y3o4R;^6{\=L2C3&o-7N1npk4{-^)LCpo9vY]1r\|/si}d
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 8f 7a c6 bc 6e ae cd e8 f2 c1 28 23 8f bb d4 2d 8d d9 b7 92 40 e0 0c e1 7a 81 5b 16 0e 92 38 96 d9 81 d8 02 e0 f5 35 e7 5a 94 f3 d8 6a 2c d3 c9 fb d0 7e ff 00 f7 85 76 9e 1a d4 23 9a 08 1a 38 f7 e7 92 7d 7d eb cb 92 7b a1 cd 72 c8 ea b4 6d 52 0b 86 96 cd 5a 45 92 26 04 99 13 93 9f 41 e9 ef 57 ef 01 78 8a fc 84 91 d4 1e 7f 2a ca 8d db 79 b8 54 20 91 f7 aa ed b5 d3 a3 2b 11 c7 f1 7d 29 36 fa 9a 72 f3 44 e7 7c 48 b7 16 2e 2e 61 75 76 ce 36 fa 57 17 e2 28 e7 96 61 22 e4 b0 3b a4 5c f4 fc 3f 3a f4 fd 5b 4f b7 d6 25 c2 4b b0 1f e2 c5 70 be 2d d2 a5 91 a6 b3 b7 de f2 10 54 08 c0 cc 9f 5c ff 00 3f 7a e9 c3 c6 2e 5c b6 dc f3 71 52 8c 20 db 3c 8b e2 a7 c5 3b bd 0e 31 68 12 49 65 ea be 52 16 f6 e8 07 5a f7 6f d8 97 f6 af d3 7c 69 e1 f4 f0 97 89 2e a5 b7 d4 74 e1 b6 Data Ascii: zn(#-@z[85Zj,~v#8}}{rmRZE&AWx*yT +})6rD\|H..auv6W(a";\?:[O%Kp-T\?z.\qR <;1hIeRZo\|i.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49806	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	538	OUT	GET /wp-content/uploads/2024/01/mick-pic-150x150.jpg HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_6L5Q55KN3H=GS1.1.1716532011.1.0.1716532011.0.0.0; _ga=GA1.2.1010184661.1716532012; _gid=GA1.2.297082714.1716532012; _gat_UA-71705037-13=1
2024-05-24 06:26:55 UTC	850	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:55 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=4949 etag: W/"65a54e4c-1355" expires: Wed, 19 Jun 2024 15:59:32 GMT last-modified: Mon, 15 Jan 2024 15:25:00 GMT vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 311228 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tz8RPnA%2FtkTO2ENrS2osrRk94rBk3rJ67Iotm%2BPf924IbnxiRPsSsbX2BbFkX3sLZ7QuAJKo22u3Imq3DUUiKMGHQpfkXe39kzm9JMVPgHuZmWyBvSskZx1SSMaAGiBK8lc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b3785cb53199d-EWR
2024-05-24 06:26:55 UTC	519	IN	Data Raw: 31 31 64 32 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c2 00 11 08 00 96 00 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 02 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 bd 02 2c fb 66 08 fa 1f Data Ascii: 11d2JFIF``!'"#%%%),($+!$%$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"4,f
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 79 89 d5 91 d2 b2 2d 1b 43 06 df d3 43 6a 56 45 34 80 d6 0d 80 ce 2c c1 6e 58 da 9f b3 fc 79 bc c3 b7 f8 c7 10 b5 34 9a d0 6f 14 f1 b5 4c 94 38 ca 86 fb 29 d0 31 6b 79 93 7a 56 37 71 b9 99 b8 29 09 21 28 59 34 93 03 5c 36 1d d9 0c 33 45 2f 2d 56 8d 51 53 7d 9d 25 50 99 a3 b1 66 ce ae 70 88 bd 44 80 b2 52 92 14 fa a1 73 b5 e7 7b 76 d1 7b 15 ee 56 ec 85 c0 f7 a0 f8 ae 4e d2 6a a1 11 05 80 90 4b 49 08 2e 7c c7 68 1e 85 f1 e6 ff 00 47 4a e9 05 34 ce 8e a5 3a 23 42 c2 ce bd 2f ae fa d9 c1 25 41 94 05 39 1d d2 ba e6 2d 70 ae 7a 08 48 54 6e 1a 98 1a 49 34 40 88 e9 f8 1d 3b 94 d0 18 db d9 0d 08 0d 6c 52 58 06 a4 72 07 77 2b 01 3c aa c0 44 ea c0 0c db 1f ff c4 00 3d 10 00 01 03 02 03 05 05 05 05 06 07 00 00 00 00 00 01 00 02 03 04 11 05 12 21 06 13 31 41 51 22 23 Data Ascii: y-CCjVE4,nXy4oL8)1kyzV7q)!(Y4\63E/-VQS}%PfpDRs{v{VNjKI.\|hGJ4:#B/%A9-pzHTnI4@;lRXrw+<D=!1AQ"#
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: c8 b9 02 33 02 ab e5 73 ae d1 c5 da 7a 21 36 e2 a6 37 b3 e0 78 70 fa 15 49 38 9e 9d 8f ea 01 4f 60 72 a8 1b b3 a6 a5 41 14 81 d7 71 e2 38 2c 58 0d 40 2a 7a 76 17 39 f7 ed 28 63 39 53 96 d7 cd dd c1 18 f9 b3 7f ef e6 b0 19 8b 60 54 92 12 ed 53 5c b3 22 e5 99 5d 47 30 df 4b cc b7 80 53 e6 2e e1 6f 54 5b 77 12 b6 3e a4 56 60 14 92 71 21 81 87 d4 69 fa 27 9b 37 cd 48 18 08 71 3a a9 67 9a 2b 96 b8 fa 2a bc 42 a2 b1 f3 46 05 8b 46 6f 55 08 70 90 e7 2e bf 9a 75 4e 96 6f 12 9d 31 b8 05 6d 3c d9 ab 59 1f c8 dd 7e ab 0d ab 31 68 1d 65 85 d7 09 48 6e 70 5f d1 31 fa 2c c8 95 99 66 55 50 86 de 56 92 1c 9e fc f1 65 06 ef 23 9a 7b 32 1c bc d7 ec cf 17 0c 33 e1 72 3a d7 3b d8 bf 51 f9 27 3c 66 ca a4 74 a6 52 d6 30 3d a0 f5 b2 9a a7 2b 8b 4d 0c 97 1f 31 1f 82 96 66 c5 33 Data Ascii: 3sz!67xpI8O`rAq8,X@zv9(c9S`TS\"]G0KS.oT[w>V`q!i'7Hq:g+BFFoUp.uNo1m<Y~1heHnp_1,fUPVe#{23r:;Q'<ftR0=+M1f3
2024-05-24 06:26:55 UTC	1313	IN	Data Raw: ad 2d 0a 75 60 be 21 01 86 dc 4a c1 61 69 7f 3f a0 9a 66 8a 99 1a b9 74 54 bc ca 4c 7c 26 fe 1f cc 55 1c ac ca 92 fb 51 45 1a 7f 8a 22 3a 22 81 ae 73 fc 54 ce b8 da dc 2b 3c d8 8c e2 57 2a ad a7 82 fc ca 65 55 55 6e 86 a6 c6 5e c4 69 85 4b 83 35 29 02 b0 eb c3 7e 20 c2 22 5d 39 5d 7f b1 80 9d cf 57 ba 04 1b 1e 2e 98 a5 53 ff 00 23 01 dd 05 f8 4b 2d a2 26 ee 51 49 69 62 37 57 72 d4 e6 61 c7 ca cf 85 82 69 fd 57 c0 b1 22 ab 70 8c 2e e0 b4 28 dd 34 54 b2 c2 35 51 c4 4d fb dc a1 9a b5 a4 26 12 a7 a2 5f 4e 62 cc 1d ea 5f 90 a3 e5 95 0f a9 00 11 54 31 6d 05 0b 40 e7 38 0b 5c af 99 de 98 48 fe 8a 07 63 80 b4 ef c4 77 05 02 70 2f 12 dc e5 87 9b 2e 1b 1c 12 f6 25 92 d6 f9 95 6d ac c1 1a 5b 03 c0 98 a8 a1 4e 30 30 4d 42 98 bd f8 95 8a a7 88 68 ce c8 ee 08 5f d0 a8 Data Ascii: -u`!Jai?ftTL\|&UQE":"sT+<W*eUUn^iK5)~ "]9]W.S#K-&QIib7WraiW"p.(4T5QM&_Nb_T1m@8\Hcwp/.%m[N00MBh_
2024-05-24 06:26:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49805	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	609	OUT	GET /images/18783/18783-375x250.jpg HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	768	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:55 GMT Content-Type: image/jpeg Content-Length: 32922 Connection: close Last-Modified: Thu, 23 May 2024 16:00:41 GMT ETag: "664f6829-809a" Expires: Fri, 24 May 2024 16:01:50 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51905 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XCq%2FsGXx6%2FyL5QQohWqp3Lv7xEUxsQ0f2moPxs%2Fg7EvBtzDye%2BVQvksSP1GMhfRLgvBmMSa5Ym7ZZ50pCRRgk9r%2BTzBX60lzobvCn2%2B1dFmQ%2FmTX%2FdZ1QJI99HPCmBrvpEdWzdq9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b3785c9e5c324-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:55 UTC	601	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCw"}!1AQa"q2
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd a9 3f b2 ef ec c8 87 03 e0 f7 86 86 7f bb 61 1f f8 d3 bf e1 97 ff 00 66 75 00 b7 c2 0f 0e f3 df ec 49 fd 0d 7e 18 ff 00 c3 c5 ff 00 6d 78 d0 4a df b4 2e b6 a9 9c 16 97 cb 1e ff 00 f3 ce 8f f8 78 e7 ed af bc ee fd a2 75 a2 00 c8 2a f1 60 0f 53 94 15 f3 10 e2 ba 33 5a 45 d8 fe 87 c4 fd 1d b8 87 0d 24 a7 89 a6 9b f3 b1 fb 99 27 ec c5 fb 34 70 4f c2 0f 0d e4 9f 97 16 8b cf eb 53 5b fe cb 1f b3 8c ab e6 c1 f0 5f c3 d8 3f de d3 d4 d7 e2 c7 c1 6f da b3 fe 0a 43 fb 40 78 f2 cb c0 ff 00 0b 3e 34 78 9e fa fa ea 45 02 e2 d4 46 60 b7 5d eb 97 91 d5 42 af 19 c0 27 90 1b d0 d7 ed cf c0 3f 0d 78 bb c2 3f 0c f4 8f 0f 78 eb c5 37 1a d6 a9 6b a7 43 1d fe a5 79 fe b6 e2 6d a3 73 9c 71 c9 fd 73 5e c6 5f 98 Data Ascii: ??afuI~mxJ.xu*`S3ZE$'4pOS[_?oC@x>4xEF`]B'?x?x7kCymsqs^_
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 3a d4 a5 42 b3 a6 fa 3b 33 89 3f b3 2f c0 a1 c8 f8 53 a1 7d 45 88 ff 00 1a 41 fb 33 fc 0c ef f0 a7 45 3f 5b 35 ff 00 e2 6b bc dc ec 33 8f ca 8f 9f de ab da 54 33 e5 47 09 ff 00 0c d5 f0 2d 0e 7f e1 52 68 43 e9 66 bf fc 4d 32 6f d9 cb e0 5a 21 76 f8 5b a2 2f 4e 5a cd 7f aa d7 7d f3 0e 79 ae 6f e2 d6 85 e2 0f 12 7c 3b d5 f4 1f 0a eb d3 69 5a 8d dd 8b c5 67 a8 c0 46 fb 79 19 48 57 5c f1 90 4d 29 54 94 53 93 35 a5 4e 35 2a a8 37 6b b5 f2 39 e9 7f 67 ff 00 80 e8 de 5b 7c 32 d0 01 ef 8b 48 ff 00 c2 94 7e cf bf 01 c7 4f 86 9a 18 07 ae 2d 90 7f 20 2b f1 77 f6 81 fd a5 3f e0 a4 7f b3 9f c4 8b cf 00 7c 4b f8 cb e2 b8 2e 2d 27 68 ad 6f 64 8d 0c 57 b0 82 4a ca 87 6e d2 48 e0 8a e2 7f e1 e2 df b6 dc 2a 0b fe d0 de 20 e7 fd 88 71 ff 00 a0 57 cf d5 e2 2a 74 6a ba 6e 2f Data Ascii: :B;3?/S}EA3E?[5k3T3G-RhCfM2oZ!v[/NZ}yo\|;iZgFyHW\M)TS5N57k9g[\|2H~O- +w?\|K.-'hodWJnH qW*tjn/
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 48 c9 29 60 88 14 0f f7 69 d1 2b ab 10 cd 5f 57 08 52 a7 1b 41 58 fe 7e c4 62 71 18 ca 8e 75 a6 db f3 d4 1a 54 8c 65 f8 c9 c0 cd 64 78 87 52 d0 e0 8c da eb 17 70 a0 75 1f bb 93 04 90 78 e8 7d 71 f8 f4 ad 2b b0 cc 72 a0 8e 0e 1b d3 a7 1f 8f e9 5f 19 ff 00 c1 59 ff 00 63 8f 89 1f b4 a7 c3 7b 4f 13 7c 1d bf bb 8f c4 7e 1a 13 3c 1a 7c 17 8f 1a ea 10 b0 5d d0 13 b8 2e ee 32 09 e0 1c e2 b1 c4 4a 50 a2 e5 18 dd ae 87 a1 92 e1 28 63 f1 f0 a5 56 a7 22 6f e2 ec 7b 26 b7 fb 3d 7e c9 1e 2a d5 9f 51 d7 fe 18 78 56 e6 e2 46 cc 93 4f a5 c4 ce c7 d4 92 2a ac bf b2 57 ec 3a cc 3e d3 f0 7f c1 cf 8e cd a3 c1 ff 00 c4 9a fc 30 d7 7c 19 fb 4c f8 5f 56 9f 43 d7 34 4f 1a db 5c 5a 3f 95 2a 35 a5 e8 f9 87 38 f9 7e 56 03 a6 e1 d6 aa 0d 33 f6 87 6f 99 f4 ef 19 95 ff 00 af 7b ea f9 Data Ascii: H)`i+_WRAX~bquTedxRpux}q+r_Yc{O\|~<\|].2JP(cV"o{&=~QxVFOW:>0\|L_VC4O\Z?*58~V3o{
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 9b f1 e5 81 dd 27 8c b1 82 4f ee af 0f f9 ff 00 eb d1 fd b5 42 2a ef 0f f8 17 ff 00 10 9b 33 7f f3 3a ff 00 c9 9f f9 9f d0 57 c3 ef 85 7f b3 e7 c2 a7 f2 3e 1e f8 2b 42 d2 5a 73 86 1a 75 9c 69 bb 1d 09 2a 07 b7 e7 5e 89 67 3c 6f b1 12 40 c0 8c a1 03 b5 7f 33 f7 be 37 f8 97 65 aa 35 95 f7 8d f5 c8 2e 60 95 d5 a3 93 53 b8 8d e3 90 60 9c e5 b2 0f 20 e3 1d bd 09 af e8 7b f6 55 b8 9f 51 fd 9f 7c 13 75 73 2b 4b 28 f0 ed a7 ef 26 72 cc 49 81 72 49 3c 92 4f 73 5e be 4f 9a 51 c7 b7 18 c7 96 dd 0f cd 3c 47 f0 ff 00 1f c1 d1 a1 5b 15 89 f6 de d5 36 99 e9 ca 00 1c 52 d0 33 8e 68 af 6d 6c 7e 50 04 f0 6a 1b c4 0f 0b 29 a9 1c a8 1f 33 63 9a c4 f1 e7 89 74 ef 0c 78 6a fb 59 d4 ee 04 50 5a da 3c d3 3b 76 45 52 58 fe 40 d2 93 e4 57 34 a3 4e 55 6a a8 45 5d b6 7e 55 7f c1 7f Data Ascii: 'OB3:W>+BZsui^g<o@37e5.`S` {UQ\|us+K(&rIrI<Os^OQ<G[6R3hml~Pj)3ctxjYPZ<;vERX@W4NUjE]~U
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 99 46 22 b2 b4 d4 e1 67 6c 73 c2 2b 64 fe 55 da ab 8c 80 65 07 29 90 40 ea 3d 6b f3 73 fe 09 3d ff 00 04 ba f1 d7 c1 9f 17 27 ed 05 fb 40 58 b5 ae bf 1c 26 3d 1f 46 8a 50 46 9e ac 46 58 90 4e f9 08 f9 7a e3 04 d7 e8 f5 ac 02 2f 98 29 1b 97 bf 72 3f 97 15 f4 38 49 d4 ab 49 4a 4a cf b1 f8 8f 13 e5 d9 76 59 99 bc 3e 0e b7 b5 8a fb 5d c7 ca b9 40 c4 7f 17 23 1f e7 15 95 aa d8 78 7d dd a7 d6 6d ad dd 76 fc ad 38 19 5f 50 4f 53 eb f8 56 ac ec be 5e 7c bd e0 b6 02 9e 73 ef 5f 9d bf f0 54 4f 14 7f c1 44 3e 21 78 a2 5f 84 1f b3 47 c1 8f 13 db 78 66 18 f6 de f8 93 4d 78 12 4b c2 41 1b 61 25 c1 08 01 39 cf 39 02 9e 32 af b1 a5 cd cb 77 d8 cf 87 f2 c7 99 e3 e3 43 da aa 49 ef 26 ed 63 ec 2d 53 e3 4f ec c9 e1 db f7 d3 b5 3f 1b f8 5a de 55 6c 3c 73 ea 16 e0 af b1 05 b3 Data Ascii: F"gls+dUe)@=ks='@X&=FPFFXNz/)r?8IIJJvY>]@#x}mv8_POSV^\|s_TOD>!x_GxfMxKAa%992wCI&c-SO?ZUl<s
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: c5 1e 0a fd 9f f5 cd 53 4a d4 75 a7 96 c6 ed 16 1d b3 2e d1 f3 8c b8 f9 70 31 8e b5 fb 01 fb 33 f8 67 56 f0 7f c1 3f 0a f8 73 c4 1a 7b 5b df 59 68 96 d1 5d 42 df 7a 19 44 4a 19 3d 06 3d ab c1 c9 f0 d5 28 63 6a cd c6 c9 9f b5 f8 a3 9f 65 f9 af 0a e5 94 e9 54 53 9c 23 69 6b aa d0 f4 51 d2 99 2b 7c bf 2b 62 9c ac a5 41 dd 4d 95 51 90 8f e5 5f 4b e8 7e 0d ea 56 98 b6 d2 c4 b1 c0 ef fc ff 00 99 af 8e ff 00 e0 b1 bf b4 64 df 05 7f 64 ed 4f 43 d1 2e bc 9d 5b c5 52 26 95 61 89 36 b2 89 38 77 04 ff 00 b1 9e 3f da af b0 ae 5b 6d bb c8 24 2b 81 ce e1 db 15 f9 1f ff 00 05 ba d2 be 3d 7c 60 fd a1 f4 cf 05 78 4f e1 4f 89 35 0d 03 c3 da 5a cd 1d dd 8e 9b 2c 96 f7 13 b9 cb 9f 95 48 ca 2e 14 57 9f 99 ce ac 30 52 51 57 6c fb bf 0d b0 18 1c 77 16 61 fe b9 24 a9 c5 f3 3b e9 Data Ascii: SJu.p13gV?s{[Yh]BzDJ==(cjeTS#ikQ+\|+bAMQ_K~VddOC.[R&a68w?[m$+=\|`xOO5Z,H.W0RQWlwa$;
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 12 f8 32 da 4b af 12 78 d3 44 b6 44 46 2c 7e d0 92 38 c7 65 55 3d 4f b8 af 9b 7c 6f ff 00 05 59 f0 be 81 aa cb a7 78 57 e0 b5 d6 a1 12 5c 18 ad ae ae af 52 14 b8 3f de 55 0b 91 58 4e 95 28 ad 59 b5 39 e2 a5 b1 fd 1f c5 f1 bf e0 a5 a1 2d ff 00 0b 57 c3 aa a1 70 48 d5 a1 1c 9f f8 15 59 5f 8d bf 07 c0 dc ff 00 15 3c 3e ab d8 9d 5a 2f ea d5 fc e4 78 43 fe 0a 4f ab ea 33 c7 27 8a 7f 66 f9 ec ec a7 1f f1 f7 67 a8 a3 b4 79 3f 7b 6b 8c 37 a6 3d 6b da be 1b fe d2 bf 06 fe 29 dd 0d 2b 4c d5 62 b5 bf 8c 05 36 3a c4 22 0b 81 c8 c0 db d1 c6 71 f3 0a 70 a7 45 e8 9e a3 9c 2b c7 59 a3 f7 36 4f 8d bf 07 36 ed 1f 15 3c 3a 70 79 c6 af 0f ff 00 15 50 b7 c5 ef 83 72 3e 4f c4 bf 0e 30 c7 53 ab c3 ff 00 c5 57 e3 ed b4 96 c1 f1 24 70 fc bc 6d 55 00 95 f5 03 1c d5 97 5b 74 c2 fd Data Ascii: 2KxDDF,~8eU=O\|oYxW\R?UXN(Y9-WpHY_<>Z/xCO3'fgy?{k7=k)+Lb6:"qpE+Y6O6<:pyPr>O0SW$pmU[t
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: 49 fe 0d 52 dc 7e 81 ab f2 89 2e 60 1d 62 8c 7b ec 04 53 be d7 6d bb 03 ec e7 d7 f7 7d 7f 4a 9f ec ea 4e 5c cf 73 7f ed 2c 44 69 7b 28 c9 db d7 43 f5 be 2f 8c bf 06 c2 8f 2f e2 7f 87 d4 01 8f 97 58 87 ff 00 8a a2 bf 24 7e d5 6f fd cb 71 ff 00 6c e8 aa 78 14 d9 83 c4 ca e7 9f 2b cc bf 33 b7 5e 9c d0 d2 a9 1f bd 63 ed 59 56 fa a3 4c 72 ae 76 8e 80 d5 79 f5 67 79 5e 29 09 01 46 46 0d 7a 9c b6 38 b9 d9 b9 0d ca 09 36 ab 73 dc 13 4f fb 4a ee 31 bc db 0f f0 90 78 cd 73 36 fa ac 46 7d ff 00 30 e7 1c b7 4a 92 f7 53 91 f2 90 48 14 85 dc 43 8c f1 d7 3c fa 7f 5a 4d a5 ab 29 37 2d 11 bc 35 4f 36 5f 2d a5 23 07 03 6f 39 3f e0 3f ad 1a 96 bb 6b a5 db 49 75 a8 5f c3 69 04 23 32 5d dc 4a 12 31 ea 72 48 c8 f4 af 9f 3c 7b fb 63 78 7f 4a d4 a5 f0 27 c2 bb 47 d6 f5 d6 77 4b Data Ascii: IR~.`b{Sm}JN\s,Di{(C//X$~oqlx+3^cYVLrvygy^)FFz86sOJ1xs6F}0JSHC<ZM)7-5O6_-#o9??kIu_i#2]J1rH<{cxJ'GwK
2024-05-24 06:26:55 UTC	1369	IN	Data Raw: a4 1f 8a 5a c6 df fb 07 c7 fe 35 f4 b2 4f 60 48 cd ec 67 1d b3 48 d7 b6 c1 fc b1 34 58 3d 4e ea 3d bc c3 d9 d3 e8 7c d6 3f e0 9a 1e 0d 8f e7 4f 8a 7a c0 3e bf d9 a9 fe 34 a9 ff 00 04 d4 f0 b4 47 fe 4a de b1 21 23 a7 d8 23 e3 f5 af a5 04 f6 aa b9 fb 4c 44 7f bd 41 bc b3 41 b9 a7 88 0e e7 75 2f 6f 51 89 46 37 d0 f9 be 2f f8 26 c7 84 e1 39 6f 8b 5a c3 0c f7 d3 e3 38 fd 6a 51 ff 00 04 de f0 7e 3e 5f 8a fa b1 3e 9f d9 71 8f eb 5f 44 ff 00 69 69 c3 fe 5f 62 ff 00 be e9 0e a5 a7 0c 15 bc 8b fe fb a3 da d4 5d 46 a3 dc f9 a2 ef fe 09 91 e1 39 26 fb 41 f8 b5 ac 2a 8e a1 6c 62 cf ea 69 8b ff 00 04 cd f0 5b 36 0f c5 df 10 1f fb 72 84 d7 d3 0d aa d9 03 b8 de c2 31 dc 3d 34 6a d6 04 e4 6a 11 1f fb 68 0d 3f 6f 31 aa 70 b9 f3 33 ff 00 c1 30 7c 23 76 e5 25 f8 c7 af 85 1d Data Ascii: Z5O`HgH4X=N=\|?Oz>4GJ!##LDAAu/oQF7/&9oZ8jQ~>_>q_Dii_b]F9&A*lbi[6r1=4jjh?o1p30\|#v%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49807	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:54 UTC	626	OUT	GET /awl/3393/13376/18529,18710,18783/xzzxzzxzzx.GIF HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:55 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Etag: "90fe9b8a8142548fdfab29f59cb0a164a0eaef81" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QyYF28i35RW%2Bi5uXP2ohe3pzJXsjFgaWKviC9dWvMhRy%2Fg4FqvZOt%2FXMS8QDyPjHzykZumVATmo0kB%2Fe9pmryC7TW9CW6uKKd8T7sFD2CgCZkDysP9%2FSoFxbGmuMBfULzvLlpWHg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b3785cf0b42d1-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:55 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49812	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	841	OUT	GET /pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	639	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9139 X-XSS-Protection: 0 Date: Thu, 23 May 2024 19:49:19 GMT Expires: Thu, 06 Jun 2024 19:49:19 GMT Cache-Control: public, max-age=1209600 ETag: 11731753506229902092 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Age: 38256 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:26:55 UTC	751	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 2c 76 3b 61 3a 7b 66 6f 72 28 76 61 72 20 63 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 7a 3d 6b 2c 41 3d 30 3b 41 3c 63 61 2e 6c 65 6e 67 74 68 3b 41 2b 2b 29 69 66 28 7a 3d 7a 5b 63 61 5b 41 5d 5d 2c 6e 75 6c Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],nul
2024-05-24 06:26:55 UTC	1390	IN	Data Raw: 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 48 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 48 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 69 61 3d 2d 31 21 3d 65 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 45 28 22 45 64 67 65 22 29 3b 21 45 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 47 28 29 3b 47 28 29 3b 45 28 22 53 61 66 61 72 69 22 29 26 26 28 47 28 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 28 46 28 29 3f 43 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 45 Data Ascii: l(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLowerCase().indexOf("webkit")&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?C("Microsoft Edge"):E
2024-05-24 06:26:55 UTC	1390	IN	Data Raw: 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 4b 28 63 29 29 7b 4c 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4c 3d 6e 75 6c 6c 7d 28 61 3d 4c 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 3d 7b 7d 29 2c 61 3d 62 29 3a 61 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 3f 2e 5b 32 5d 7d 3b 76 61 72 20 4d 3d 77 69 6e 64 6f 77 3b 76 61 72 20 75 61 3d 2f 23 28 52 3f 53 29 2d 28 2e 2a 29 2f 2c 7a 61 3d 2f 5e 28 5c 64 2b 29 2d 28 2e 2a 29 2f 3b 63 6c 61 73 73 20 41 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 Data Ascii: b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&K(c)){L=c;break b}}catch(c){}L=null}(a=L)?((b=a.esf_propArray)\|\|(b=a.esf_propArray={}),a=b):a=null;return a?.[2]};var M=window;var ua=/#(R?S)-(.)/,za=/^(\d+)-(.)/;class Aa{constructor(a,b){this
2024-05-24 06:26:55 UTC	1390	IN	Data Raw: 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 69 3d 61 7c 7c 6b 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 68 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 51 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e Data Ascii: nstructor(){var a=window;this.h=[];this.i=a\|\|k;let b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.h=a.google_js_reporting_queue,b=a.google_measure_js_timing);this.g=Q()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return
2024-05-24 06:26:55 UTC	1390	IN	Data Raw: 3d 4b 61 28 70 5b 6c 5d 2c 61 2e 69 2c 22 2c 24 22 29 3b 69 66 28 67 29 7b 67 3d 66 2b 67 3b 69 66 28 64 3e 3d 67 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 67 2e 6c 65 6e 67 74 68 3b 63 2b 3d 67 3b 66 3d 61 2e 69 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 68 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 66 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 53 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 Data Ascii: =Ka(p[l],a.i,",$");if(g){g=f+g;if(d>=g.length){d-=g.length;c+=g;f=a.i;break}b=null==b?h:b}}}a="";null!=b&&(a=f+"trn="+b);return c+a}class S{constructor(){this.i="&";this.h={};this.j=0;this.g=[]}};function T(a){let b=a.toString();a.name&&-1==b.indexOf(a.na
2024-05-24 06:26:55 UTC	1390	IN	Data Raw: 69 67 69 6e 73 5b 71 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 74 3d 6c 3b 6c 65 74 20 4f 3d 6e 65 77 20 44 61 28 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 3b 67 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 5a 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 78 3d 5a 3b 30 3c 3d 78 3b 2d 2d 78 29 7b 76 61 72 20 75 3d 74 5b 78 5d 3b 21 67 26 26 42 61 2e 74 65 73 74 28 75 2e 75 72 6c 29 26 26 28 67 3d 75 29 3b 69 66 28 75 2e 75 72 6c 26 26 21 75 2e 6c 29 7b 4f 3d 75 3b 62 72 65 61 6b 7d 7d 75 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 57 61 3d 74 2e 6c 65 6e 67 74 68 26 26 0a 74 5b 5a 5d 2e 75 72 6c 3b 30 21 3d 4f 2e 64 65 70 74 68 26 26 57 61 26 26 28 75 3d 74 5b 5a 5d 29 3b 65 3d 6e 65 77 20 43 61 28 4f 2c 75 29 3b 69 66 28 65 2e 68 29 7b Data Ascii: igins[q-1]\|\|"",x.l=!0)}var t=l;let O=new Da(k.location.href,!1);g=null;const Z=t.length-1;for(x=Z;0<=x;--x){var u=t[x];!g&&Ba.test(u.url)&&(g=u);if(u.url&&!u.l){O=u;break}}u=null;const Wa=t.length&&t[Z].url;0!=O.depth&&Wa&&(u=t[Z]);e=new Ca(O,u);if(e.h){
2024-05-24 06:26:55 UTC	1390	IN	Data Raw: 2d 32 2e 30 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 55 61 28 61 29 7b 61 3d 6e 75 6c 6c 3d 3d 3d 61 3f 22 6e 75 6c 6c 22 3a 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 49 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 76 61 72 20 63 3d 6b 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 63 26 26 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 7b 74 72 79 7b 62 3d 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6d 7d 29 7d 63 61 74 63 68 28 64 29 7b 6b 2e 63 6f 6e 73 6f 6c 65 26 26 6b 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 64 2e Data Ascii: -2.0*/function Ua(a){a=null===a?"null":void 0===a?"undefined":a;if(void 0===I){var b=null;var c=k.trustedTypes;if(c&&c.createPolicy){try{b=c.createPolicy("goog#html",{createHTML:m,createScript:m,createScriptURL:m})}catch(d){k.console&&k.console.error(d.
2024-05-24 06:26:55 UTC	48	IN	Data Raw: 6f 72 3f 2e 28 61 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 61 3b 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: or?.(a);else throw a;};}).call(this);</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49810	157.240.0.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	1311	OUT	GET /signals/config/154908708357560?v=2.9.156&r=stable&domain=pjnewsletter.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 06:26:55 UTC	1733	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-05-24 06:26:55 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49813	64.233.184.155	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	868	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-71705037-13&cid=1010184661.1716532012&jid=1346688145&gjid=165817769&_gid=297082714.1716532012&_u=YADAAEAAAAAAACAAI~&z=455863173 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pjnewsletter.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 24 May 2024 06:26:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:26:55 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49815	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	598	OUT	GET /manifest.json HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	804	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 888b378979041a3c-EWR CF-Cache-Status: HIT Age: 311250 Cache-Control: max-age=14400 Last-Modified: Mon, 20 May 2024 15:54:59 GMT Vary: Accept-Encoding cf-apo-via: tcache cf-edge-cache: cache,platform=wordpress x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TN0C0XSL8mQ8wV%2BE6VAXZwvHar5p81DXq4BXNeZwVxGv0DayCagrIB91gN9nCrQN3Tq3fGUX4AmKKEbyLfx8cF7Oo3pYprsKUC6suSx8AbNa3G9gqvLznkbjRbEFjgvxZgA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-24 06:26:55 UTC	342	IN	Data Raw: 31 34 66 0d 0a 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 50 61 74 72 69 6f 74 20 4a 6f 75 72 6e 61 6c 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 50 61 74 72 69 6f 74 20 4a 6f 75 72 6e 61 6c 22 2c 0a 20 20 22 73 74 61 72 74 5f 75 72 6c 22 3a 20 22 2f 22 2c 0a 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 66 66 66 22 2c 0a 20 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 54 68 65 20 6f 74 68 65 72 20 73 69 64 65 20 6f 66 20 74 68 65 20 73 74 6f 72 79 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 34 2f 30 Data Ascii: 14f{ "name": "Patriot Journal", "short_name": "Patriot Journal", "start_url": "/", "display": "standalone", "background_color": "#fff", "description": "The other side of the story", "icons": [ { "src": "/wp-content/uploads/2024/0
2024-05-24 06:26:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49819	104.16.203.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	814	OUT	GET /Tag.vrfy?time=240&id=0d94d46c-3cdb-4ae0-a09a-420aae9253fe&rand=16024&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=-300&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&kw=&bp=%7B%7D HTTP/1.1 Host: engine.4dsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	1367	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 888b3789ab3a7cf0-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: private, no-transform Set-Cookie: IKSR={}; path=/; SameSite=None; secure Vary: Accept-Encoding Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version P3P: CP="CAO PSA OUR IND" Set-Cookie: __INF_CC=; expires=Tue, 14-May-2024 06:26:55 GMT; path=/ Set-Cookie: INF_DFL8=false; path=/; SameSite=None; secure Set-Cookie: IUID=604bb3ab-a770-46f1-9190-d795b2aaca34; expires=Wed, 24-May-2034 06:26:56 GMT; path=/; SameSite=None; secure Set-Cookie: ISSH=73827E; path=/; SameSite=None; secure Set-Cookie: VMI=; path=/; SameSite=None; secure Set-Cookie: CHN=#[]; expires=Wed, 24-May-2034 06:26:56 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSSH=#{}; expires=Wed, 24-May-2034 06:26:56 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSRH=#{}; expires=Wed, 24-May-2034 06:26:56 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2024-05-24T06:26:55.6674781Z"}; expires=Wed, 24-May-2034 06:26:56 GMT; path=/; SameSite=None; secure
2024-05-24 06:26:56 UTC	1253	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 4c 55 3d 23 35 2f 32 34 2f 32 30 32 34 20 36 3a 32 36 3a 35 35 20 41 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 36 3a 35 36 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 45 41 4c 43 3d 23 35 2f 32 34 2f 32 30 32 34 20 36 3a 32 36 3a 35 35 20 41 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 36 3a 35 36 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 Data Ascii: Set-Cookie: ILPLU=#5/24/2024 6:26:55 AM; expires=Wed, 24-May-2034 06:26:56 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: ILEALC=#5/24/2024 6:26:55 AM; expires=Wed, 24-May-2034 06:26:56 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie:
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 32 61 66 31 0d 0a 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4d 65 64 69 61 20 3d 20 7b 22 49 74 65 6d 73 22 3a 5b 7b 22 49 73 4d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 5a 6f 6e 65 49 64 22 3a 38 31 38 30 34 2c 22 53 69 74 65 49 64 22 3a 32 32 36 39 36 2c 22 5a 6f 6e 65 4e 61 6d 65 22 3a 22 42 65 66 6f 72 65 20 59 6f 75 20 47 6f 20 38 31 38 30 34 22 2c 22 53 63 72 69 70 74 55 72 69 22 3a 22 62 2e 6a 73 3f 76 3d 34 22 2c 22 43 6c 69 65 6e 74 53 69 64 65 46 69 6c 74 65 72 73 22 3a 5b 5d 2c 22 4d 65 64 69 61 54 79 70 65 22 3a 22 42 65 66 6f 72 65 59 6f 75 47 6f 22 2c 22 53 65 74 74 69 6e 67 73 22 3a 7b 22 42 61 72 54 79 70 65 22 3a 36 2c 22 43 6c 6f 73 65 42 75 74 74 6f 6e 53 74 79 6c 65 22 3a Data Ascii: 2af1 g367CB268B1094004A3689751E7AC568F.Media = {"Items":[{"IsMobile":false,"ZoneId":81804,"SiteId":22696,"ZoneName":"Before You Go 81804","ScriptUri":"b.js?v=4","ClientSideFilters":[],"MediaType":"BeforeYouGo","Settings":{"BarType":6,"CloseButtonStyle":
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 6c 6c 2c 22 45 78 74 72 61 54 72 61 63 6b 69 6e 67 55 72 6c 73 22 3a 6e 75 6c 6c 2c 22 52 65 64 69 72 65 63 74 22 3a 33 2c 22 52 65 64 69 72 65 63 74 55 72 6c 22 3a 22 2f 52 65 64 69 72 65 63 74 2e 65 6e 67 3f 4d 65 64 69 61 53 65 67 6d 65 6e 74 49 64 3d 37 39 31 39 32 26 64 63 69 64 3d 31 5f 63 74 78 5f 31 39 34 34 37 66 30 64 2d 36 63 31 64 2d 34 36 39 62 2d 39 30 65 64 2d 37 31 36 65 39 30 31 33 33 32 34 32 26 76 6d 49 64 3d 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 26 61 62 72 3d 66 61 6c 73 65 26 74 69 6d 65 5a 6f 6e 65 4f 66 66 73 65 74 3d 2d 33 30 30 26 64 73 74 3d 54 72 75 65 26 76 3d 64 6e 31 39 44 5a 78 48 71 4f 5a 58 30 30 71 44 44 36 32 32 67 64 43 31 54 51 62 4a 72 76 79 50 54 Data Ascii: ll,"ExtraTrackingUrls":null,"Redirect":3,"RedirectUrl":"/Redirect.eng?MediaSegmentId=79192&dcid=1_ctx_19447f0d-6c1d-469b-90ed-716e90133242&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=-300&dst=True&v=dn19DZxHqOZX00qDD622gdC1TQbJrvyPT
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 66 63 36 69 30 72 50 32 36 66 7a 79 43 34 5f 53 49 5f 4d 51 4f 6f 74 36 68 32 77 32 26 6b 77 3d 26 6d 77 3d 31 30 32 34 26 6d 68 3d 37 36 38 26 61 74 3d 22 2c 22 54 72 61 63 6b 69 6e 67 55 72 6c 22 3a 6e 75 6c 6c 2c 22 52 65 64 69 72 65 63 74 55 72 6c 54 72 61 6e 73 66 6f 72 6d 22 3a 22 72 65 64 69 72 65 63 74 52 65 73 70 6f 6e 73 65 42 75 69 6c 64 65 72 54 72 61 6e 73 66 6f 72 6d 22 2c 22 54 72 61 63 6b 69 6e 67 55 72 6c 54 72 61 6e 73 66 6f 72 6d 22 3a 6e 75 6c 6c 2c 22 52 65 64 69 72 65 63 74 48 6f 73 74 22 3a 6e 75 6c 6c 2c 22 52 65 64 69 72 65 63 74 48 6f 73 74 55 72 6c 22 3a 6e 75 6c 6c 2c 22 41 75 74 6f 50 6c 61 79 41 75 64 69 6f 22 3a 66 61 6c 73 65 2c 22 50 61 72 74 6e 65 72 41 75 63 74 69 6f 6e 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 56 6f 6c 75 6d Data Ascii: fc6i0rP26fzyC4_SI_MQOot6h2w2&kw=&mw=1024&mh=768&at=","TrackingUrl":null,"RedirectUrlTransform":"redirectResponseBuilderTransform","TrackingUrlTransform":null,"RedirectHost":null,"RedirectHostUrl":null,"AutoPlayAudio":false,"PartnerAuctionType":null,"Volum
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 52 7a 44 5f 2d 6c 56 73 55 52 46 4b 64 68 49 34 50 77 34 6f 49 61 6b 41 77 65 53 31 36 55 78 79 6e 39 75 36 67 6c 73 63 6c 31 6d 66 63 36 69 30 72 50 32 36 66 7a 79 43 34 5f 53 49 5f 4d 51 4f 6f 74 36 68 32 77 32 22 2c 22 50 6f 70 55 6e 64 65 72 44 69 73 70 6c 61 79 54 61 72 67 65 74 69 6e 67 22 3a 6e 75 6c 6c 2c 22 49 73 43 6c 69 65 6e 74 53 69 64 65 4d 65 64 69 61 53 6f 75 72 63 65 49 74 65 6d 22 3a 66 61 6c 73 65 2c 22 4d 65 64 69 61 41 6c 6c 6f 77 73 46 75 6c 6c 73 63 72 65 65 6e 50 61 67 65 75 6e 64 65 72 22 3a 74 72 75 65 2c 22 5a 6f 6e 65 41 63 63 65 70 74 73 46 75 6c 6c 73 63 72 65 65 6e 50 61 67 65 75 6e 64 65 72 22 3a 74 72 75 65 2c 22 50 6c 61 63 65 6d 65 6e 74 49 6e 63 6c 75 64 65 49 6e 50 61 67 65 50 75 73 68 22 3a 74 72 75 65 2c 22 43 6c 69 Data Ascii: RzD_-lVsURFKdhI4Pw4oIakAweS16Uxyn9u6glscl1mfc6i0rP26fzyC4_SI_MQOot6h2w2","PopUnderDisplayTargeting":null,"IsClientSideMediaSourceItem":false,"MediaAllowsFullscreenPageunder":true,"ZoneAcceptsFullscreenPageunder":true,"PlacementIncludeInPagePush":true,"Cli
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 35 3a 31 36 3a 32 32 5a 22 2c 22 4c 61 73 74 55 70 64 61 74 65 64 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 55 73 65 52 65 6d 6f 74 65 4d 65 64 69 61 48 6f 73 74 22 3a 22 66 61 6c 73 65 22 2c 22 55 73 65 50 6f 70 43 75 73 74 6f 6d 48 6f 73 74 22 3a 22 66 61 6c 73 65 22 2c 22 50 6f 70 43 75 73 74 6f 6d 48 6f 73 74 55 72 6c 22 3a 22 22 2c 22 50 75 62 6c 69 73 68 65 72 44 6f 6d 61 69 6e 41 6c 69 61 73 55 72 6c 22 3a 22 65 6e 67 69 6e 65 2e 34 64 73 70 6c 79 2e 63 6f 6d 22 2c 22 57 69 64 74 68 22 3a 38 30 30 2c 22 48 65 69 67 68 74 22 3a 36 30 30 7d 2c 22 41 64 62 6c 6f 63 6b 52 65 71 75 65 73 74 22 3a 66 61 6c 73 65 2c 22 43 6c 69 65 6e 74 53 69 64 65 46 69 6c 74 65 72 73 22 3a 5b 5d 2c 22 42 61 6e 6e 65 72 44 69 76 22 3a 66 61 6c 73 65 2c 22 56 61 73 74 54 61 67 Data Ascii: 5:16:22Z","LastUpdatedDate":null,"UseRemoteMediaHost":"false","UsePopCustomHost":"false","PopCustomHostUrl":"","PublisherDomainAliasUrl":"engine.4dsply.com","Width":800,"Height":600},"AdblockRequest":false,"ClientSideFilters":[],"BannerDiv":false,"VastTag
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 47 76 55 50 4d 7a 41 79 4e 65 79 63 38 69 38 6b 44 6c 4e 4d 63 75 75 79 41 69 49 66 41 74 33 76 43 44 64 5f 30 50 69 4e 79 62 64 61 48 77 65 79 39 58 32 62 72 4c 70 69 37 59 76 69 4f 72 66 6b 4b 68 4e 71 72 51 69 33 38 39 38 4b 5a 4c 42 75 30 22 2c 22 41 75 74 6f 50 6c 61 79 41 75 64 69 6f 22 3a 66 61 6c 73 65 2c 22 50 61 72 74 6e 65 72 41 75 63 74 69 6f 6e 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 50 6f 70 55 6e 64 65 72 44 69 73 70 6c 61 79 54 61 72 67 65 74 69 6e 67 22 3a 6e 75 6c 6c 2c 22 52 65 64 69 72 65 63 74 22 3a 33 2c 22 50 61 73 73 42 61 63 6b 49 64 22 3a 6e 75 6c 6c 2c 22 44 61 74 61 43 6f 6e 74 65 78 74 49 64 22 3a 22 31 5f 63 74 78 5f 31 39 34 34 37 66 30 64 2d 36 63 31 64 2d 34 36 39 62 2d 39 30 65 64 2d 37 31 36 65 39 30 31 33 33 32 34 32 22 2c Data Ascii: GvUPMzAyNeyc8i8kDlNMcuuyAiIfAt3vCDd_0PiNybdaHwey9X2brLpi7YviOrfkKhNqrQi3898KZLBu0","AutoPlayAudio":false,"PartnerAuctionType":null,"PopUnderDisplayTargeting":null,"Redirect":3,"PassBackId":null,"DataContextId":"1_ctx_19447f0d-6c1d-469b-90ed-716e90133242",
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 45 7a 63 5a 4a 31 42 68 73 67 4a 72 49 58 79 42 68 51 32 63 78 65 44 5f 78 67 4a 66 38 67 32 4f 74 67 71 66 4d 4c 32 36 54 51 45 49 6a 5a 63 44 65 55 73 69 67 5f 6d 39 66 6a 69 4c 47 53 71 57 72 52 7a 71 34 53 4f 50 67 42 64 69 6a 70 6c 69 45 62 53 62 6a 4e 75 34 72 6a 30 67 69 30 63 72 7a 6c 71 4d 73 35 77 7a 52 45 4c 4e 52 6b 73 48 71 36 6d 31 77 4d 31 32 79 6b 44 79 79 53 6f 53 70 37 53 51 50 47 47 32 35 63 6a 47 76 55 50 4d 7a 41 79 4e 65 79 63 38 69 38 6b 44 6c 4e 4d 63 75 75 79 41 69 49 66 41 74 33 76 43 44 64 5f 30 50 69 4e 79 62 64 61 48 77 65 79 39 58 32 62 72 4c 70 69 37 59 76 69 4f 72 66 6b 4b 68 4e 71 72 51 69 33 38 39 38 4b 5a 4c 42 75 30 26 6b 77 3d 26 6d 77 3d 38 30 30 26 6d 68 3d 36 30 30 26 61 74 3d 22 2c 22 54 72 61 63 6b 69 6e 67 55 72 Data Ascii: EzcZJ1BhsgJrIXyBhQ2cxeD_xgJf8g2OtgqfML26TQEIjZcDeUsig_m9fjiLGSqWrRzq4SOPgBdijpliEbSbjNu4rj0gi0crzlqMs5wzRELNRksHq6m1wM12ykDyySoSp7SQPGG25cjGvUPMzAyNeyc8i8kDlNMcuuyAiIfAt3vCDd_0PiNybdaHwey9X2brLpi7YviOrfkKhNqrQi3898KZLBu0&kw=&mw=800&mh=600&at=","TrackingUr
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 58 2d 46 6f 72 77 61 72 64 65 64 2d 46 6f 72 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 73 65 63 2d 63 68 2d 75 61 22 3a 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 2c 22 58 2d 41 64 73 63 6f 72 65 2d 53 74 61 74 75 73 22 3a 22 6e 75 6c 6c 22 2c 22 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 22 3a 22 68 74 74 70 73 22 2c 22 43 46 2d 56 69 73 69 74 6f 72 22 3a 22 7b 5c 22 73 63 68 65 6d 65 Data Ascii: 6 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","X-Forwarded-For":"8.46.123.175","sec-ch-ua":"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\"","X-Adscore-Status":"null","X-Forwarded-Proto":"https","CF-Visitor":"{\"scheme
2024-05-24 06:26:56 UTC	49	IN	Data Raw: 20 3a 20 27 2f 2f 70 69 78 65 6c 2e 70 7a 6b 69 65 2e 63 6f 6d 2f 66 70 27 2c 20 50 6c 61 63 65 50 69 78 65 6c 20 3a 20 66 61 6c 73 65 20 7d 0d 0a Data Ascii: : '//pixel.pzkie.com/fp', PlacePixel : false }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49814	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	2208	OUT	GET /pagead/ads?client=ca-pub-7666278362879166&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1716221016&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&pra=5&wgl=1&easpi=0&aihb=0&asro=0&aslmct=0.7&asamct=0.7&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010319&bpp=6&bdt=2780&idt=2658&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8601797745957&frm=20&pv=2&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y= [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:26:56 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 06:41:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 06:26:56 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 06:26:56 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 35 2c 20 30 2e 36 30 30 30 30 30 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-fil
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 70 61 64 64 69 6e 67 3a 20 30 20 36 70 78 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 38 70 78 20 31 32 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 31 35 29 2c 20 30 70 78 20 34 70 78 20 34 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 33 29 3b 7d 68 74 6d 6c 20 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 2e 74 6f 70 72 6f 77 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 68 65 69 67 68 74 3a 20 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 2e 62 74 6e 20 7b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c Data Ascii: f;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: tabl
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 5c 78 32 32 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 5c 78 33 64 5c 78 32 32 30 34 33 66 31 30 34 62 2d 30 36 34 62 2d 34 38 65 66 2d 38 39 39 38 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 63 61 72 64 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 74 6f 70 72 6f 77 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 64 69 73 6d 69 73 73 2d 62 75 74 74 6f 6e 5c 78 32 32 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 62 74 6e 20 73 6b 69 70 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 73 74 79 6c 65 5c Data Ascii: ead\x3e\x3cbody\x3e\x3cdiv id\x3d\x22ad_position_box\x22 data-magicword\x3d\x22043f104b-064b-48ef-8998\x22\x3e\x3cdiv id\x3d\x22card\x22\x3e\x3cdiv class\x3d\x22toprow\x22\x3e\x3cdiv id\x3d\x22dismiss-button\x22 class\x3d\x22btn skip\x22\x3e\x3cdiv style\
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 32 32 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 6e 61 6d 65 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 73 63 72 6f 6c 6c 69 6e 67 5c 78 33 64 5c 78 32 32 6e 6f 5c 78 32 32 20 73 72 63 5c 78 33 64 5c 78 32 32 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 78 32 32 66 72 61 6d 65 62 6f 72 64 65 72 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 77 69 64 74 68 5c 78 33 64 5c 78 32 32 38 30 34 70 78 5c 78 32 32 20 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 35 37 37 70 78 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 20 77 69 64 74 68 3a 20 38 30 34 70 78 3b 20 68 65 69 67 68 74 3a 20 35 37 37 70 78 3b 5c 78 32 32 Data Ascii: 22 id\x3d\x22ad_iframe\x22 name\x3d\x22ad_iframe\x22 scrolling\x3d\x22no\x22 src\x3d\x22about:blank\x22frameborder\x3d\x220\x22width\x3d\x22804px\x22 height\x3d\x22577px\x22style\x3d\x22border: 0px; vertical-align: bottom; width: 804px; height: 577px;\x22
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 65 54 28 29 29 3b 6e 75 6c 6c 5c 5c 78 33 64 5c 5c 78 33 64 65 5c 5c 78 32 36 5c 5c 78 32 36 77 69 6e 64 6f 77 2e 65 78 74 65 72 6e 61 6c 5c 5c 78 32 36 5c 5c 78 32 36 28 65 5c 5c 78 33 64 77 69 6e 64 6f 77 2e 65 78 74 65 72 6e 61 6c 2e 70 61 67 65 54 29 3b 65 5c 5c 78 32 36 5c 5c 78 32 36 28 77 69 6e 64 6f 77 2e 6a 73 74 69 6d 69 6e 67 2e 70 74 5c 5c 78 33 64 65 29 7d 63 61 74 63 68 28 67 29 7b 7d 76 61 72 20 68 5c 5c 78 33 64 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 3b 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6a 73 74 69 6d 69 6e 67 2e 6a 73 45 72 72 6f 72 5c 5c 78 33 64 31 3b 5c 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 5c 78 32 32 5c 5c 78 33 64 5c 5c 78 33 64 74 79 70 65 6f 66 20 68 Data Ascii: eT());null\\x3d\\x3de\\x26\\x26window.external\\x26\\x26(e\\x3dwindow.external.pageT);e\\x26\\x26(window.jstiming.pt\\x3de)}catch(g){}var h\\x3dwindow.onerror;window.onerror\\x3dfunction(){window.jstiming.jsError\\x3d1;\\x22function\\x22\\x3d\\x3dtypeof h
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 76 69 73 69 74 65 64 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 68 6f 76 65 72 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 5c 5c 78 33 64 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 Data Ascii: p:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir\\x3drtl] .flip-on-rtl{transform:scale(
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 5c 5c 78 33 64 66 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5c 5c 78 33 63 2f 73 63 72 69 70 74 5c 5c 78 33 65 5c 5c 78 33 63 73 63 72 69 70 74 20 73 72 63 5c 5c 78 33 64 5c 5c 78 32 32 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6d 79 73 69 64 69 61 2f 31 39 63 32 64 31 61 35 34 35 61 62 37 39 31 39 64 31 66 30 66 65 64 33 35 63 30 66 31 62 31 63 2e 6a 73 3f 74 61 67 5c 5c 78 33 64 65 6e 67 69 6e 65 2f 63 6c 69 65 6e 74 5f 66 61 73 74 2f 63 6c 69 65 6e 74 5f 66 61 73 74 5f 65 6e 67 69 6e 65 5c 5c 78 32 32 5c 5c 78 33 65 5c 5c 78 33 63 2f 73 63 72 69 70 74 5c 5c 78 33 65 5c 5c 78 33 63 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 5c 5c 78 33 64 5c 5c 78 32 32 6c 61 6e 64 73 63 61 Data Ascii: ndow.CustomEvent\\x3df};}).call(this);\\x3c/script\\x3e\\x3cscript src\\x3d\\x22https://www.gstatic.com/mysidia/19c2d1a545ab7919d1f0fed35c0f1b1c.js?tag\\x3dengine/client_fast/client_fast_engine\\x22\\x3e\\x3c/script\\x3e\\x3cstyle data-nl\\x3d\\x22landsca
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 3a 33 3b 7d 2e 6e 73 2d 73 64 72 62 6d 2d 65 2d 31 30 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 2e 37 35 65 6d 3b 7d 2e 6e 73 2d 73 64 72 62 6d 2d 65 2d 31 32 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 36 2e 30 38 70 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 7d 2e 6e 73 2d 73 64 72 62 6d 2d 65 2d 31 33 7b 62 6f 78 2d 73 69 7a 69 6e Data Ascii: :3;}.ns-sdrbm-e-10{box-sizing:border-box;font-weight:600;overflow:hidden;text-overflow:ellipsis;flex-shrink:0;text-align:left;line-height:1.25em;max-height:3.75em;}.ns-sdrbm-e-12{box-sizing:border-box;height:16.08px;flex-shrink:0;}.ns-sdrbm-e-13{box-sizin
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 2d 67 72 6f 77 3a 32 3b 68 65 69 67 68 74 3a 36 33 2e 34 37 70 78 3b 7d 2e 6e 73 2d 73 64 72 62 6d 2d 65 2d 32 39 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 7d 2e 6e 73 2d 73 64 72 62 6d 2d 65 2d 33 30 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 20 32 70 78 3b 68 65 69 67 68 74 3a 36 33 2e 34 37 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 36 34 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 7d 2e 6e 73 2d 73 64 Data Ascii: -grow:2;height:63.47px;}.ns-sdrbm-e-29{display:block;width:1px;flex-grow:1;}.ns-sdrbm-e-30{box-sizing:border-box;display:flex;flex-direction:row;align-items:center;justify-content:center;padding:0 2px;height:63.47px;max-height:64px;min-height:30px;}.ns-sd
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 78 3a 34 3b 7d 2e 6e 73 2d 73 64 72 62 6d 2d 65 2d 36 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 2e 6e 73 2d 73 64 72 62 6d 2d 65 2d 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 69 6d 67 61 64 2f 38 34 31 37 32 33 36 30 35 32 37 32 31 39 31 30 34 31 2f 31 34 37 36 33 30 30 34 36 35 38 31 31 37 37 38 39 35 33 37 3f 77 5c 5c 78 33 64 32 30 30 5c 5c 78 32 36 68 5c 5c 78 33 64 32 30 30 5c 5c 78 32 36 74 77 5c 5c 78 33 64 31 5c 5c 78 32 36 71 5c 5c 78 33 64 37 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 Data Ascii: x:4;}.ns-sdrbm-e-6{background-color:#fff;box-shadow:none;}.ns-sdrbm-e-7{background-image:url(https://tpc.googlesyndication.com/simgad/841723605272191041/14763004658117789537?w\\x3d200\\x26h\\x3d200\\x26tw\\x3d1\\x26q\\x3d75);background-repeat:no-repeat;ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49818	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	2152	OUT	GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9378512249&adk=3988068036&adf=2307578502&pi=t.ma~as.9378512249&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010325&bpp=3&bdt=2786&idt=2706&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=1024&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C31083869%2C447 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:26:55 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 06:41:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 06:26:55 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 06:26:56 UTC	602	IN	Data Raw: 33 35 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4f 48 44 73 59 6a 55 70 59 59 44 46 58 6a 51 75 77 67 64 51 37 67 4d 32 67 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 35d<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"COHDsYjUpYYDFXjQuwgdQ7gM2g"}],"googMsgType":"sth"}', '*');</script><script
2024-05-24 06:26:56 UTC	266	IN	Data Raw: 53 67 43 54 75 30 79 71 4e 63 44 6e 77 54 4b 50 58 44 31 51 5c 5c 5c 22 2c 31 37 35 30 32 32 38 30 31 35 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 5c 5c 5c 22 2c 32 5d 5d 2c 5b 5c 5c 5c 22 49 44 3d 30 64 65 37 32 32 65 62 31 31 30 62 30 37 39 32 3a 54 3d 31 37 31 36 35 33 32 30 31 35 3a 52 54 3d 31 37 31 36 35 33 32 30 31 35 3a 53 3d 41 41 2d 41 66 6a 5a 5f 56 67 35 33 61 46 68 36 53 5f 70 74 5f 34 6f 53 47 35 41 36 5c 5c 5c 22 2c 31 37 33 32 30 38 34 30 31 35 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 5c 5c 5c 22 5d 5d 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 Data Ascii: SgCTu0yqNcDnwTKPXD1Q\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",2]],[\\\"ID=0de722eb110b0792:T=1716532015:RT=1716532015:S=AA-AfjZ_Vg53aFh6S_pt_4oSG5A6\\\",1732084015,\\\"/\\\",\\\"pjnewsletter.com\\\"]]"}],"googMsgType":"sth"}', '*');</script></hea
2024-05-24 06:26:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49816	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	2163	OUT	GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=9847014599&adk=3441210196&adf=4066527037&pi=t.ma~as.9847014599&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010328&bpp=13&bdt=2789&idt=2811&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=1925&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083822%2C310 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:26:56 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 06:41:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 06:26:56 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 06:26:56 UTC	602	IN	Data Raw: 33 35 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4b 4c 7a 73 59 6a 55 70 59 59 44 46 51 6e 51 75 77 67 64 59 6e 77 4e 59 67 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 35d<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CKLzsYjUpYYDFQnQuwgdYnwNYg"}],"googMsgType":"sth"}', '*');</script><script
2024-05-24 06:26:56 UTC	266	IN	Data Raw: 42 68 53 5f 5f 6b 47 5a 7a 59 7a 53 68 78 39 48 77 46 34 67 5c 5c 5c 22 2c 31 37 35 30 32 32 38 30 31 35 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 5c 5c 5c 22 2c 32 5d 5d 2c 5b 5c 5c 5c 22 49 44 3d 39 34 30 32 66 32 65 35 63 39 66 36 34 37 65 63 3a 54 3d 31 37 31 36 35 33 32 30 31 35 3a 52 54 3d 31 37 31 36 35 33 32 30 31 35 3a 53 3d 41 41 2d 41 66 6a 62 34 62 43 38 6c 55 44 35 2d 67 47 78 77 73 51 73 5f 57 48 54 6c 5c 5c 5c 22 2c 31 37 33 32 30 38 34 30 31 35 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 5c 5c 5c 22 5d 5d 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 Data Ascii: BhS__kGZzYzShx9HwF4g\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",2]],[\\\"ID=9402f2e5c9f647ec:T=1716532015:RT=1716532015:S=AA-Afjb4bC8lUD5-gGxwsQs_WHTl\\\",1732084015,\\\"/\\\",\\\"pjnewsletter.com\\\"]]"}],"googMsgType":"sth"}', '*');</script></hea
2024-05-24 06:26:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49817	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	2172	OUT	GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=280&slotname=6035134773&adk=1088046264&adf=3378254834&pi=t.ma~as.6035134773&w=590&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=590x280&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010341&bpp=1&bdt=2802&idt=2829&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=132&ady=2491&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31083 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:26:56 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 06:41:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 06:26:56 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 06:26:56 UTC	602	IN	Data Raw: 33 35 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4a 43 47 74 34 6a 55 70 59 59 44 46 54 61 52 5f 51 63 64 6a 4c 77 4a 42 67 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 35d<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CJCGt4jUpYYDFTaR_QcdjLwJBg"}],"googMsgType":"sth"}', '*');</script><script
2024-05-24 06:26:56 UTC	266	IN	Data Raw: 73 5f 46 66 7a 50 4d 35 56 4d 6f 34 50 54 71 4a 66 63 6c 67 5c 5c 5c 22 2c 31 37 35 30 32 32 38 30 31 35 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 5c 5c 5c 22 2c 32 5d 5d 2c 5b 5c 5c 5c 22 49 44 3d 35 37 62 36 30 64 65 32 64 39 63 63 30 61 63 35 3a 54 3d 31 37 31 36 35 33 32 30 31 35 3a 52 54 3d 31 37 31 36 35 33 32 30 31 35 3a 53 3d 41 41 2d 41 66 6a 59 4b 37 4f 71 2d 4f 5f 6c 78 57 61 32 59 32 31 47 53 77 4e 49 5f 5c 5c 5c 22 2c 31 37 33 32 30 38 34 30 31 35 2c 5c 5c 5c 22 2f 5c 5c 5c 22 2c 5c 5c 5c 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 5c 5c 5c 22 5d 5d 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 Data Ascii: s_FfzPM5VMo4PTqJfclg\\\",1750228015,\\\"/\\\",\\\"pjnewsletter.com\\\",2]],[\\\"ID=57b60de2d9cc0ac5:T=1716532015:RT=1716532015:S=AA-AfjYK7Oq-O_lxWa2Y21GSwNI_\\\",1732084015,\\\"/\\\",\\\"pjnewsletter.com\\\"]]"}],"googMsgType":"sth"}', '*');</script></hea
2024-05-24 06:26:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49820	216.239.36.181	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:55 UTC	1400	OUT	POST /g/collect?v=2&tid=G-6EDY1BF25J&gtm=45je45m0v886867345z8848813796za200zb848813796&_p=1716532007549&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1010184661.1716532012&ecid=1618387984&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1716532012&sct=1&seg=0&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=Jewish%20Voters%20Blast%20Biden%20with%20Eye-Opening%20Move%20-%20This%20Could%20Be%20an%20Election%20Game-Changer&en=page_view&_fv=1&_ss=1&ep.post_id=null&ep.publish_date=null&tfd=6133 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:55 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pjnewsletter.com Date: Fri, 24 May 2024 06:26:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49825	104.17.167.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	604	OUT	GET / HTTP/1.1 Host: 6.adsco.re Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://pjnewsletter.com Cache-Control: private, max-age=10 Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Max-Age: 2592000 Server: cloudflare CF-RAY: 888b378d0ede0f71-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49824	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	1399	OUT	GET /pv/?lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532013842654359696&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&site=733245&i=1&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0 HTTP/1.1 Host: c.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
2024-05-24 06:26:56 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b378cda338c63-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49821	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	2181	OUT	GET /pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C4475983 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:26:56 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 06:41:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 24 May 2024 06:26:56 GMT Connection: close Transfer-Encoding: chunked
2024-05-24 06:26:56 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 35 32 32 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 48 54 4d 4c 2c 42 4f 44 59 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 23 6d 79 73 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 77 69 64 74 68 3a 31 30 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20240522';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height: 100%;width:10
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 20 41 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 63 65 6e 74 65 72 65 64 2d 69 6d 61 67 65 22 20 64 61 74 61 2d 6e 73 3d 22 Data Ascii: A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><style data-nl="centered-image" data-ns="
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 6c 3c 68 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 69 66 28 6b 3d 6b 5b 68 5b 6c 5d 5d 2c 6e 75 6c 6c 3d 3d 6b 29 7b 67 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 67 3d 6b 7d 76 61 72 20 6e 3d 67 26 26 67 5b 36 31 30 34 30 31 33 30 31 5d 3b 66 3d 6e 75 6c 6c 21 3d 6e 3f 6e 3a 21 31 3b 76 61 72 20 70 3b 63 6f 6e 73 74 20 74 3d 65 2e 6e 61 76 69 67 61 74 6f 72 3b 70 3d 74 3f 74 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 72 65 74 75 72 6e 20 66 3f 70 3f 70 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 Data Ascii: l<h.length;l++)if(k=k[h[l]],null==k){g=null;break a}g=k}var n=g&&g[610401301];f=null!=n?n:!1;var p;const t=e.navigator;p=t?t.userAgentData\|\|null:null;function u(a){return f?p?p.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function v(a){var b;a:{if(
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 68 28 61 2b 28 22 22 3d 3d 3d 62 3f 22 22 3a 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 62 29 29 29 29 7d 3b 76 61 72 20 4f 3d 28 61 2c 62 2c 63 2c 64 2c 71 29 3d 3e 7b 69 66 28 71 29 63 3d 61 2b 28 22 26 22 2b 62 2b 22 3d 22 2b 63 29 3b 65 6c 73 65 7b 76 61 72 20 6d 3d 22 26 22 2b 62 2b 22 3d 22 3b 6c 65 74 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 6d 29 3b 30 3e 72 3f 63 3d 61 2b 6d 2b 63 3a 28 72 2b 3d 6d 2e 6c 65 6e 67 74 68 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 72 29 2c 63 3d 30 3c 3d 6d 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 2b 63 2b 61 2e 73 75 62 73 74 72 69 6e 67 28 6d 29 3a 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 2b 63 29 7d 72 65 74 75 72 6e 20 36 45 34 3c 63 2e 6c 65 Data Ascii: h(a+(""===b?"":"="+encodeURIComponent(String(b))))};var O=(a,b,c,d,q)=>{if(q)c=a+("&"+b+"="+c);else{var m="&"+b+"=";let r=a.indexOf(m);0>r?c=a+m+c:(r+=m.length,m=a.indexOf("&",r),c=0<=m?a.substring(0,r)+c+a.substring(m):a.substring(0,r)+c)}return 6E4<c.le
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 3b 74 72 79 7b 61 3d 65 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 61 26 26 28 53 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 62 64 65 69 64 3d 28 5b 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 53 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 29 7b 61 26 26 56 26 26 57 28 29 26 26 28 56 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 56 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 Data Ascii: ;try{a=e.top.location.hash}catch(c){a=e.location.hash}a&&(S=(b=a.match(/\bdeid=([\d,]+)/))?b[1]:"")}catch(c){}}b=S;a=!!b.indexOf&&0<=b.indexOf("1337")}return a});function ca(a){a&&V&&W()&&(V.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),V.clearMarks(`
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 67 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 65 6c 73 65 20 62 3d 4d 2e 74 65 73 74 28 62 29 3f 62 3a 76 6f 69 64 20 30 3b 61 2e 68 72 65 66 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 42 2e 74 6f 53 74 72 69 6e 67 28 29 3a 62 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 35 33 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 35 32 32 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 Data Ascii: g;else throw Error("");else b=M.test(b)?b:void 0;a.href=void 0===b?B.toString():b}};}).call(this);</script><script data-jc="53" data-jc-version="r20240522">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 61 29 7b 61 2e 6a 3d 21 30 3b 61 2e 6c 69 73 74 65 6e 65 72 3d 6e 75 6c 6c 3b 61 2e 70 72 6f 78 79 3d 6e 75 6c 6c 3b 61 2e 73 72 63 3d 6e 75 6c 6c 3b 61 2e 6d 3d 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 29 7b 6c 65 74 20 62 3d 30 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 62 2b 2b 7d 63 6f 6e 73 74 20 6b 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 6c 65 74 20 63 2c 64 3b 66 6f 72 28 6c 65 74 20 65 3d Data Ascii: a){a.j=!0;a.listener=null;a.proxy=null;a.src=null;a.m=null};function ja(a){let b=0;for(const c in a)b++}const ka="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");function la(a,b){let c,d;for(let e=
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 2c 62 26 26 28 61 3d 43 28 62 2c 63 2c 64 2c 65 29 29 2c 28 63 3d 2d 31 3c 61 3f 62 5b 61 5d 3a 6e 75 6c 6c 29 26 26 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 26 26 21 63 2e 6a 26 26 28 28 65 3d 63 2e 73 72 63 29 26 26 65 5b 7a 5d 3f 44 28 65 2e 67 2c 63 29 3a 28 64 3d 63 2e 74 79 70 65 2c 62 3d 63 2e 70 72 6f 78 79 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 20 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 62 2c 63 2e 63 61 70 74 75 72 65 29 3a 65 2e 64 65 74 61 63 68 45 76 65 6e 74 3f 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 64 20 69 6e 20 45 3f 45 5b 64 5d 3a 45 5b 64 5d 3d 22 6f 6e 22 2b 64 2c 62 29 3a 65 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 65 2e 72 65 6d 6f 76 65 4c 69 Data Ascii: ,b&&(a=C(b,c,d,e)),(c=-1<a?b[a]:null)&&"number"!==typeof c&&c&&!c.j&&((e=c.src)&&e[z]?D(e.g,c):(d=c.type,b=c.proxy,e.removeEventListener? e.removeEventListener(d,b,c.capture):e.detachEvent?e.detachEvent(d in E?E[d]:E[d]="on"+d,b):e.addListener&&e.removeLi
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 3b 76 61 72 20 79 61 3d 7b 63 61 70 74 75 72 65 3a 21 30 7d 2c 7a 61 3d 78 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 61 3d 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 22 70 61 73 73 69 76 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 3d 21 30 7d 7d 29 3b 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 62 29 7d 63 61 74 63 68 28 62 29 7b 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 2e 70 61 73 73 69 76 65 26 26 7a 61 Data Ascii: ;return function(){b\|\|(c=a(),b=!0);return c}};var ya={capture:!0},za=xa(function(){let a=!1;try{const b=Object.defineProperty({},"passive",{get:function(){a=!0}});m.addEventListener("test",null,b)}catch(b){}return a});function Aa(a){return a?a.passive&&za
2024-05-24 06:26:56 UTC	1390	IN	Data Raw: 3b 63 6f 6e 73 74 20 62 3d 20 42 61 28 6d 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 26 26 28 46 61 28 61 29 3f 28 49 28 6d 2c 62 2c 28 29 3d 3e 4b 28 61 29 29 2c 44 61 28 28 29 3d 3e 4b 28 61 29 29 29 3a 28 61 2e 68 3d 21 31 2c 49 28 6d 2c 62 2c 28 29 3d 3e 48 61 28 61 29 29 2c 44 61 28 28 29 3d 3e 48 61 28 61 29 29 29 29 3b 49 61 28 61 29 7d 65 6c 73 65 20 4a 61 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 72 65 74 75 72 6e 20 30 3c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 2e 43 2c 22 63 6f 6d 62 69 6e 65 5f 69 6f 5f 61 6e 64 5f 70 76 5f 66 75 6e 63 74 69 6f 6e 73 22 2c 76 6f 69 64 20 30 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 2c 62 3d 61 2e 6f 29 7b 61 2e 6f 3d 62 3b 62 3d 31 3d 3d 3d 4a 28 6d Data Ascii: ;const b= Ba(m.document);b&&(Fa(a)?(I(m,b,()=>K(a)),Da(()=>K(a))):(a.h=!1,I(m,b,()=>Ha(a)),Da(()=>Ha(a))));Ia(a)}else Ja(a)}function Fa(a){return 0<=Array.prototype.indexOf.call(a.C,"combine_io_and_pv_functions",void 0)}function K(a,b=a.o){a.o=b;b=1===J(m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49822	64.233.184.155	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	858	OUT	POST /g/collect?v=2&tid=G-6EDY1BF25J&cid=1010184661.1716532012&gtm=45je45m0v886867345z8848813796za200zb848813796&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 06:26:56 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pjnewsletter.com Date: Fri, 24 May 2024 06:26:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49826	162.252.214.5	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	604	OUT	GET / HTTP/1.1 Host: 4.adsco.re Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	365	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Max-Age: 2592000 Cache-Control: private, max-age=5
2024-05-24 06:26:56 UTC	56	IN	Data Raw: 32 64 0d 0a 38 2e 34 36 2e 31 32 33 2e 31 37 35 2c 39 35 33 65 65 36 36 38 31 62 31 30 64 62 35 33 30 66 30 61 38 63 38 36 34 36 62 62 63 33 31 65 0d 0a 30 0d 0a 0d 0a Data Ascii: 2d8.46.123.175,953ee6681b10db530f0a8c8646bbc31e0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49828	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	365	OUT	GET /images/18529/18529-375x250.jpg HTTP/1.1 Host: ruamupr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	748	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/jpeg Content-Length: 32319 Connection: close Last-Modified: Wed, 15 May 2024 14:00:19 GMT ETag: "6644bff3-7e3f" Expires: Fri, 24 May 2024 14:01:26 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 59129 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=707kcWWxKIctfa9m69vlRS5qW7KKnHu4Iq3GNqNRnzTRMGzsfn4A62cuk3amlJSpVIB9Y8X00AS0hiHMKR2Vmp1vnGSctW8sJr5l2Zdt7tq6wjeWu4WoKl3KYoZcPw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378ecfae7c78-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	621	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 31 30 30 0a ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100CCw"
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ad 06 8f e0 a9 e6 10 ff 00 c2 1b a1 87 cf 4f ec 3b 6f fe 37 5b fa 6f 82 3c 1f 24 5b db c2 1a 18 e7 fe 80 36 bf fc 6e b8 eb 7f b4 47 20 71 21 dc 0e 73 5d 3e 83 ac ce aa 62 69 37 67 a6 4f 7a fc fb da d5 ef f9 9f b5 fb 2a 49 68 bf 23 6e db c0 3e 0a fb d2 f8 2b 43 7c fa e8 36 a3 ff 00 69 d1 71 e0 bf 05 c5 97 87 c1 5a 1a 80 3a 0d 0a d7 ff 00 8d d5 65 d4 ae cb 73 29 fc 0d 69 c7 78 d7 10 62 46 1c 2f 3c d2 f6 95 5f da 7f 7b 17 24 7b 15 ad 7c 39 e1 0d bb 5b c1 7a 16 3d b4 2b 5f fe 37 57 b4 ef 0d 78 3c ce 07 fc 21 5a 17 27 a1 d0 ed 7f f8 dd 51 96 79 a0 62 d1 28 db 8e 72 2a c5 Data Ascii: ?O;o7[o<$[6nG q!s]>bi7gOzIh#n>+C\|6iqZ:es)ixbF/<_{${\|9[z=+_7Wx<!Z'Qyb(r
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 60 16 25 0e 02 f3 90 49 03 9e 33 cd 74 fa 07 8f b4 99 72 2d 74 f9 82 31 26 24 8a e8 4b b8 75 ce 19 b7 67 f4 aa f6 f0 91 9c b0 92 5a 8e ff 00 85 0d f0 34 ff 00 cd 1b f0 87 fe 12 b6 3f fc 6a 91 fe 03 7c 0e da 71 f0 6f c2 07 fe e5 4b 1f fe 35 5d 06 9d ac d8 6a 90 2c ea 93 40 64 19 58 ee 63 31 93 f4 cf 06 ae 61 50 7d f0 73 c7 0d 9a d5 4a 2f 63 17 49 23 8a 3f 01 3e 09 ab 16 ff 00 85 2f e1 03 c1 38 ff 00 84 52 c7 9f fc 83 5f 31 7e d2 ff 00 08 3e 19 ad 8e a1 10 f8 67 e1 8d b2 46 ea a8 be 17 b1 5d be 98 c4 35 f6 7c a3 62 64 7e b5 f3 bf ed 21 e1 c2 56 e8 4b 2e 54 e7 a0 ec 6b cd cd 23 25 87 bd cf 6b 22 94 56 26 cc fc 23 fd ad 3e 1c e8 9a 57 89 2f ad 34 ed 0a c5 7c b9 9c 28 1a 74 0a 00 f4 01 50 62 be 62 f1 36 89 61 05 f8 69 74 8b 15 ca ff 00 0d a4 79 ff 00 d0 6b ee Data Ascii: `%I3tr-t1&$KugZ4?j\|qoK5]j,@dXc1aP}sJ/cI#?>/8R_1~>gF]5\|bd~!VK.Tk#%k"V&#>W/4\|(tPbb6aityk
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: bb e6 d9 df 06 b9 cd 7b f6 91 f0 df 84 f4 58 e3 bf be d3 c5 d2 61 3c a5 60 ce 40 18 1c 0a e0 60 fd a2 bc 73 e2 5d 7b 0f a0 34 16 f3 b0 16 f7 4b 1e c5 65 f5 24 f0 2b a2 9d 56 b7 38 67 42 2d 36 7d 15 e2 29 a0 f0 6e a3 2c 7a 3e 87 77 7b a7 16 56 49 e4 bd 54 40 0f 27 2c 4e 38 ac ab af 8a 52 6a be 23 13 f8 53 c1 b7 d7 28 14 c4 19 af 02 c2 65 07 91 1b 28 3b fb f3 d3 1c d7 1d f0 9b 50 f1 4e a1 75 79 1d f7 87 74 ed 68 a4 a4 9f ed 1d 44 ac 20 63 a9 c7 a7 b5 75 be 13 7f 1b b4 ee da ef c5 3f 0e 58 5c e9 d2 48 f6 16 fa 22 43 20 b7 19 ce 04 4d c9 7f 51 eb 5d 94 eb 68 79 75 68 2b 33 d6 fc 23 2f 8c ef fe cd ac dc 58 78 86 59 a6 2a 23 b1 bb ba 91 21 c0 e7 cc 55 51 b6 50 30 46 32 33 d8 75 ae f7 44 bb f1 c7 8b 9e 2b 8f 0d 78 06 0b 74 17 12 49 71 7d 3e af 2d b1 20 63 24 23 Data Ascii: {Xa<`@`s]{4Ke$+V8gB-6})n,z>w{VIT@',N8Rj#S(e(;PNuythD cu?X\H"C MQ]hyuh+3#/XxY*#!UQP0F23uD+xtIq}>- c$#
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: dc 24 85 1a 46 fa e6 a9 dd 30 0d e6 30 c9 3c 92 4d 3f 51 bc c5 eb 60 f1 55 af 64 24 2b 01 c1 f5 ad e0 ad b8 b6 65 6b e2 64 04 20 c7 1e b5 4a 05 92 3c a3 e7 f1 35 6a e2 e1 15 4e 71 d3 a5 64 de 6a 24 48 10 31 f4 e0 50 d6 9a 83 96 ba 12 cb aa dd 33 95 51 85 07 00 d5 8b 7d 72 1b 2b 56 8a 64 f9 88 e1 a9 12 3b 71 17 25 7e ee 79 ef 58 d7 d7 a0 31 52 80 8e e4 56 32 b5 f4 2a 32 b1 6e c3 5e 06 f1 92 59 c8 52 70 09 a6 eb 5e 2b 93 4c 01 b4 c6 dd 2b 1d a3 27 8a e7 27 ba 56 9b 68 7e df 99 a9 37 5a 44 a9 7d 77 26 42 73 83 50 d2 6a c3 be b7 3a 68 b5 2b f9 2c 13 50 d5 d8 b1 27 95 5e 48 ab fa 37 89 22 b1 f3 65 b5 b0 91 cb 0c 70 9d 3d eb ce f5 3f 1b ba 6e 16 4c 4e d1 c7 a5 56 b6 f1 9f 88 6e 21 78 fe d6 62 c0 c7 cb c1 aa e4 8b 89 12 ac d3 d0 ee ad fc 7f 65 a5 6a ed 7b a9 6a Data Ascii: $F00<M?Q`Ud$+ekd J<5jNqdj$H1P3Q}r+Vd;q%~yX1RV2*2n^YRp^+L+''Vh~7ZD}w&BsPj:h+,P'^H7"ep=?nLNVn!xbej{j
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: af 5a bd a6 dc 47 1c db c4 84 e5 79 af 16 ac 35 3d e8 4e f1 b1 d4 fd a4 4c db 71 c9 e4 d5 db 2b 4f 3f 80 2b 9e 82 f4 24 a1 84 99 c0 e8 4d 74 1a 1e a5 1c 92 63 70 c8 03 bd 62 e2 c5 29 d8 6f 89 61 58 f4 59 81 18 21 78 af 9f be 2a f8 90 59 a3 5a c3 37 cc 47 20 d7 bd f8 c3 50 85 34 e9 62 33 01 b8 71 cd 7c b9 f1 c6 f4 c7 70 67 4e 9e dd eb b7 07 1b 48 f1 71 b5 2e 99 e7 7e 22 ba 7b 89 5d f7 e7 e7 e3 14 55 1b ab cd f1 7c ff 00 79 9b 3d 28 af 6f 91 24 7c ec a6 ee 7d d1 f0 e9 1c 6c 62 0e 36 f6 af 7e f0 12 5c 4f 67 14 25 38 c0 ed da bc 93 e0 d6 83 78 d2 44 26 b3 63 f2 f2 08 ed 5f 45 78 03 c3 b7 3f c3 66 46 31 8f 96 ad ab 1f 48 93 b1 1e a7 a2 48 60 1b 63 38 3d c2 d5 6d 1f 43 9e 0b 83 2e d2 46 3a e3 f4 af 46 8f c2 d7 8d 08 66 b3 6e 47 7a 64 5a 03 45 28 8d ed dd 01 38 Data Ascii: ZGy5=NLq+O?+$Mtcpb)oaXY!x*YZ7G P4b3q\|pgNHq.~"{]U\|y=(o$\|}lb6~\Og%8xD&c_Ex?fF1HH`c8=mC.F:FfnGzdZE(8
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: bc 28 eb f5 ae 92 79 1d a7 7b 5c bf 96 8e 55 d9 38 23 1f d3 eb 5b 24 ec 79 d3 49 4b 42 af 83 fc 33 a4 68 b3 0b cb 2d 5e d2 09 64 6c 99 fe d5 b5 e5 6f 42 bd 18 fd 6b b0 d3 be 26 f8 71 15 f4 5f 12 d8 18 e4 70 ca 35 31 6f 85 07 d6 b2 b4 9f 08 89 e0 5b 85 b6 b7 28 1b 78 49 62 cb 67 d4 57 5b a6 dc e9 37 1a 3b 68 de 20 d2 55 83 29 45 77 8f a0 3e f5 d0 a5 25 b3 39 aa d9 d8 f9 bf f6 bb 88 6a 1f 0b 75 1b d8 ee 12 7f 2a 36 1e 6a 72 ad e9 cd 7e 5a 78 ab 50 fd f5 d2 a7 fc f4 20 8f 4e 6b f5 47 f6 98 f0 bd cf 84 7c 23 af e9 16 37 3e 76 93 a8 5b b4 96 ea 3a 40 e0 12 54 7d 6b f2 3b c4 ba a8 8b 57 bb b7 70 72 93 3e 40 3d f7 1e 6b ca a9 0e 7a d7 3e 93 09 51 53 a2 92 3c 83 e3 e5 bc 57 1b 26 11 20 70 79 20 60 d7 9d 69 6d 10 98 02 d8 ca 81 5e 81 f1 a2 ec cf 1b b4 60 9d a4 6e Data Ascii: (y{\U8#[$yIKB3h-^dloBk&q_p51o[(xIbgW[7;h U)Ew>%9ju*6jr~ZxP NkG\|#7>v[:@T}k;Wpr>@=kz>QS<W& py `im^`n
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 1c fa 57 a5 59 78 b3 c1 f7 7e 1b 9b 4d b3 b8 b0 97 32 f9 31 6d 82 c4 02 a1 ad 3a 03 73 c0 c1 62 00 c8 c6 e2 33 99 0a ec f2 89 ad 6d a1 af f6 9d 28 4e ee 47 5d f0 ca 7d 6a 3b 09 2f e5 f0 5d c4 b1 dc b1 26 39 3c c0 fb 32 cb f3 6d e7 04 c6 eb c1 eb 19 15 ea 77 6f 07 89 6e 74 3f 0c 4d 61 76 44 d2 6e b8 97 ec b2 44 91 29 45 73 80 a7 07 e5 28 7a 9f 95 85 79 65 96 b7 e1 8f 87 fe 15 17 10 2d a2 47 03 c6 90 ac 96 f6 21 49 67 bb 38 cf 9e 30 0f fb d8 00 ae 70 36 16 eb 3e 0e de 6a d8 d3 fc 63 71 2d 92 25 fd b3 ce 03 c5 6a 1e de 2f b1 41 b6 30 16 52 cc 49 3b bb 65 83 11 f3 86 55 c2 ae 5e a3 17 74 6b 47 31 8c a7 cb 7d 4f a9 fc 0f 75 7d a2 b8 7d 3e c1 a1 96 d1 53 ec f0 db da cd b7 60 73 19 88 6f 61 92 cf f2 80 70 01 07 d4 67 d6 f4 cf 1f 69 b7 96 9a 9f 88 35 eb 49 96 c7 Data Ascii: WYx~M21m:sb3m(NG]}j;/]&9<2mwont?MavDnD)Es(zye-G!Ig80p6>jcq-%j/A0RI;eU^tkG1}Ou}}>S`soapgi5I
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 60 69 f3 49 9a 3f 17 fe 35 78 4f e1 cd 8c b7 5e 25 d6 03 5c 21 21 2c e3 c1 66 3e 98 1d 3f 1a f9 b7 c7 bf b4 c7 c4 3f 1f a3 59 e9 97 af a5 e9 e4 95 4b 7b 66 2b 23 29 ec ec 3d 6b 9f d7 63 bf d7 75 09 35 3d 66 e1 ee 2e 25 62 ce f3 12 7a fd 6a b4 5a 3b c5 27 ef 94 00 07 61 5e e3 c8 a9 61 d2 e6 5a 9f 29 53 3e c4 e2 db 50 95 93 30 ee 7c 1d a9 f8 86 65 16 d0 49 2b ee 24 04 42 ec 7d 4f af 15 2d 86 85 a0 e8 90 c8 2e 34 54 be 90 82 aa a8 01 c9 23 03 f2 3c fe 15 e8 fe 12 f1 46 a1 f0 e2 ed 26 b9 d2 dc 5a 98 44 93 c1 24 7e 5b 48 8e 30 ad 92 32 39 20 8a e5 75 7b e4 b0 92 6d 71 d1 4c f7 0e ce 19 b2 a2 01 c9 fb a4 02 cc 46 78 c7 18 f7 af 3f 13 86 51 7e ea 3d 0c 32 75 23 79 3b 9c 3d af 85 2e b4 8b d2 da bc 71 92 41 2b 6c ad d0 7f b5 8e fe d5 d9 fc 37 f8 23 a8 78 df c4 56 Data Ascii: `iI?5xO^%\!!,f>??YK{f+#)=kcu5=f.%bzjZ;'a^aZ)S>P0\|eI+$B}O-.4T#<F&ZD$~[H029 u{mqLFx?Q~=2u#y;=.qA+l7#xV
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: a3 e8 8f 0f f8 ca 60 d6 3e 16 d1 b4 b9 f5 0d 57 57 43 1c 56 88 08 8d 55 7e f4 92 30 19 0b 8f bc 57 a7 d7 15 f5 8f 83 f4 c3 6d e1 cb 78 35 1f 1d c8 93 41 14 69 74 f1 b8 31 dc b1 03 24 2f 3b 39 20 6d 3f 99 af 83 3e 02 da de 69 ba ad cf c5 6d 5f cc 4f 10 6b d6 d1 c4 14 3f cb 61 6a 39 58 14 02 40 7e 41 72 3a 9c 7a 57 ae f8 bb f6 81 f1 17 80 7c 1a 9e 1d f0 ad cd 84 9e 29 d6 21 74 d2 9b 5b 98 a5 8d a1 0c 03 5d dd b8 23 64 11 92 0e 32 0b b6 d5 5c 93 5f 05 53 0f ec f4 47 da 57 8a 9d 35 2b 1f 68 78 55 b4 ed 3e 3d b6 f3 99 55 80 21 81 c8 e7 db b7 7a ec 34 c6 69 55 48 8c f1 c8 e2 be 6b fd 93 75 99 34 9f 86 f6 7a 6b 78 ab 56 f1 2f d8 25 68 6e fc 4d a9 5a 49 12 6a 97 1d 65 b8 87 78 f9 e2 66 e1 59 7e 52 17 8c e3 35 f4 7f 87 2f e1 bc b4 5b 8b 67 52 a4 0c 8e e0 d2 a6 d2 Data Ascii: `>WWCVU~0Wmx5Ait1$/;9 m?>im_Ok?aj9X@~Ar:zW\|)!t[]#d2\_SGW5+hxU>=U!z4iUHku4zkxV/%hnMZIjexfY~R5/[gR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49829	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	365	OUT	GET /images/18710/18710-375x250.jpg HTTP/1.1 Host: ruamupr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/jpeg Content-Length: 30132 Connection: close Last-Modified: Thu, 23 May 2024 16:00:48 GMT ETag: "664f6830-75b4" Expires: Fri, 24 May 2024 16:01:33 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51923 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9658T2ZADiP3IJpTmfcyeRH8tF5YOVkIz8GDsY4OZbkCsj4YdjxInYLqAU6K%2F%2FRn0Vk4a2soIYnBFWb5n7cxp3QyNCDk2UtI4PGxKee1q43LC6mGxhtRNXvAocKjtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378efa0772ad-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	617	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCw"}!1AQa"q2
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 11 03 11 00 3f 00 f8 91 c8 27 8a 91 4e 18 13 eb 51 54 b1 ab 15 cb 70 7b 1a f2 c0 98 3a 9e 86 96 a3 40 ca 79 93 23 e9 4e 2e 31 c1 a4 95 95 90 0f 07 e5 c7 bf a5 46 f1 bf de 28 71 9e b4 6e 73 c0 6c 7b d2 aa 10 77 1f cf 34 cb 8a b8 e0 37 70 3f 2a 44 47 47 24 0e 3b d2 c4 8c 5c 90 3f 5a 7b 24 bb be 51 d7 de a3 9e 29 d8 96 ac c6 32 87 90 32 9c 01 d4 d3 95 51 8e 15 3f 1a 52 84 0e 9c 9a 74 68 cb f7 c0 1f f0 2a 7c c8 43 63 85 81 cb 1a 96 35 53 9c 1a 4c 82 71 9a 48 d5 ba d6 4a a6 ec d2 31 4c 7c 4a bb b6 e4 7e 35 28 81 48 ce 3f 5a 8b 70 45 07 1c 9a 7a dd b8 c2 a0 3d 39 e2 b3 a9 cb 25 72 b9 13 1e 8c 8a 7a f0 38 db eb 55 ae 9c cb 37 ee c3 7e 55 64 47 bc e4 30 c9 e7 15 a1 a3 68 57 77 a4 ba 42 4a af 57 23 1f ce b1 8c 94 16 a6 b4 d3 72 b2 33 ad 74 fb 89 97 25 72 31 c5 6b Data Ascii: ?'NQTp{:@y#N.1F(qnsl{w47p?DGG$;\?Z{$Q)22Q?Rth\|Cc5SLqHJ1L\|J~5(H?ZpEz=9%rz8U7~UdG0hWwBJW#r3t%r1k
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: d4 03 da bc 97 f6 94 fd 90 7e 0e 7e d3 7a 56 97 a5 7c 4e d2 a6 96 d7 47 b8 f3 ed 63 b5 71 19 1c 0d d1 f1 9f 95 8a a8 c7 60 bc 57 a9 85 cd a1 ed 3f 79 1b 2e a7 d4 c7 8b aa ba 4a 15 17 cc fe 72 3c 41 67 f6 6b fb 7b b7 b3 90 33 86 30 b3 a9 f9 b1 c7 7e dc 8e 6b 9f 99 05 ee a7 3c 52 26 5a 48 18 28 ed 9e f5 fb 7d fb 5d ff 00 c1 1c be 1c fe d0 7e 24 f0 94 bf 0e ee 2c bc 2d 61 a2 a3 43 a9 ac 59 67 78 89 1b 4a 9f e3 c0 c8 c1 c7 4e a7 3c 7c ab fb 6f 7f c1 0e 3c 6f e1 ef 8e 1e 16 d0 bf 64 6f 0f de ea 7a 16 b1 64 57 51 d4 35 07 e2 d2 60 c0 13 23 0c 04 04 1c e7 f4 af ad c1 67 18 1a bc ab 9e d7 3c bc 46 67 4a bc ae 7e 6b f8 58 20 91 f4 7d 52 65 2b 1b 30 8c b1 c9 3d f8 a2 bd 6f f6 ba fd 89 fe 2e 7e c8 ff 00 19 13 e1 57 8e 6c 56 6d 42 e6 c0 5f 58 cf 63 1b 38 30 93 83 ca Data Ascii: ~~zV\|NGcq`W?y.Jr<Agk{30~k<R&ZH(}]~$,-aCYgxJN<\|o<odozdWQ5`#g<FgJ~kX }Re+0=o.~WlVmB_Xc80
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 71 b0 4f 22 be f3 f8 0b fb 42 fc 31 fd b6 3c 31 69 e3 af 00 eb f6 fa 0f 8e b4 f4 54 32 23 ed 0e 40 ff 00 57 2a 0e a3 8c 67 93 d7 b5 7d 0c 1d 3c 4d 28 ce 5a 7e 87 e2 7c 53 c2 55 70 75 25 56 8a bc 37 3e 82 b8 d4 2c 34 29 ac 74 6f 11 6a f6 b0 de 5e 9f 2a d4 48 c1 3e d3 20 19 3b 7b 16 3d 70 2a d4 84 1f dd 2a 67 b1 1d fe 95 c9 f8 4f c7 5a 3f c4 7b c4 f0 0f c5 4f 0d 2d 97 88 f4 d9 bc e1 65 78 9f f2 d1 3a 4d 09 c7 20 8e 72 3a 56 c4 fa b7 89 f4 ff 00 88 49 e1 2d 43 c1 73 7f 65 5c 58 99 ec 7c 47 6f 30 30 bc a3 ef 42 e8 00 64 6e 84 10 48 6c 93 c5 72 55 c3 4e c8 fc ee 74 e5 07 66 5b 9a 3c af 97 bf 00 1e 73 54 e6 8a 38 c9 0d 0e 47 41 5a 52 8c 11 98 ff 00 87 38 c7 43 db dc e6 a1 31 82 3e 71 9f 50 6b 8e 49 87 43 1a e3 4f 8b 20 8e 00 f4 03 a5 47 22 95 60 ea 71 f2 e4 02 Data Ascii: qO"B1<1iT2#@Wg}<M(Z~\|SUpu%V7>,4)toj^H> ;{=p**gOZ?{O-ex:M r:VI-Cse\X\|Go00BdnHlrUNtf[<sT8GAZR8C1>qPkICO G"`q
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 45 3b 77 1f ba 33 8c 53 e6 91 a7 21 9d 03 e0 67 04 62 b4 8a 4d 68 74 aa ed 5d 9c e3 fe e1 f6 cc 48 20 e7 27 a0 15 15 e0 4b bc aa f4 23 19 1f ce b6 2f 2d da 7b 94 79 22 1e 59 ea 48 ea 2b 3e fe 09 2d d7 72 1d d1 f9 9c 6d 5e 40 c5 54 53 be 82 55 d4 b7 39 b7 d2 2d ae d2 41 71 12 ba c9 f2 c9 1b 8e 18 57 84 78 aa 1f 88 7f b2 d7 c4 08 fe 2f fc 19 d4 26 b7 8d 27 dd 79 69 bb e5 91 73 9d a5 47 04 1e 79 f6 af a1 b5 6b 53 35 ab 3d 93 e0 9e dd cd 73 1e 24 d0 9f 53 d2 a4 b0 bb b5 f3 15 d7 1c f2 1b da bb b0 b8 c9 d0 d0 e3 c5 e1 61 5e 0d 4b 5b 9f 54 7e ca 1f b6 cf c1 9f db cf c1 56 3a 47 89 75 97 d1 3c 6f a6 a2 ad bd f4 2c 16 e6 09 31 ce 09 3f 32 fa a9 af a0 3c 27 f1 33 58 d0 35 c8 fe 14 7c 69 b0 48 6f ee 63 29 a6 eb 10 31 16 da a2 8e 85 58 63 64 98 ea 0e 30 79 1d 6b f0 Data Ascii: E;w3S!gbMht]H 'K#/-{y"YH+>-rm^@TSU9-AqWx/&'yisGykS5=s$Sa^K[T~V:Gu<o,1?2<'3X5\|iHoc)1Xcd0yk
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: f1 e6 f6 ee d2 d9 e5 b7 95 8a 5e 42 51 54 0c e1 81 c0 27 d3 ad 7c a3 e2 3f 0d 6a 51 cf 79 73 6e ce 5e 39 93 c8 dc 71 f3 6e c9 af af fc 7d a2 dd 6a cf 04 13 ae 09 38 93 d0 1c d7 92 f8 f3 e1 4d c1 d6 25 6b 26 01 5d d1 b0 3a 75 e6 bd 4c b6 b4 69 cf 54 71 e2 93 96 c7 8e 2d 8b 6a 5a 6c f6 da 6c cd e7 cd 23 7f a4 e7 ee c6 31 91 f9 e6 a7 f8 86 6d 74 cb 2d 3e 16 2c b7 1e 48 cb 2b 1d 84 05 ef fe f7 5a f4 08 7e 19 cd 6d a5 cf 15 84 44 5d 4f 33 20 e3 0b 8e f8 f4 aa f7 ff 00 0c 75 dd 5a ca 0b 19 b4 5f b5 41 bb 7d da 8f e3 20 61 57 27 90 17 be 2b e9 29 57 a4 e5 ef 23 c3 af 0a 8b 66 7c e5 2f 8e 6e 34 d8 67 b9 22 e9 a7 de c9 18 55 c4 51 83 c6 30 6b 96 b8 f8 8f ad 68 4d e7 47 e2 f7 b7 96 37 f3 26 64 75 f9 9b d0 01 5e c9 f1 0f e0 1f 89 6f 6d 6f 2d ad 74 e7 8e 20 40 7f 28 Data Ascii: ^BQT'\|?jQysn^9qn}j8M%k&]:uLiTq-jZll#1mt->,H+Z~mD]O3 uZ_A} aW'+)W#f\|/n4g"UQ0khMG7&du^omo-t @(
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 7c b7 34 8d b6 1d 3c b1 db c7 f3 ca 07 07 22 bc fb c7 fe 33 bd d2 d9 9a da 63 b5 79 f9 4d 6e 78 df 5c 16 36 6c b3 07 ce 38 65 5e a2 bc 6b c4 f7 1a ef 88 16 6f ec cb 29 9d 90 96 2c d9 fb b5 b5 1e 49 c7 de 3a 3d 94 6e ae 5f d4 7f 6b ef 16 f8 59 3f b3 34 30 15 e3 f9 84 a5 bb fb fb 7b 54 3a 57 fc 14 13 e3 b5 89 91 0f 8a ee 7c 97 18 36 e6 5c 82 3f 3a f1 cd 5b c3 de 2e 06 69 e6 d3 ae 1a 20 48 79 52 3c ac 7d f9 20 f1 5d 4f c0 8f d8 5b f6 b1 fd a9 f5 00 3e 0a fc 21 d5 f5 4b 76 7d 8f a9 bc 5e 4d 94 47 b9 69 df 0b f8 0c d4 d4 86 0e 4e f5 6d 6f 33 db a1 2c 5d 28 af 63 73 da 3e 1c 7e d7 96 7e 2a d4 22 6f 13 5d 98 6e cc a0 37 99 27 5a fa 03 c0 fe 3b 83 c6 a3 6e 85 a8 09 54 75 d9 28 ff 00 1a e3 be 0c ff 00 c1 bd 5f b4 0d dd cd b6 a5 f1 c7 e3 af 87 bc 33 01 7c cd 61 a6 Data Ascii: \|4<"3cyMnx\6l8e^ko),I:=n_kY?40{T:W\|6\?:[.i HyR<} ]O[>!Kv}^MGiNmo3,](cs>~~*"o]n7'Z;nTu(_3\|a
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 55 a5 d4 52 e6 72 b1 73 b0 61 c5 71 41 cf 9b 73 a6 7b 58 f3 5f 8d df 0d 74 af 16 da 48 b6 f1 1f 35 03 61 82 f7 af 9d ec ee b5 af 87 5e 24 fb 3d d4 8e 55 18 01 b8 76 f6 af af ef e2 82 ec 8b 5f 30 83 cf 43 5e 3d f1 ef e1 92 ea 11 fd b6 cd 33 2c 48 4b 32 f5 23 ad 7d 26 55 89 69 38 49 dd 1e 16 2a 9f 2e b1 3d fb f6 1c fd bc 3c 49 f0 77 53 b6 4b 5b f9 6e 74 a9 e4 02 f7 4f 69 32 14 1f bc cb 9e 87 1d 40 af bd 7c 2d ae 69 d1 d9 9f da 13 f6 66 98 5f 68 57 ab f6 8f 14 78 3e d9 f1 cb 00 5a 78 14 74 23 92 d1 f4 cf 23 8e 2b f0 df c1 1e 2e d4 7c 27 ad 24 13 ca e2 20 c0 2a 13 d0 e7 ad 7d 7d fb 20 fe d7 de 2d f8 1f e3 33 ac 78 72 f5 e6 b2 69 56 4d 46 c4 b7 ca e8 47 cc df 50 38 af 46 a4 5c 2a 5f a1 f1 b9 e6 45 43 1f 49 d5 a7 a4 8f bd 3f 6a cf d8 97 f6 7b ff 00 82 99 7c 3b Data Ascii: URrsaqAs{X_tH5a^$=Uv_0C^=3,HK2#}&Ui8I.=<IwSK[ntOi2@\|-if_hWx>Zxt##+.\|'$ }} -3xriVMFGP8F\*_ECI?j{\|;
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: f3 7f bd 9e 95 f5 4f c5 bf d9 1f 59 f0 3d ad e6 b9 35 a5 b3 5a 59 22 96 96 35 60 ee 09 ec 30 79 1d f1 da bc 92 2f 09 ad f4 6d 24 25 99 54 6c 45 1c 04 fa d7 c8 63 69 63 70 af df 89 fa 6e 57 57 01 99 53 52 a3 2b 9e 70 9e 12 b9 b4 99 6d 9e 58 07 98 3e 49 16 4e 41 15 d4 78 1f c4 da fe 87 a8 c5 05 cc b2 3c 4a 78 10 a9 67 50 0f de 07 a5 75 31 78 5b 47 82 25 fb 66 9c 80 29 c1 73 27 af d6 aa df e8 b7 7a 5c 91 de c4 a1 60 79 33 6f 34 52 f1 1e 3b f1 da b8 14 a5 5e 36 7b 9e 8d 5c 3d 4c 32 bf 43 dc bc 17 e3 33 26 9b 6f 2d ad ce e5 ea f3 37 c8 4e 31 c1 6e 70 6b d1 34 7b db 2d 5e ca 29 a4 91 a3 b8 dc 4c 43 70 fd e8 cf dd c9 eb 8a f9 6f c0 fe 39 bc d1 af 76 59 5d 31 72 e7 7c 12 2f ca 73 d7 19 f5 af 69 f8 7d e2 98 ef ed 64 d3 e7 32 da 48 47 cd 05 c9 0c 81 ba e5 7d 3f 0a Data Ascii: OY=5ZY"5`0y/m$%TlEcicpnWWSR+pmX>INAx<JxgPu1x[G%f)s'z\`y3o4R;^6{\=L2C3&o-7N1npk4{-^)LCpo9vY]1r\|/si}d2HG}?
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: d4 2d 8d d9 b7 92 40 e0 0c e1 7a 81 5b 16 0e 92 38 96 d9 81 d8 02 e0 f5 35 e7 5a 94 f3 d8 6a 2c d3 c9 fb d0 7e ff 00 f7 85 76 9e 1a d4 23 9a 08 1a 38 f7 e7 92 7d 7d eb cb 92 7b a1 cd 72 c8 ea b4 6d 52 0b 86 96 cd 5a 45 92 26 04 99 13 93 9f 41 e9 ef 57 ef 01 78 8a fc 84 91 d4 1e 7f 2a ca 8d db 79 b8 54 20 91 f7 aa ed b5 d3 a3 2b 11 c7 f1 7d 29 36 fa 9a 72 f3 44 e7 7c 48 b7 16 2e 2e 61 75 76 ce 36 fa 57 17 e2 28 e7 96 61 22 e4 b0 3b a4 5c f4 fc 3f 3a f4 fd 5b 4f b7 d6 25 c2 4b b0 1f e2 c5 70 be 2d d2 a5 91 a6 b3 b7 de f2 10 54 08 c0 cc 9f 5c ff 00 3f 7a e9 c3 c6 2e 5c b6 dc f3 71 52 8c 20 db 3c 8b e2 a7 c5 3b bd 0e 31 68 12 49 65 ea be 52 16 f6 e8 07 5a f7 6f d8 97 f6 af d3 7c 69 e1 f4 f0 97 89 2e a5 b7 d4 74 e1 b6 f6 da f1 4a c9 1f 64 95 41 ea be b9 a7 fc Data Ascii: -@z[85Zj,~v#8}}{rmRZE&AWx*yT +})6rD\|H..auv6W(a";\?:[O%Kp-T\?z.\qR <;1hIeRZo\|i.tJdA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49827	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	365	OUT	GET /images/18662/18662-375x250.jpg HTTP/1.1 Host: ruamupr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/jpeg Content-Length: 27221 Connection: close Last-Modified: Sat, 18 May 2024 16:00:27 GMT ETag: "6648d09b-6a55" Expires: Fri, 24 May 2024 16:01:17 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51939 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A5HjebA%2FRAPltTSN0x0BNghXAMdvQpWbZMHHKbOa42O9JJQ6zJo719cEHq3FEraymIm65EvbQM1hqtxvwtoN%2Fw9oFclGdRJoCWPEQ5lxo68pXD22WRJDEFhQz0Z1NA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378efbb27c8e-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	617	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 31 30 30 0a ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100CCw"
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fc d6 b3 20 06 c9 ee 2b 66 c1 ca e5 76 f0 39 fe 55 89 60 bb 9f 69 e8 48 e3 d7 ad 6a 49 78 9a 75 9b 4c c8 59 87 01 45 7c ac 9b 3e a6 92 d0 a7 e2 1d 4e 28 a3 36 60 6e 66 f4 fe 1a ab a2 c4 d0 c6 6e 48 e1 ba 67 bd 53 dd 2e a3 76 64 94 fc cc 72 47 a5 6c 45 1a 18 d6 30 bc 70 00 14 d6 c3 69 dc d7 f0 c4 06 f2 71 39 4c 15 3c 67 a5 75 e4 b4 e9 f2 f2 00 c1 24 56 66 95 6c b6 d6 69 e5 46 07 1e 95 23 df 10 4c 7b f0 7d a8 6d 23 6a 71 6d dd 97 6e 2e ca c6 d0 6c c8 65 e0 82 6a bc ec 76 2c 64 75 18 a8 ad 64 79 1f 6e 0b 54 7a ad d6 c8 b1 1f 0f 9c 56 5c ca 27 41 25 98 d3 2c Data Ascii: ? +fv9U`iHjIxuLYE\|>N(6`nfnHgS.vdrGlE0piq9L<gu$VfliF#L{}m#jqmn.lejv,dudynTzV\'A%,
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 1d 73 c4 37 f2 4e 6e 64 65 53 c6 3a 28 ad 55 cc 51 1b ab d9 f6 85 19 0c ff 00 c5 5b 3b 9c f1 96 b7 66 de 89 21 5b 62 93 39 24 1f 5c d6 a6 9f a8 44 27 58 f9 ce 30 09 ae 53 4d d7 4d da 34 90 46 7c ad df 2b 9a e8 fc 15 a7 1d 4f 52 5b 8b 86 3b 10 e4 8a 6d da 07 4a 69 9e 87 e0 1b 13 77 7c a5 f3 c8 18 c8 f7 af 7f f0 26 8a 62 92 0b 0b 72 a6 46 00 b1 c0 fe 75 e1 de 08 81 97 53 51 19 3b 54 f0 14 57 d2 7f 0a f4 6f b0 68 e7 53 b9 5f de cf 82 1d bf 84 7b 57 9b 5e 57 3d 1a 11 6d 9e bf e0 18 ad ed ad 61 b2 b2 90 90 ab f3 10 bd 4f e3 5e d3 e0 8b 0f f4 18 9f 27 20 f3 c5 78 ef c2 88 c3 5b 99 18 7c d9 38 af 67 d0 af 9e c2 c6 31 18 c8 db c8 27 ad 79 f2 6b 9c ed 74 55 8e c2 de e7 63 08 84 9f 2f 70 3b 56 de 98 cc b6 f8 46 ce 17 82 4f 7a e4 b4 2b 96 9d fe d0 e7 08 78 20 57 49 Data Ascii: s7NndeS:(UQ[;f![b9$\D'X0SMM4F\|+OR[;mJiw\|&brFuSQ;TWohS_{W^W=maO^' x[\|8g1'yktUc/p;VFOz+x WI
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: b0 59 47 1e 33 bd 41 3c d7 a7 e8 f2 b3 98 e0 70 7e e7 42 6b 80 f0 3e 96 66 bd 06 68 b2 14 74 1d 17 da bd 33 44 b2 5b 78 f7 c8 40 63 8e 49 e9 5e 73 9c 9c b4 3a 25 1b 2d 4e 8f 4d f2 a2 89 22 48 c0 1b 79 3e f5 af a7 3a 8f 9f 03 a5 62 69 96 f7 d3 dc 0b 5b 3b 29 a5 98 a1 65 85 23 2c c4 0f 40 3f 9f 4f 5a ad ab fc 55 f8 59 e0 ab 79 ee bc 5d f1 23 49 b4 4b 60 7e d1 15 bd c7 da 24 b7 00 f3 e6 94 fd da 1c 67 1f 3e 3d c0 ae da 54 6b 4d 6c 72 ce bd 28 2b 36 77 36 d7 0a dd 13 b6 73 5a 16 cf 29 4e 01 1f 8d 7c cb e2 df f8 2a 2f ec 79 e0 9b ff 00 ec ed 37 c4 da 8e bb 26 df 95 b4 e9 23 d9 bb d0 95 0c 3d 7a 1a e4 2e 7f e0 b4 bf 04 ad ee 59 6c 3e 14 6b d3 46 0f c9 24 d7 8d cf e4 a3 bd 7a 34 f0 8e da 9c 7f 5a 8b 7a 1f 67 47 63 3b 4d bd c0 00 f4 35 a9 6d 6a 11 07 03 8f 41 d6 Data Ascii: YG3A<p~Bk>fht3D[x@cI^s:%-NM"Hy>:bi[;)e#,@?OZUYy]#IK`~$g>=TkMlr(+6w6sZ)N\|*/y7&#=z.Yl>kF$z4ZzgGc;M5mjA
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 85 b5 33 ab 37 7b 10 99 ed b4 ed 35 ae ee 93 e7 23 28 33 d2 b9 4d 73 c4 da 96 a9 1b 44 64 65 4e a0 7b 52 78 97 c4 29 75 7e d6 66 4c aa f0 36 d4 09 6f 15 ca a8 4c 81 b7 04 e3 b5 76 28 35 13 8a 4d f3 15 6c bc d9 5c 02 32 01 cf 22 bb 0d 16 e2 47 64 52 72 06 2b 12 db 4c 8e 12 3c b6 c9 23 1c d6 fe 8b 6c e0 aa c6 84 90 46 71 52 f6 2e 09 4a 67 61 e1 db 46 b8 60 90 29 25 98 01 5e fb f0 4f c0 92 5d cb 0c 53 7f ab 66 cb 7b 8a f3 6f 83 9e 12 97 53 bd 8e 29 21 24 16 ca e6 be b5 f8 43 e0 78 ec 8a c3 15 b8 3c 67 05 47 07 15 e5 62 aa 38 a3 dd c2 53 3a bf 0c e8 7f d9 da 41 96 08 80 4c 05 c0 e9 8f 5a ef 7e 1c 68 13 49 02 cd 1d b3 1d d2 93 90 bc 1a ce bd d1 9f 4b d0 6d ec 62 8f 6b dc 3a 96 38 e9 93 5e b3 f0 d7 c3 52 da 68 aa b3 3a 45 1d ba 6e 9e e6 67 54 8e 25 c6 59 99 89 Data Ascii: 37{5#(3MsDdeN{Rx)u~fL6oLv(5Ml\2"GdRr+L<#lFqR.JgaF`)%^O]Sf{oS)!$Cx<gGb8S:ALZ~hIKmbk:8^Rh:EngT%Y
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: b1 d4 e1 8e ee 1b 99 5b 1c 86 07 83 5d 76 8b e2 df 3d 16 58 ad f7 1c 60 fc df ad 7c 0d f0 63 f6 8b d4 d3 65 a5 f6 a2 63 9a 25 50 14 48 59 65 1d 37 7b 57 d4 bf 0e 7e 27 2e b5 a7 c5 34 32 2b e5 46 e2 bd 33 5c 32 ba 66 fc 89 c4 f6 c8 f5 bf 3a 3f 99 76 9c 77 35 62 0b a4 9a 30 3c c0 0f 7c 1a e1 ad 3c 54 c6 40 19 77 64 75 15 b3 61 e2 0b 69 1f 32 02 b4 af 74 4a a7 73 66 e7 6c 80 02 41 19 e9 51 3c ab 6f b4 c7 20 04 76 aa b3 ea 70 c8 99 8f a7 ae 6a 9d c6 af 10 ea e4 ff 00 4a 51 56 1b 83 b1 b6 f7 ea d0 b3 48 c0 30 5e 2b 0f 59 be 41 0e c8 65 1f 7b 9c 1a a7 7f e2 9b 64 8c 5b 47 92 cd c1 27 b0 ae 17 c5 de 3a 3a 5f 9b 12 4d bd 03 70 f9 ef e9 55 7b 92 e1 a1 bf ac 6b 63 4d 91 ae 1e 6f 97 d0 37 5a e1 7c 65 f1 be cf 4a 9b cb 59 90 26 71 f7 f9 af 3b f8 89 f1 e5 6c 92 7b 45 Data Ascii: []v=X`\|cec%PHYe7{W~'.42+F3\2f:?vw5b0<\|<T@wduai2tJsflAQ<o vpjJQVH0^+YAe{d[G'::_MpU{kcMo7Z\|eJY&q;l{E
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 8b 35 58 6f 35 dd 71 8c fe 20 d6 6e 64 f3 25 b8 1b 30 b1 06 c1 da bd 3e 5e 9d 45 72 7f 18 ff 00 69 4f 0d 7c 25 74 f0 bf c2 ff 00 0a da dc 6a 62 17 89 ef ae d4 08 63 52 47 dd 55 ce 48 38 eb 8e a7 8a d2 f8 b1 f1 bf c3 ff 00 0d fc 22 35 0d 64 a4 97 13 b1 8a d6 c8 2e 77 30 53 83 81 5f 2d ea be 21 bd f1 97 88 ee 35 fd 66 54 7b 9b 99 4b 01 10 da b1 a9 3c 22 8f 41 5e d5 3c c1 ca 09 43 44 7c d6 33 28 a5 41 de 73 e6 93 e8 59 f1 df c5 0f 89 5f 10 6e 24 97 c5 3e 2f bc 92 19 32 7e c5 04 c6 38 41 f4 0a 31 f4 af 18 f1 bf c1 df 19 ea 3e 6e a7 e1 0f 19 6a 56 b7 0f 26 5a 2b 9b b9 0a e3 d1 70 7e 53 5e e5 a5 68 36 93 4b 89 80 fc fa 51 e3 71 e1 8f 04 78 72 eb c4 7a f5 cb 25 95 ac 3e 64 8b 12 6e 79 1b 38 08 a3 b9 cf e5 d7 9c 56 53 6a 72 e6 62 85 5a d0 87 24 5e 87 c7 be 26 bc Data Ascii: 5Xo5q nd%0>^EriO\|%tjbcRGUH8"5d.w0S_-!5fT{K<"A^<CD\|3(AsY_n$>/2~8A1>njV&Z+p~S^h6KQqxrz%>dny8VSjrbZ$^&
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 77 2d 04 a9 45 22 85 c7 c2 fd 3f 4b d3 87 93 13 6d 48 88 38 19 20 e2 be 5c fd a1 6d e3 d2 66 7b 67 2c 03 c9 90 58 73 5f 6e 9b db 3b 8b 46 48 1d 4e e4 eb 9a f8 af f6 d0 3f 62 d7 ad e3 8c 0c bb 9c 9c fb d6 90 6d c5 9c 98 b8 f2 41 58 e2 fe 0c 6b 8d a6 78 d2 17 5c 10 cf 81 fc ab f4 63 e0 9f 88 63 d6 7c 27 02 3b a9 f2 a1 50 40 af cc 8f 87 77 be 47 89 a0 9b 23 e5 6f ef 57 df ff 00 b2 ff 00 89 ac 27 d1 c5 b2 49 f3 49 18 e0 9a f0 33 48 59 a6 8d f0 cf dc 3d 96 f3 6b 20 61 83 9e f4 54 17 0c 59 46 4f e5 45 78 e9 b3 be 2a e8 fd 1f b2 fd 97 7e 03 e9 c8 b1 59 fc 39 b2 4d 83 03 73 3b 8c 7d 09 fe b5 a3 a7 fc 14 f8 5d a3 b6 fb 1f 04 d8 a1 cf fc f2 cf f5 ae c7 ce b6 79 09 dc 73 8e 71 51 4c 61 1d 18 8e 7f 88 d7 df 7b 2a 67 81 ed b1 0f a9 8a 9e 0e f0 b5 b9 06 d7 41 b4 4c 0c Data Ascii: w-E"?KmH8 \mf{g,Xs_n;FHN?bmAXkx\cc\|';P@wG#oW'II3HY=k aTYFOEx~Y9Ms;}]ysqQLa{gAL
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: c3 d3 e9 c9 a6 c9 a7 41 f6 75 4c 2c 61 b6 7c be 9f 29 fc 87 3d 6b 0f aa 50 52 d2 25 4b 3c c6 c1 59 4b 53 f2 17 c4 9f b0 e7 c6 0f 12 de 4f 63 3e 85 a8 43 0e 59 5a 48 1a 2c a3 11 f5 3c d7 01 75 fb 10 7e d0 9e 00 8e eb c3 de 1c d4 bc 45 68 2f 61 08 97 5f 6c 11 ee c6 46 42 7f 11 e6 bf 6d e6 f8 53 a1 78 4a 2b 68 2f 91 2d a1 b8 94 43 6c 06 d0 ac e7 a2 8c 71 fe 7d ab 88 f8 9b f0 bb c3 da 9f 8a 34 db 78 2d 63 6f 23 70 9d 9d 01 31 e7 04 1f c4 77 19 15 aa 72 a6 b4 3c 5a f5 65 5e ab 75 35 6c fc b2 f0 4f ec f9 fb 76 f8 4b 49 b5 b4 b6 f8 85 e2 ef b5 ac 02 23 71 06 a8 f2 43 3a 03 f2 a3 a7 2a a4 0c 7c e3 8a d4 f1 0f c2 2f db 6f c4 f6 69 a7 78 9c eb 97 b6 aa a1 52 3b fb 68 e7 21 40 c6 d0 d8 2c 38 e0 74 af d6 6b 2f 84 7a 57 d8 e2 48 4c 5f 2a 0e 88 16 a4 bd f8 65 15 ad b9 Data Ascii: AuL,a\|)=kPR%K<YKSOc>CYZH,<u~Eh/a_lFBmSxJ+h/-Clq}4x-co#p1wr<Ze^u5lOvKI#qC:\|/oixR;h!@,8tk/zWHL_e
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: d3 e8 ce 9e 5f db 67 49 86 55 b0 f1 06 8d a8 e9 57 51 a0 fb 45 a5 d4 3f ea db be 18 0c 1f ce ad cd fb 64 7c 34 86 dd f5 0b 5f 15 c3 24 90 c7 e6 1b 70 e0 b0 6c 70 18 67 23 9f d2 b9 4d 4b e3 8f 81 ae bf e4 2d 05 bc a5 78 fd e4 4a 4e 6b cb fe 32 f8 e7 e1 26 b1 a6 cb 73 69 e1 1d 37 ed 72 28 5b 49 56 c9 37 4a 49 00 92 c4 76 e7 8c f1 8a f6 ea 71 16 21 43 b9 e0 4f 83 70 70 87 33 4e 3a ed d0 a1 f0 d0 c1 ac eb f7 be 21 8e 4f 96 ee fa 59 76 af 20 6f 72 dc 57 bd 78 78 ec b5 8d 17 b0 e0 57 8c 7c 18 d2 2c e0 d2 e0 2d 20 ce 49 61 9e a6 bd a7 42 45 48 19 01 38 1d 06 2b e6 5d e7 2e 67 a5 cf 6e 94 63 08 28 27 74 8d eb 21 18 00 91 ce 39 e2 b4 e1 42 57 23 d2 b1 74 c4 92 4b 90 a4 fc a3 a8 cd 6d 44 c1 58 20 ed d3 15 3b 68 74 f2 dd 68 55 bf 13 e1 d5 33 f8 7a 57 1b f1 1f c0 fe Data Ascii: _gIUWQE?d\|4_$plpg#MK-xJNk2&si7r([IV7JIvq!COpp3N:!OYv orWxxW\|,- IaBEH8+].gnc('t!9BW#tKmDX ;hthU3zW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49831	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	562	OUT	GET /track?pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&cb=1716532010397&r=pjnewsletter.com&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d65=Control&d66=8&d74=&e=playerLoaded&str=autostart HTTP/1.1 Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:26:56 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49838	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	390	OUT	GET /awl/3393/13376/18529,18710,18783/xzzxzzxzzx.GIF HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	780	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Etag: "90fe9b8a8142548fdfab29f59cb0a164a0eaef81" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OLwnVLmbluLPjJfiU3dTLQLYnKX2WOIeRpx%2BLVWIPJ1KHtn0bAUdz3AN3NwOdUkGfxD2AIdKb6%2Fsqc4jAcYtALpPzOCzI%2FXtSYoYZ9aXWG9NcmytO2RQ948QnYwsrf5mQmqSXf4y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378f1ff378e7-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49836	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	373	OUT	GET /images/18529/18529-375x250.jpg HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	762	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/jpeg Content-Length: 32319 Connection: close Last-Modified: Wed, 15 May 2024 14:00:19 GMT ETag: "6644bff3-7e3f" Expires: Fri, 24 May 2024 14:00:38 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 59178 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQ5X%2BNq4MfkLYpxKYcLDj1rztY34SbjAMia%2F8aGjCo2PHcZ6%2BB4KsU203p91ULcInzUippf8q1sr53PBFzUxcyd%2BsfTg1LsVAxI90bPA%2FlTwiK0LZti77i6mZf2wHClRus6TboCv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378f1c5e8c18-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 31 30 30 0a ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100CCw"
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ad 06 8f e0 a9 e6 10 ff 00 c2 1b a1 87 cf 4f ec 3b 6f fe 37 5b fa 6f 82 3c 1f 24 5b db c2 1a 18 e7 fe 80 36 bf fc 6e b8 eb 7f b4 47 20 71 21 dc 0e 73 5d 3e 83 ac ce aa 62 69 37 67 a6 4f 7a fc fb da d5 ef f9 9f b5 fb 2a 49 68 bf 23 6e db c0 3e 0a fb d2 f8 2b 43 7c fa e8 36 a3 ff 00 69 d1 71 e0 bf 05 c5 97 87 c1 5a 1a 80 3a 0d 0a d7 ff 00 8d d5 65 d4 ae cb 73 29 fc 0d 69 c7 78 d7 10 62 46 1c 2f 3c d2 f6 95 5f da 7f 7b 17 24 7b 15 ad 7c 39 e1 0d bb 5b c1 7a 16 3d b4 2b 5f fe 37 57 b4 ef 0d 78 3c ce 07 fc 21 5a 17 27 a1 d0 ed 7f Data Ascii: ?O;o7[o<$[6nG q!s]>bi7gOz*Ih#n>+C\|6iqZ:es)ixbF/<_{${\|9[z=+_7Wx<!Z'
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 2e b3 e0 0d 42 3b 81 09 95 60 8a 26 de 10 60 16 25 0e 02 f3 90 49 03 9e 33 cd 74 fa 07 8f b4 99 72 2d 74 f9 82 31 26 24 8a e8 4b b8 75 ce 19 b7 67 f4 aa f6 f0 91 9c b0 92 5a 8e ff 00 85 0d f0 34 ff 00 cd 1b f0 87 fe 12 b6 3f fc 6a 91 fe 03 7c 0e da 71 f0 6f c2 07 fe e5 4b 1f fe 35 5d 06 9d ac d8 6a 90 2c ea 93 40 64 19 58 ee 63 31 93 f4 cf 06 ae 61 50 7d f0 73 c7 0d 9a d5 4a 2f 63 17 49 23 8a 3f 01 3e 09 ab 16 ff 00 85 2f e1 03 c1 38 ff 00 84 52 c7 9f fc 83 5f 31 7e d2 ff 00 08 3e 19 ad 8e a1 10 f8 67 e1 8d b2 46 ea a8 be 17 b1 5d be 98 c4 35 f6 7c a3 62 64 7e b5 f3 bf ed 21 e1 c2 56 e8 4b 2e 54 e7 a0 ec 6b cd cd 23 25 87 bd cf 6b 22 94 56 26 cc fc 23 fd ad 3e 1c e8 9a 57 89 2f ad 34 ed 0a c5 7c b9 9c 28 1a 74 0a 00 f4 01 50 62 be 62 f1 36 89 61 05 f8 69 Data Ascii: .B;`&`%I3tr-t1&$KugZ4?j\|qoK5]j,@dXc1aP}sJ/cI#?>/8R_1~>gF]5\|bd~!VK.Tk#%k"V&#>W/4\|(tPbb6ai
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 3f 0c 43 77 29 9f c5 1a e4 e9 be 60 d2 c5 bb e6 d9 df 06 b9 cd 7b f6 91 f0 df 84 f4 58 e3 bf be d3 c5 d2 61 3c a5 60 ce 40 18 1c 0a e0 60 fd a2 bc 73 e2 5d 7b 0f a0 34 16 f3 b0 16 f7 4b 1e c5 65 f5 24 f0 2b a2 9d 56 b7 38 67 42 2d 36 7d 15 e2 29 a0 f0 6e a3 2c 7a 3e 87 77 7b a7 16 56 49 e4 bd 54 40 0f 27 2c 4e 38 ac ab af 8a 52 6a be 23 13 f8 53 c1 b7 d7 28 14 c4 19 af 02 c2 65 07 91 1b 28 3b fb f3 d3 1c d7 1d f0 9b 50 f1 4e a1 75 79 1d f7 87 74 ed 68 a4 a4 9f ed 1d 44 ac 20 63 a9 c7 a7 b5 75 be 13 7f 1b b4 ee da ef c5 3f 0e 58 5c e9 d2 48 f6 16 fa 22 43 20 b7 19 ce 04 4d c9 7f 51 eb 5d 94 eb 68 79 75 68 2b 33 d6 fc 23 2f 8c ef fe cd ac dc 58 78 86 59 a6 2a 23 b1 bb ba 91 21 c0 e7 cc 55 51 b6 50 30 46 32 33 d8 75 ae f7 44 bb f1 c7 8b 9e 2b 8f 0d 78 06 0b Data Ascii: ?Cw)`{Xa<`@`s]{4Ke$+V8gB-6})n,z>w{VIT@',N8Rj#S(e(;PNuythD cu?X\H"C MQ]hyuh+3#/XxY*#!UQP0F23uD+x
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 32 ee dc 71 93 c1 a7 66 11 93 ea 65 5c 5c dc 24 85 1a 46 fa e6 a9 dd 30 0d e6 30 c9 3c 92 4d 3f 51 bc c5 eb 60 f1 55 af 64 24 2b 01 c1 f5 ad e0 ad b8 b6 65 6b e2 64 04 20 c7 1e b5 4a 05 92 3c a3 e7 f1 35 6a e2 e1 15 4e 71 d3 a5 64 de 6a 24 48 10 31 f4 e0 50 d6 9a 83 96 ba 12 cb aa dd 33 95 51 85 07 00 d5 8b 7d 72 1b 2b 56 8a 64 f9 88 e1 a9 12 3b 71 17 25 7e ee 79 ef 58 d7 d7 a0 31 52 80 8e e4 56 32 b5 f4 2a 32 b1 6e c3 5e 06 f1 92 59 c8 52 70 09 a6 eb 5e 2b 93 4c 01 b4 c6 dd 2b 1d a3 27 8a e7 27 ba 56 9b 68 7e df 99 a9 37 5a 44 a9 7d 77 26 42 73 83 50 d2 6a c3 be b7 3a 68 b5 2b f9 2c 13 50 d5 d8 b1 27 95 5e 48 ab fa 37 89 22 b1 f3 65 b5 b0 91 cb 0c 70 9d 3d eb ce f5 3f 1b ba 6e 16 4c 4e d1 c7 a5 56 b6 f1 9f 88 6e 21 78 fe d6 62 c0 c7 cb c1 aa e4 8b 89 12 Data Ascii: 2qfe\\$F00<M?Q`Ud$+ekd J<5jNqdj$H1P3Q}r+Vd;q%~yX1RV2*2n^YRp^+L+''Vh~7ZD}w&BsPj:h+,P'^H7"ep=?nLNVn!xb
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 15 d0 95 4e 70 3a 66 b0 6d 6e f0 bf 2c a7 af 5a bd a6 dc 47 1c db c4 84 e5 79 af 16 ac 35 3d e8 4e f1 b1 d4 fd a4 4c db 71 c9 e4 d5 db 2b 4f 3f 80 2b 9e 82 f4 24 a1 84 99 c0 e8 4d 74 1a 1e a5 1c 92 63 70 c8 03 bd 62 e2 c5 29 d8 6f 89 61 58 f4 59 81 18 21 78 af 9f be 2a f8 90 59 a3 5a c3 37 cc 47 20 d7 bd f8 c3 50 85 34 e9 62 33 01 b8 71 cd 7c b9 f1 c6 f4 c7 70 67 4e 9e dd eb b7 07 1b 48 f1 71 b5 2e 99 e7 7e 22 ba 7b 89 5d f7 e7 e7 e3 14 55 1b ab cd f1 7c ff 00 79 9b 3d 28 af 6f 91 24 7c ec a6 ee 7d d1 f0 e9 1c 6c 62 0e 36 f6 af 7e f0 12 5c 4f 67 14 25 38 c0 ed da bc 93 e0 d6 83 78 d2 44 26 b3 63 f2 f2 08 ed 5f 45 78 03 c3 b7 3f c3 66 46 31 8f 96 ad ab 1f 48 93 b1 1e a7 a2 48 60 1b 63 38 3d c2 d5 6d 1f 43 9e 0b 83 2e d2 46 3a e3 f4 af 46 8f c2 d7 8d 08 66 Data Ascii: Np:fmn,ZGy5=NLq+O?+$Mtcpb)oaXY!x*YZ7G P4b3q\|pgNHq.~"{]U\|y=(o$\|}lb6~\Og%8xD&c_Ex?fF1HH`c8=mC.F:Ff
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 14 8e f9 ee 73 1e a3 23 87 da 81 00 02 3d bc 28 eb f5 ae 92 79 1d a7 7b 5c bf 96 8e 55 d9 38 23 1f d3 eb 5b 24 ec 79 d3 49 4b 42 af 83 fc 33 a4 68 b3 0b cb 2d 5e d2 09 64 6c 99 fe d5 b5 e5 6f 42 bd 18 fd 6b b0 d3 be 26 f8 71 15 f4 5f 12 d8 18 e4 70 ca 35 31 6f 85 07 d6 b2 b4 9f 08 89 e0 5b 85 b6 b7 28 1b 78 49 62 cb 67 d4 57 5b a6 dc e9 37 1a 3b 68 de 20 d2 55 83 29 45 77 8f a0 3e f5 d0 a5 25 b3 39 aa d9 d8 f9 bf f6 bb 88 6a 1f 0b 75 1b d8 ee 12 7f 2a 36 1e 6a 72 ad e9 cd 7e 5a 78 ab 50 fd f5 d2 a7 fc f4 20 8f 4e 6b f5 47 f6 98 f0 bd cf 84 7c 23 af e9 16 37 3e 76 93 a8 5b b4 96 ea 3a 40 e0 12 54 7d 6b f2 3b c4 ba a8 8b 57 bb b7 70 72 93 3e 40 3d f7 1e 6b ca a9 0e 7a d7 3e 93 09 51 53 a2 92 3c 83 e3 e5 bc 57 1b 26 11 20 70 79 20 60 d7 9d 69 6d 10 98 02 d8 Data Ascii: s#=(y{\U8#[$yIKB3h-^dloBk&q_p51o[(xIbgW[7;h U)Ew>%9ju*6jr~ZxP NkG\|#7>v[:@T}k;Wpr>@=kz>QS<W& py `im
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 13 b7 da 97 6a dc 42 e4 aa 81 ce e6 4c 6e 1c fa 57 a5 59 78 b3 c1 f7 7e 1b 9b 4d b3 b8 b0 97 32 f9 31 6d 82 c4 02 a1 ad 3a 03 73 c0 c1 62 00 c8 c6 e2 33 99 0a ec f2 89 ad 6d a1 af f6 9d 28 4e ee 47 5d f0 ca 7d 6a 3b 09 2f e5 f0 5d c4 b1 dc b1 26 39 3c c0 fb 32 cb f3 6d e7 04 c6 eb c1 eb 19 15 ea 77 6f 07 89 6e 74 3f 0c 4d 61 76 44 d2 6e b8 97 ec b2 44 91 29 45 73 80 a7 07 e5 28 7a 9f 95 85 79 65 96 b7 e1 8f 87 fe 15 17 10 2d a2 47 03 c6 90 ac 96 f6 21 49 67 bb 38 cf 9e 30 0f fb d8 00 ae 70 36 16 eb 3e 0e de 6a d8 d3 fc 63 71 2d 92 25 fd b3 ce 03 c5 6a 1e de 2f b1 41 b6 30 16 52 cc 49 3b bb 65 83 11 f3 86 55 c2 ae 5e a3 17 74 6b 47 31 8c a7 cb 7d 4f a9 fc 0f 75 7d a2 b8 7d 3e c1 a1 96 d1 53 ec f0 db da cd b7 60 73 19 88 6f 61 92 cf f2 80 70 01 07 d4 67 d6 Data Ascii: jBLnWYx~M21m:sb3m(NG]}j;/]&9<2mwont?MavDnD)Es(zye-G!Ig80p6>jcq-%j/A0RI;eU^tkG1}Ou}}>S`soapg
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 53 5e be 17 27 9e 26 69 46 27 9d 8d cf 28 60 69 f3 49 9a 3f 17 fe 35 78 4f e1 cd 8c b7 5e 25 d6 03 5c 21 21 2c e3 c1 66 3e 98 1d 3f 1a f9 b7 c7 bf b4 c7 c4 3f 1f a3 59 e9 97 af a5 e9 e4 95 4b 7b 66 2b 23 29 ec ec 3d 6b 9f d7 63 bf d7 75 09 35 3d 66 e1 ee 2e 25 62 ce f3 12 7a fd 6a b4 5a 3b c5 27 ef 94 00 07 61 5e e3 c8 a9 61 d2 e6 5a 9f 29 53 3e c4 e2 db 50 95 93 30 ee 7c 1d a9 f8 86 65 16 d0 49 2b ee 24 04 42 ec 7d 4f af 15 2d 86 85 a0 e8 90 c8 2e 34 54 be 90 82 aa a8 01 c9 23 03 f2 3c fe 15 e8 fe 12 f1 46 a1 f0 e2 ed 26 b9 d2 dc 5a 98 44 93 c1 24 7e 5b 48 8e 30 ad 92 32 39 20 8a e5 75 7b e4 b0 92 6d 71 d1 4c f7 0e ce 19 b2 a2 01 c9 fb a4 02 cc 46 78 c7 18 f7 af 3f 13 86 51 7e ea 3d 0c 32 75 23 79 3b 9c 3d af 85 2e b4 8b d2 da bc 71 92 41 2b 6c ad d0 7f Data Ascii: S^'&iF'(`iI?5xO^%\!!,f>??YK{f+#)=kcu5=f.%bzjZ;'a^aZ)S>P0\|eI+$B}O-.4T#<F&ZD$~[H029 u{mqLFx?Q~=2u#y;=.qA+l
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 1a 87 22 8f bc cf 6b 26 cc d6 61 5b 9f 68 a3 e8 8f 0f f8 ca 60 d6 3e 16 d1 b4 b9 f5 0d 57 57 43 1c 56 88 08 8d 55 7e f4 92 30 19 0b 8f bc 57 a7 d7 15 f5 8f 83 f4 c3 6d e1 cb 78 35 1f 1d c8 93 41 14 69 74 f1 b8 31 dc b1 03 24 2f 3b 39 20 6d 3f 99 af 83 3e 02 da de 69 ba ad cf c5 6d 5f cc 4f 10 6b d6 d1 c4 14 3f cb 61 6a 39 58 14 02 40 7e 41 72 3a 9c 7a 57 ae f8 bb f6 81 f1 17 80 7c 1a 9e 1d f0 ad cd 84 9e 29 d6 21 74 d2 9b 5b 98 a5 8d a1 0c 03 5d dd b8 23 64 11 92 0e 32 0b b6 d5 5c 93 5f 05 53 0f ec f4 47 da 57 8a 9d 35 2b 1f 68 78 55 b4 ed 3e 3d b6 f3 99 55 80 21 81 c8 e7 db b7 7a ec 34 c6 69 55 48 8c f1 c8 e2 be 6b fd 93 75 99 34 9f 86 f6 7a 6b 78 ab 56 f1 2f d8 25 68 6e fc 4d a9 5a 49 12 6a 97 1d 65 b8 87 78 f9 e2 66 e1 59 7e 52 17 8c e3 35 f4 7f 87 2f Data Ascii: "k&a[h`>WWCVU~0Wmx5Ait1$/;9 m?>im_Ok?aj9X@~Ar:zW\|)!t[]#d2\_SGW5+hxU>=U!z4iUHku4zkxV/%hnMZIjexfY~R5/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49830	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	363	OUT	GET /pl/3393/13376/yyxxzxyxyy.GIF HTTP/1.1 Host: ruamupr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Etag: "90fe9b8a8142548fdfab29f59cb0a164a0eaef81" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkA3vOch9EUrJeXXepH417iJWngUFf5zwG0zryneRRsXH6CIuTJWA3fr%2BV%2FOdYNB%2B2gdTZiKgDgTmO%2FRL8vz7LUFRHe0PN81mnc7nLWkffbZSjfPBsc0AQMizGeeYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378f1daa728a-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49837	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	373	OUT	GET /images/18710/18710-375x250.jpg HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	758	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/jpeg Content-Length: 30132 Connection: close Last-Modified: Thu, 23 May 2024 16:00:48 GMT ETag: "664f6830-75b4" Expires: Fri, 24 May 2024 16:03:01 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51835 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7IoYqpdwbUEEGFxgSTZeUiE9HblVozB%2FnwmQZvOnbC1G6DvZcW%2Bi41Iv8wX30FLqHOezN5UkPHyN9EqOX3vbdUmvanQIVrKKXekDQwa2MTJiMnlecGmLW86Aimvac8kA3HP%2FmFox"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378f1830c466-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	611	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCw"}!1AQa"q2
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 00 0c 03 01 00 02 11 03 11 00 3f 00 f8 91 c8 27 8a 91 4e 18 13 eb 51 54 b1 ab 15 cb 70 7b 1a f2 c0 98 3a 9e 86 96 a3 40 ca 79 93 23 e9 4e 2e 31 c1 a4 95 95 90 0f 07 e5 c7 bf a5 46 f1 bf de 28 71 9e b4 6e 73 c0 6c 7b d2 aa 10 77 1f cf 34 cb 8a b8 e0 37 70 3f 2a 44 47 47 24 0e 3b d2 c4 8c 5c 90 3f 5a 7b 24 bb be 51 d7 de a3 9e 29 d8 96 ac c6 32 87 90 32 9c 01 d4 d3 95 51 8e 15 3f 1a 52 84 0e 9c 9a 74 68 cb f7 c0 1f f0 2a 7c c8 43 63 85 81 cb 1a 96 35 53 9c 1a 4c 82 71 9a 48 d5 ba d6 4a a6 ec d2 31 4c 7c 4a bb b6 e4 7e 35 28 81 48 ce 3f 5a 8b 70 45 07 1c 9a 7a dd b8 c2 a0 3d 39 e2 b3 a9 cb 25 72 b9 13 1e 8c 8a 7a f0 38 db eb 55 ae 9c cb 37 ee c3 7e 55 64 47 bc e4 30 c9 e7 15 a1 a3 68 57 77 a4 ba 42 4a af 57 23 1f ce b1 8c 94 16 a6 b4 d3 72 b2 33 ad 74 fb 89 Data Ascii: ?'NQTp{:@y#N.1F(qnsl{w47p?DGG$;\?Z{$Q)22Q?Rth\|Cc5SLqHJ1L\|J~5(H?ZpEz=9%rz8U7~UdG0hWwBJW#r3t
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 73 d0 f1 c1 c1 e9 d4 03 da bc 97 f6 94 fd 90 7e 0e 7e d3 7a 56 97 a5 7c 4e d2 a6 96 d7 47 b8 f3 ed 63 b5 71 19 1c 0d d1 f1 9f 95 8a a8 c7 60 bc 57 a9 85 cd a1 ed 3f 79 1b 2e a7 d4 c7 8b aa ba 4a 15 17 cc fe 72 3c 41 67 f6 6b fb 7b b7 b3 90 33 86 30 b3 a9 f9 b1 c7 7e dc 8e 6b 9f 99 05 ee a7 3c 52 26 5a 48 18 28 ed 9e f5 fb 7d fb 5d ff 00 c1 1c be 1c fe d0 7e 24 f0 94 bf 0e ee 2c bc 2d 61 a2 a3 43 a9 ac 59 67 78 89 1b 4a 9f e3 c0 c8 c1 c7 4e a7 3c 7c ab fb 6f 7f c1 0e 3c 6f e1 ef 8e 1e 16 d0 bf 64 6f 0f de ea 7a 16 b1 64 57 51 d4 35 07 e2 d2 60 c0 13 23 0c 04 04 1c e7 f4 af ad c1 67 18 1a bc ab 9e d7 3c bc 46 67 4a bc ae 7e 6b f8 58 20 91 f4 7d 52 65 2b 1b 30 8c b1 c9 3d f8 a2 bd 6f f6 ba fd 89 fe 2e 7e c8 ff 00 19 13 e1 57 8e 6c 56 6d 42 e6 c0 5f 58 cf 63 Data Ascii: s~~zV\|NGcq`W?y.Jr<Agk{30~k<R&ZH(}]~$,-aCYgxJN<\|o<odozdWQ5`#g<FgJ~kX }Re+0=o.~WlVmB_Xc
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 54 48 b9 e5 81 1f 71 b0 4f 22 be f3 f8 0b fb 42 fc 31 fd b6 3c 31 69 e3 af 00 eb f6 fa 0f 8e b4 f4 54 32 23 ed 0e 40 ff 00 57 2a 0e a3 8c 67 93 d7 b5 7d 0c 1d 3c 4d 28 ce 5a 7e 87 e2 7c 53 c2 55 70 75 25 56 8a bc 37 3e 82 b8 d4 2c 34 29 ac 74 6f 11 6a f6 b0 de 5e 9f 2a d4 48 c1 3e d3 20 19 3b 7b 16 3d 70 2a d4 84 1f dd 2a 67 b1 1d fe 95 c9 f8 4f c7 5a 3f c4 7b c4 f0 0f c5 4f 0d 2d 97 88 f4 d9 bc e1 65 78 9f f2 d1 3a 4d 09 c7 20 8e 72 3a 56 c4 fa b7 89 f4 ff 00 88 49 e1 2d 43 c1 73 7f 65 5c 58 99 ec 7c 47 6f 30 30 bc a3 ef 42 e8 00 64 6e 84 10 48 6c 93 c5 72 55 c3 4e c8 fc ee 74 e5 07 66 5b 9a 3c af 97 bf 00 1e 73 54 e6 8a 38 c9 0d 0e 47 41 5a 52 8c 11 98 ff 00 87 38 c7 43 db dc e6 a1 31 82 3e 71 9f 50 6b 8e 49 87 43 1a e3 4f 8b 20 8e 00 f4 03 a5 47 22 95 Data Ascii: THqO"B1<1iT2#@Wg}<M(Z~\|SUpu%V7>,4)toj^H> ;{=p**gOZ?{O-ex:M r:VI-Cse\X\|Go00BdnHlrUNtf[<sT8GAZR8C1>qPkICO G"
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 4a d4 4d 6e 39 e1 45 3b 77 1f ba 33 8c 53 e6 91 a7 21 9d 03 e0 67 04 62 b4 8a 4d 68 74 aa ed 5d 9c e3 fe e1 f6 cc 48 20 e7 27 a0 15 15 e0 4b bc aa f4 23 19 1f ce b6 2f 2d da 7b 94 79 22 1e 59 ea 48 ea 2b 3e fe 09 2d d7 72 1d d1 f9 9c 6d 5e 40 c5 54 53 be 82 55 d4 b7 39 b7 d2 2d ae d2 41 71 12 ba c9 f2 c9 1b 8e 18 57 84 78 aa 1f 88 7f b2 d7 c4 08 fe 2f fc 19 d4 26 b7 8d 27 dd 79 69 bb e5 91 73 9d a5 47 04 1e 79 f6 af a1 b5 6b 53 35 ab 3d 93 e0 9e dd cd 73 1e 24 d0 9f 53 d2 a4 b0 bb b5 f3 15 d7 1c f2 1b da bb b0 b8 c9 d0 d0 e3 c5 e1 61 5e 0d 4b 5b 9f 54 7e ca 1f b6 cf c1 9f db cf c1 56 3a 47 89 75 97 d1 3c 6f a6 a2 ad bd f4 2c 16 e6 09 31 ce 09 3f 32 fa a9 af a0 3c 27 f1 33 58 d0 35 c8 fe 14 7c 69 b0 48 6f ee 63 29 a6 eb 10 31 16 da a2 8e 85 58 63 64 98 ea Data Ascii: JMn9E;w3S!gbMht]H 'K#/-{y"YH+>-rm^@TSU9-AqWx/&'yisGykS5=s$Sa^K[T~V:Gu<o,1?2<'3X5\|iHoc)1Xcd
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: e2 95 4e 69 1e 1d f1 e6 f6 ee d2 d9 e5 b7 95 8a 5e 42 51 54 0c e1 81 c0 27 d3 ad 7c a3 e2 3f 0d 6a 51 cf 79 73 6e ce 5e 39 93 c8 dc 71 f3 6e c9 af af fc 7d a2 dd 6a cf 04 13 ae 09 38 93 d0 1c d7 92 f8 f3 e1 4d c1 d6 25 6b 26 01 5d d1 b0 3a 75 e6 bd 4c b6 b4 69 cf 54 71 e2 93 96 c7 8e 2d 8b 6a 5a 6c f6 da 6c cd e7 cd 23 7f a4 e7 ee c6 31 91 f9 e6 a7 f8 86 6d 74 cb 2d 3e 16 2c b7 1e 48 cb 2b 1d 84 05 ef fe f7 5a f4 08 7e 19 cd 6d a5 cf 15 84 44 5d 4f 33 20 e3 0b 8e f8 f4 aa f7 ff 00 0c 75 dd 5a ca 0b 19 b4 5f b5 41 bb 7d da 8f e3 20 61 57 27 90 17 be 2b e9 29 57 a4 e5 ef 23 c3 af 0a 8b 66 7c e5 2f 8e 6e 34 d8 67 b9 22 e9 a7 de c9 18 55 c4 51 83 c6 30 6b 96 b8 f8 8f ad 68 4d e7 47 e2 f7 b7 96 37 f3 26 64 75 f9 9b d0 01 5e c9 f1 0f e0 1f 89 6f 6d 6f 2d ad 74 Data Ascii: Ni^BQT'\|?jQysn^9qn}j8M%k&]:uLiTq-jZll#1mt->,H+Z~mD]O3 uZ_A} aW'+)W#f\|/n4g"UQ0khMG7&du^omo-t
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 50 d8 ef 9a e6 9a 7c b7 34 8d b6 1d 3c b1 db c7 f3 ca 07 07 22 bc fb c7 fe 33 bd d2 d9 9a da 63 b5 79 f9 4d 6e 78 df 5c 16 36 6c b3 07 ce 38 65 5e a2 bc 6b c4 f7 1a ef 88 16 6f ec cb 29 9d 90 96 2c d9 fb b5 b5 1e 49 c7 de 3a 3d 94 6e ae 5f d4 7f 6b ef 16 f8 59 3f b3 34 30 15 e3 f9 84 a5 bb fb fb 7b 54 3a 57 fc 14 13 e3 b5 89 91 0f 8a ee 7c 97 18 36 e6 5c 82 3f 3a f1 cd 5b c3 de 2e 06 69 e6 d3 ae 1a 20 48 79 52 3c ac 7d f9 20 f1 5d 4f c0 8f d8 5b f6 b1 fd a9 f5 00 3e 0a fc 21 d5 f5 4b 76 7d 8f a9 bc 5e 4d 94 47 b9 69 df 0b f8 0c d4 d4 86 0e 4e f5 6d 6f 33 db a1 2c 5d 28 af 63 73 da 3e 1c 7e d7 96 7e 2a d4 22 6f 13 5d 98 6e cc a0 37 99 27 5a fa 03 c0 fe 3b 83 c6 a3 6e 85 a8 09 54 75 d9 28 ff 00 1a e3 be 0c ff 00 c1 bd 5f b4 0d dd cd b6 a5 f1 c7 e3 af 87 bc Data Ascii: P\|4<"3cyMnx\6l8e^ko),I:=n_kY?40{T:W\|6\?:[.i HyR<} ]O[>!Kv}^MGiNmo3,](cs>~~*"o]n7'Z;nTu(_
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 58 92 38 6f 63 ed 55 a5 d4 52 e6 72 b1 73 b0 61 c5 71 41 cf 9b 73 a6 7b 58 f3 5f 8d df 0d 74 af 16 da 48 b6 f1 1f 35 03 61 82 f7 af 9d ec ee b5 af 87 5e 24 fb 3d d4 8e 55 18 01 b8 76 f6 af af ef e2 82 ec 8b 5f 30 83 cf 43 5e 3d f1 ef e1 92 ea 11 fd b6 cd 33 2c 48 4b 32 f5 23 ad 7d 26 55 89 69 38 49 dd 1e 16 2a 9f 2e b1 3d fb f6 1c fd bc 3c 49 f0 77 53 b6 4b 5b f9 6e 74 a9 e4 02 f7 4f 69 32 14 1f bc cb 9e 87 1d 40 af bd 7c 2d ae 69 d1 d9 9f da 13 f6 66 98 5f 68 57 ab f6 8f 14 78 3e d9 f1 cb 00 5a 78 14 74 23 92 d1 f4 cf 23 8e 2b f0 df c1 1e 2e d4 7c 27 ad 24 13 ca e2 20 c0 2a 13 d0 e7 ad 7d 7d fb 20 fe d7 de 2d f8 1f e3 33 ac 78 72 f5 e6 b2 69 56 4d 46 c4 b7 ca e8 47 cc df 50 38 af 46 a4 5c 2a 5f a1 f1 b9 e6 45 43 1f 49 d5 a7 a4 8f bd 3f 6a cf d8 97 f6 7b Data Ascii: X8ocURrsaqAs{X_tH5a^$=Uv_0C^=3,HK2#}&Ui8I.=<IwSK[ntOi2@\|-if_hWx>Zxt##+.\|'$ }} -3xriVMFGP8F\*_ECI?j{
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 0e d5 7c aa a7 95 f3 7f bd 9e 95 f5 4f c5 bf d9 1f 59 f0 3d ad e6 b9 35 a5 b3 5a 59 22 96 96 35 60 ee 09 ec 30 79 1d f1 da bc 92 2f 09 ad f4 6d 24 25 99 54 6c 45 1c 04 fa d7 c8 63 69 63 70 af df 89 fa 6e 57 57 01 99 53 52 a3 2b 9e 70 9e 12 b9 b4 99 6d 9e 58 07 98 3e 49 16 4e 41 15 d4 78 1f c4 da fe 87 a8 c5 05 cc b2 3c 4a 78 10 a9 67 50 0f de 07 a5 75 31 78 5b 47 82 25 fb 66 9c 80 29 c1 73 27 af d6 aa df e8 b7 7a 5c 91 de c4 a1 60 79 33 6f 34 52 f1 1e 3b f1 da b8 14 a5 5e 36 7b 9e 8d 5c 3d 4c 32 bf 43 dc bc 17 e3 33 26 9b 6f 2d ad ce e5 ea f3 37 c8 4e 31 c1 6e 70 6b d1 34 7b db 2d 5e ca 29 a4 91 a3 b8 dc 4c 43 70 fd e8 cf dd c9 eb 8a f9 6f c0 fe 39 bc d1 af 76 59 5d 31 72 e7 7c 12 2f ca 73 d7 19 f5 af 69 f8 7d e2 98 ef ed 64 d3 e7 32 da 48 47 cd 05 c9 0c Data Ascii: \|OY=5ZY"5`0y/m$%TlEcicpnWWSR+pmX>INAx<JxgPu1x[G%f)s'z\`y3o4R;^6{\=L2C3&o-7N1npk4{-^)LCpo9vY]1r\|/si}d2HG
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: f2 c1 28 23 8f bb d4 2d 8d d9 b7 92 40 e0 0c e1 7a 81 5b 16 0e 92 38 96 d9 81 d8 02 e0 f5 35 e7 5a 94 f3 d8 6a 2c d3 c9 fb d0 7e ff 00 f7 85 76 9e 1a d4 23 9a 08 1a 38 f7 e7 92 7d 7d eb cb 92 7b a1 cd 72 c8 ea b4 6d 52 0b 86 96 cd 5a 45 92 26 04 99 13 93 9f 41 e9 ef 57 ef 01 78 8a fc 84 91 d4 1e 7f 2a ca 8d db 79 b8 54 20 91 f7 aa ed b5 d3 a3 2b 11 c7 f1 7d 29 36 fa 9a 72 f3 44 e7 7c 48 b7 16 2e 2e 61 75 76 ce 36 fa 57 17 e2 28 e7 96 61 22 e4 b0 3b a4 5c f4 fc 3f 3a f4 fd 5b 4f b7 d6 25 c2 4b b0 1f e2 c5 70 be 2d d2 a5 91 a6 b3 b7 de f2 10 54 08 c0 cc 9f 5c ff 00 3f 7a e9 c3 c6 2e 5c b6 dc f3 71 52 8c 20 db 3c 8b e2 a7 c5 3b bd 0e 31 68 12 49 65 ea be 52 16 f6 e8 07 5a f7 6f d8 97 f6 af d3 7c 69 e1 f4 f0 97 89 2e a5 b7 d4 74 e1 b6 f6 da f1 4a c9 1f 64 95 Data Ascii: (#-@z[85Zj,~v#8}}{rmRZE&AWx*yT +})6rD\|H..auv6W(a";\?:[O%Kp-T\?z.\qR <;1hIeRZo\|i.tJd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49835	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	373	OUT	GET /images/18783/18783-375x250.jpg HTTP/1.1 Host: widget.adcovery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	754	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/jpeg Content-Length: 32922 Connection: close Last-Modified: Thu, 23 May 2024 16:00:41 GMT ETag: "664f6829-809a" Expires: Fri, 24 May 2024 16:01:50 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 51906 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DhJAYlyDRcj1VgWSsiFY4oFId6%2FxyUaTWQnJckrLayHlYvXQqzouiCmA2WDdbQx7NmkIqumxZetTRycrjUxSGIFf91hmeOozeyVF9fY6aSzmXXn0ZEadE7C0EUtauAnm13pWipEU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378f1e4b8ce8-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	615	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 fa 01 77 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCw"}!1AQa"q2
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 00 02 11 03 11 00 3f 00 fd a9 3f b2 ef ec c8 87 03 e0 f7 86 86 7f bb 61 1f f8 d3 bf e1 97 ff 00 66 75 00 b7 c2 0f 0e f3 df ec 49 fd 0d 7e 18 ff 00 c3 c5 ff 00 6d 78 d0 4a df b4 2e b6 a9 9c 16 97 cb 1e ff 00 f3 ce 8f f8 78 e7 ed af bc ee fd a2 75 a2 00 c8 2a f1 60 0f 53 94 15 f3 10 e2 ba 33 5a 45 d8 fe 87 c4 fd 1d b8 87 0d 24 a7 89 a6 9b f3 b1 fb 99 27 ec c5 fb 34 70 4f c2 0f 0d e4 9f 97 16 8b cf eb 53 5b fe cb 1f b3 8c ab e6 c1 f0 5f c3 d8 3f de d3 d4 d7 e2 c7 c1 6f da b3 fe 0a 43 fb 40 78 f2 cb c0 ff 00 0b 3e 34 78 9e fa fa ea 45 02 e2 d4 46 60 b7 5d eb 97 91 d5 42 af 19 c0 27 90 1b d0 d7 ed cf c0 3f 0d 78 bb c2 3f 0c f4 8f 0f 78 eb c5 37 1a d6 a9 6b a7 43 1d fe a5 79 fe b6 e2 6d a3 73 9c 71 c9 fd 73 5e c6 5f 98 4b 1d 17 24 ac 8f cb b8 bf 82 aa 70 75 75 Data Ascii: ??afuI~mxJ.xu*`S3ZE$'4pOS[_?oC@x>4xEF`]B'?x?x7kCymsqs^_K$puu
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: a1 c8 f8 53 a1 7d 45 88 ff 00 1a 41 fb 33 fc 0c ef f0 a7 45 3f 5b 35 ff 00 e2 6b bc dc ec 33 8f ca 8f 9f de ab da 54 33 e5 47 09 ff 00 0c d5 f0 2d 0e 7f e1 52 68 43 e9 66 bf fc 4d 32 6f d9 cb e0 5a 21 76 f8 5b a2 2f 4e 5a cd 7f aa d7 7d f3 0e 79 ae 6f e2 d6 85 e2 0f 12 7c 3b d5 f4 1f 0a eb d3 69 5a 8d dd 8b c5 67 a8 c0 46 fb 79 19 48 57 5c f1 90 4d 29 54 94 53 93 35 a5 4e 35 2a a8 37 6b b5 f2 39 e9 7f 67 ff 00 80 e8 de 5b 7c 32 d0 01 ef 8b 48 ff 00 c2 94 7e cf bf 01 c7 4f 86 9a 18 07 ae 2d 90 7f 20 2b f1 77 f6 81 fd a5 3f e0 a4 7f b3 9f c4 8b cf 00 7c 4b f8 cb e2 b8 2e 2d 27 68 ad 6f 64 8d 0c 57 b0 82 4a ca 87 6e d2 48 e0 8a e2 7f e1 e2 df b6 dc 2a 0b fe d0 de 20 e7 fd 88 71 ff 00 a0 57 cf d5 e2 2a 74 6a ba 6e 2f 4f 23 f6 ec af c1 0c d3 34 c1 43 11 43 15 Data Ascii: S}EA3E?[5k3T3G-RhCfM2oZ!v[/NZ}yo\|;iZgFyHW\M)TS5N57k9g[\|2H~O- +w?\|K.-'hodWJnH qW*tjn/O#4CC
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 5f 57 08 52 a7 1b 41 58 fe 7e c4 62 71 18 ca 8e 75 a6 db f3 d4 1a 54 8c 65 f8 c9 c0 cd 64 78 87 52 d0 e0 8c da eb 17 70 a0 75 1f bb 93 04 90 78 e8 7d 71 f8 f4 ad 2b b0 cc 72 a0 8e 0e 1b d3 a7 1f 8f e9 5f 19 ff 00 c1 59 ff 00 63 8f 89 1f b4 a7 c3 7b 4f 13 7c 1d bf bb 8f c4 7e 1a 13 3c 1a 7c 17 8f 1a ea 10 b0 5d d0 13 b8 2e ee 32 09 e0 1c e2 b1 c4 4a 50 a2 e5 18 dd ae 87 a1 92 e1 28 63 f1 f0 a5 56 a7 22 6f e2 ec 7b 26 b7 fb 3d 7e c9 1e 2a d5 9f 51 d7 fe 18 78 56 e6 e2 46 cc 93 4f a5 c4 ce c7 d4 92 2a ac bf b2 57 ec 3a cc 3e d3 f0 7f c1 cf 8e cd a3 c1 ff 00 c4 9a fc 30 d7 7c 19 fb 4c f8 5f 56 9f 43 d7 34 4f 1a db 5c 5a 3f 95 2a 35 a5 e8 f9 87 38 f9 7e 56 03 a6 e1 d6 aa 0d 33 f6 87 6f 99 f4 ef 19 95 ff 00 af 7b ea f9 49 67 34 d5 47 7c 3e de 47 f4 55 1f 0a 71 Data Ascii: _WRAX~bquTedxRpux}q+r_Yc{O\|~<\|].2JP(cV"o{&=~QxVFOW:>0\|L_VC4O\Z?*58~V3o{Ig4G\|>GUq
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: ff 00 eb d1 fd b5 42 2a ef 0f f8 17 ff 00 10 9b 33 7f f3 3a ff 00 c9 9f f9 9f d0 57 c3 ef 85 7f b3 e7 c2 a7 f2 3e 1e f8 2b 42 d2 5a 73 86 1a 75 9c 69 bb 1d 09 2a 07 b7 e7 5e 89 67 3c 6f b1 12 40 c0 8c a1 03 b5 7f 33 f7 be 37 f8 97 65 aa 35 95 f7 8d f5 c8 2e 60 95 d5 a3 93 53 b8 8d e3 90 60 9c e5 b2 0f 20 e3 1d bd 09 af e8 7b f6 55 b8 9f 51 fd 9f 7c 13 75 73 2b 4b 28 f0 ed a7 ef 26 72 cc 49 81 72 49 3c 92 4f 73 5e be 4f 9a 51 c7 b7 18 c7 96 dd 0f cd 3c 47 f0 ff 00 1f c1 d1 a1 5b 15 89 f6 de d5 36 99 e9 ca 00 1c 52 d0 33 8e 68 af 6d 6c 7e 50 04 f0 6a 1b c4 0f 0b 29 a9 1c a8 1f 33 63 9a c4 f1 e7 89 74 ef 0c 78 6a fb 59 d4 ee 04 50 5a da 3c d3 3b 76 45 52 58 fe 40 d2 93 e4 57 34 a3 4e 55 6a a8 45 5d b6 7e 55 7f c1 7f ff 00 68 d1 ac f8 cf c3 3f b3 b6 93 7a 04 Data Ascii: B3:W>+BZsui^g<o@37e5.`S` {UQ\|us+K(&rIrI<Os^OQ<G[6R3hml~Pj)3ctxjYPZ<;vERX@W4NUjE]~Uh?z
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 55 da ab 8c 80 65 07 29 90 40 ea 3d 6b f3 73 fe 09 3d ff 00 04 ba f1 d7 c1 9f 17 27 ed 05 fb 40 58 b5 ae bf 1c 26 3d 1f 46 8a 50 46 9e ac 46 58 90 4e f9 08 f9 7a e3 04 d7 e8 f5 ac 02 2f 98 29 1b 97 bf 72 3f 97 15 f4 38 49 d4 ab 49 4a 4a cf b1 f8 8f 13 e5 d9 76 59 99 bc 3e 0e b7 b5 8a fb 5d c7 ca b9 40 c4 7f 17 23 1f e7 15 95 aa d8 78 7d dd a7 d6 6d ad dd 76 fc ad 38 19 5f 50 4f 53 eb f8 56 ac ec be 5e 7c bd e0 b6 02 9e 73 ef 5f 9d bf f0 54 4f 14 7f c1 44 3e 21 78 a2 5f 84 1f b3 47 c1 8f 13 db 78 66 18 f6 de f8 93 4d 78 12 4b c2 41 1b 61 25 c1 08 01 39 cf 39 02 9e 32 af b1 a5 cd cb 77 d8 cf 87 f2 c7 99 e3 e3 43 da aa 49 ef 26 ed 63 ec 2d 53 e3 4f ec c9 e1 db f7 d3 b5 3f 1b f8 5a de 55 6c 3c 73 ea 16 e0 af b1 05 b3 55 97 e3 97 ec a3 34 9e 6b 7c 42 f0 9f d0 Data Ascii: Ue)@=ks='@X&=FPFFXNz/)r?8IIJJvY>]@#x}mv8_POSV^\|s_TOD>!x_GxfMxKAa%992wCI&c-SO?ZUl<sU4k\|B
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: ed 16 1d b3 2e d1 f3 8c b8 f9 70 31 8e b5 fb 01 fb 33 f8 67 56 f0 7f c1 3f 0a f8 73 c4 1a 7b 5b df 59 68 96 d1 5d 42 df 7a 19 44 4a 19 3d 06 3d ab c1 c9 f0 d5 28 63 6a cd c6 c9 9f b5 f8 a3 9f 65 f9 af 0a e5 94 e9 54 53 9c 23 69 6b aa d0 f4 51 d2 99 2b 7c bf 2b 62 9c ac a5 41 dd 4d 95 51 90 8f e5 5f 4b e8 7e 0d ea 56 98 b6 d2 c4 b1 c0 ef fc ff 00 99 af 8e ff 00 e0 b1 bf b4 64 df 05 7f 64 ed 4f 43 d1 2e bc 9d 5b c5 52 26 95 61 89 36 b2 89 38 77 04 ff 00 b1 9e 3f da af b0 ae 5b 6d bb c8 24 2b 81 ce e1 db 15 f9 1f ff 00 05 ba d2 be 3d 7c 60 fd a1 f4 cf 05 78 4f e1 4f 89 35 0d 03 c3 da 5a cd 1d dd 8e 9b 2c 96 f7 13 b9 cb 9f 95 48 ca 2e 14 57 9f 99 ce ac 30 52 51 57 6c fb bf 0d b0 18 1c 77 16 61 fe b9 24 a9 c5 f3 3b e9 b7 a9 f9 ea 64 80 24 73 5b ee 8e 18 94 24 Data Ascii: .p13gV?s{[Yh]BzDJ==(cjeTS#ikQ+\|+bAMQ_K~VddOC.[R&a68w?[m$+=\|`xOO5Z,H.W0RQWlwa$;d$s[$
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 7e d0 92 38 c7 65 55 3d 4f b8 af 9b 7c 6f ff 00 05 59 f0 be 81 aa cb a7 78 57 e0 b5 d6 a1 12 5c 18 ad ae ae af 52 14 b8 3f de 55 0b 91 58 4e 95 28 ad 59 b5 39 e2 a5 b1 fd 1f c5 f1 bf e0 a5 a1 2d ff 00 0b 57 c3 aa a1 70 48 d5 a1 1c 9f f8 15 59 5f 8d bf 07 c0 dc ff 00 15 3c 3e ab d8 9d 5a 2f ea d5 fc e4 78 43 fe 0a 4f ab ea 33 c7 27 8a 7f 66 f9 ec ec a7 1f f1 f7 67 a8 a3 b4 79 3f 7b 6b 8c 37 a6 3d 6b da be 1b fe d2 bf 06 fe 29 dd 0d 2b 4c d5 62 b5 bf 8c 05 36 3a c4 22 0b 81 c8 c0 db d1 c6 71 f3 0a 70 a7 45 e8 9e a3 9c 2b c7 59 a3 f7 36 4f 8d bf 07 36 ed 1f 15 3c 3a 70 79 c6 af 0f ff 00 15 50 b7 c5 ef 83 72 3e 4f c4 bf 0e 30 c7 53 ab c3 ff 00 c5 57 e3 ed b4 96 c1 f1 24 70 fc bc 6d 55 00 95 f5 03 1c d5 97 5b 74 c2 fd 9a 1e 79 dd b3 81 ed d2 b6 58 45 2d ce 75 Data Ascii: ~8eU=O\|oYxW\R?UXN(Y9-WpHY_<>Z/xCO3'fgy?{k7=k)+Lb6:"qpE+Y6O6<:pyPr>O0SW$pmU[tyXE-u
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 8c 7b ec 04 53 be d7 6d bb 03 ec e7 d7 f7 7d 7f 4a 9f ec ea 4e 5c cf 73 7f ed 2c 44 69 7b 28 c9 db d7 43 f5 be 2f 8c bf 06 c2 8f 2f e2 7f 87 d4 01 8f 97 58 87 ff 00 8a a2 bf 24 7e d5 6f fd cb 71 ff 00 6c e8 aa 78 14 d9 83 c4 ca e7 9f 2b cc bf 33 b7 5e 9c d0 d2 a9 1f bd 63 ed 59 56 fa a3 4c 72 ae 76 8e 80 d5 79 f5 67 79 5e 29 09 01 46 46 0d 7a 9c b6 38 b9 d9 b9 0d ca 09 36 ab 73 dc 13 4f fb 4a ee 31 bc db 0f f0 90 78 cd 73 36 fa ac 46 7d ff 00 30 e7 1c b7 4a 92 f7 53 91 f2 90 48 14 85 dc 43 8c f1 d7 3c fa 7f 5a 4d a5 ab 29 37 2d 11 bc 35 4f 36 5f 2d a5 23 07 03 6f 39 3f e0 3f ad 1a 96 bb 6b a5 db 49 75 a8 5f c3 69 04 23 32 5d dc 4a 12 31 ea 72 48 c8 f4 af 9f 3c 7b fb 63 78 7f 4a d4 a5 f0 27 c2 bb 47 d6 f5 d6 77 4b 84 63 88 ad 4a f2 5d 88 fb cb d7 81 d7 15 Data Ascii: {Sm}JN\s,Di{(C//X$~oqlx+3^cYVLrvygy^)FFz86sOJ1xs6F}0JSHC<ZM)7-5O6_-#o9??kIu_i#2]J1rH<{cxJ'GwKcJ]
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 60 48 cd ec 67 1d b3 48 d7 b6 c1 fc b1 34 58 3d 4e ea 3d bc c3 d9 d3 e8 7c d6 3f e0 9a 1e 0d 8f e7 4f 8a 7a c0 3e bf d9 a9 fe 34 a9 ff 00 04 d4 f0 b4 47 fe 4a de b1 21 23 a7 d8 23 e3 f5 af a5 04 f6 aa b9 fb 4c 44 7f bd 41 bc b3 41 b9 a7 88 0e e7 75 2f 6f 51 89 46 37 d0 f9 be 2f f8 26 c7 84 e1 39 6f 8b 5a c3 0c f7 d3 e3 38 fd 6a 51 ff 00 04 de f0 7e 3e 5f 8a fa b1 3e 9f d9 71 8f eb 5f 44 ff 00 69 69 c3 fe 5f 62 ff 00 be e9 0e a5 a7 0c 15 bc 8b fe fb a3 da d4 5d 46 a3 dc f9 a2 ef fe 09 91 e1 39 26 fb 41 f8 b5 ac 2a 8e a1 6c 62 cf ea 69 8b ff 00 04 cd f0 5b 36 0f c5 df 10 1f fb 72 84 d7 d3 0d aa d9 03 b8 de c2 31 dc 3d 34 6a d6 04 e4 6a 11 1f fb 68 0d 3f 6f 31 aa 70 b9 f3 33 ff 00 c1 30 7c 23 76 e5 25 f8 c7 af 85 1d 07 f6 7c 26 a1 1f f0 4b bf 06 c8 c7 6f c5 Data Ascii: `HgH4X=N=\|?Oz>4GJ!##LDAAu/oQF7/&9oZ8jQ~>_>q_Dii_b]F9&A*lbi[6r1=4jjh?o1p30\|#v%\|&Ko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49832	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	382	OUT	GET /awl/3393/13376/18529,18710,18662/xzyxxyxxzz.GIF HTTP/1.1 Host: ruamupr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	780	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Etag: "90fe9b8a8142548fdfab29f59cb0a164a0eaef81" Access-Control-Allow-Origin: * X-Tornado: yes CF-Cache-Status: BYPASS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9j2FNrM2DhZQZBdIJ%2B5j474i4iLzt4EETRn05M45EC2d9ral6dD%2BJSl%2FvhW3Dlw07KWUJaq7f5rc7h%2Bp0jKhEhJTylpehQTNMUy7iZpaZzj5WZQaXbQ63ZlOoMj%2BSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b378f3c5f4308-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 fc 6a 6c 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87ajl,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49839	142.251.5.157	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	656	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-71705037-13&cid=1010184661.1716532012&jid=1346688145&gjid=165817769&_gid=297082714.1716532012&_u=YADAAEAAAAAAACAAI~&z=455863173 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 06:26:56 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 24 May 2024 06:26:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:26:56 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49845	104.17.167.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:56 UTC	673	OUT	GET / HTTP/1.1 Host: c.adsco.re Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:56 UTC	1263	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2678400 Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re") Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect Expires: Mon, 24 Jun 2024 06:26:56 GMT ETag: W/"DWg73zXYn5haECmronil2Q==" CF-Cache-Status: HIT Age: 29473 Server: cloudflare CF-RAY: 888b3791df237c81-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:56 UTC	106	IN	Data Raw: 37 61 63 35 0d 0a 2f 2a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 72 61 66 66 69 63 20 76 61 6c 69 64 61 74 69 6f 6e 20 62 79 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 61 64 73 63 6f 72 65 2e 63 6f 6d 27 3e 41 64 73 63 Data Ascii: 7ac5/*<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adsc
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 6f 72 65 3c 2f 61 3e 2c 20 61 20 62 6f 74 20 61 6e 64 20 70 72 6f 78 79 20 64 65 74 65 63 74 69 6f 6e 20 73 65 72 76 69 63 65 20 62 79 20 41 64 73 63 6f 72 65 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 44 4d 43 43 2e 3c 73 63 72 69 70 74 3e 69 66 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 21 3d 27 27 29 7b 74 72 79 7b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 61 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 61 2e 6f 70 65 6e 28 22 47 45 54 22 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f Data Ascii: ore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.locatio
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 39 5d 2c 35 2c 35 36 38 34 34 36 34 33 38 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 34 5d 2c 39 2c 2d 31 30 31 39 38 30 33 36 39 30 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 33 5d Data Ascii: 11],14,643717713);g=W(g,h,l,d,b[0],20,-373897302);d=W(d,g,h,l,b[5],5,-701558691);l=W(l,d,g,h,b[10],9,38016083);h=W(h,l,d,g,b[15],14,-660478335);g=W(g,h,l,d,b[4],20,-405537848);d=W(d,g,h,l,b[9],5,568446438);l=W(l,d,g,h,b[14],9,-1019803690);h=W(h,l,d,g,b[3]
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 2c 68 2c 6c 2c 62 5b 34 5d 2c 36 2c 2d 31 34 35 35 32 33 30 37 30 29 3b 6c 3d 58 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 31 5d 2c 31 30 2c 2d 31 31 32 30 32 31 30 33 37 39 29 3b 68 3d 58 28 68 2c 6c 2c 64 2c 67 2c 62 5b 32 5d 2c 31 35 2c 37 31 38 37 38 37 32 35 39 29 3b 67 3d 58 28 67 2c 68 2c 6c 2c 64 2c 62 5b 39 5d 2c 32 31 2c 2d 33 34 33 34 38 35 35 35 31 29 3b 65 5b 30 5d 3d 64 2b 65 5b 30 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 31 5d 3d 67 2b 65 5b 31 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 32 5d 3d 68 2b 65 5b 32 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 33 5d 3d 6c 2b 65 5b 33 5d 26 34 32 39 34 39 36 37 32 39 35 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 62 2c 64 2c 67 2c 68 2c 6c 29 7b 62 3d 28 62 2b 65 26 34 32 39 34 39 36 37 32 39 35 29 Data Ascii: ,h,l,b[4],6,-145523070);l=X(l,d,g,h,b[11],10,-1120210379);h=X(h,l,d,g,b[2],15,718787259);g=X(g,h,l,d,b[9],21,-343485551);e[0]=d+e[0]&4294967295;e[1]=g+e[1]&4294967295;e[2]=h+e[2]&4294967295;e[3]=l+e[3]&4294967295}function P(e,b,d,g,h,l){b=(b+e&4294967295)
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 2f 67 69 2c 22 5c 5c 21 22 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 69 2c 22 5c 5c 3b 22 29 3a 22 22 2c 62 2b 3d 67 2b 22 3b 22 29 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 76 61 72 20 65 3d 0a 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 65 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 74 72 79 7b 65 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 74 72 79 7b 65 Data Ascii: /gi,"\\!").replace(/;/gi,"\\;"):"",b+=g+";")}return b}function cb(){if(window.XMLHttpRequest)var e=new XMLHttpRequest;else if(window.XDomainRequest)e=new XDomainRequest;else if(window.ActiveXObject)try{e=new ActiveXObject("Msxml2.XMLHTTP")}catch(b){try{e
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 6c 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 69 66 28 34 21 3d 68 2e 72 65 61 64 79 53 74 61 74 65 29 67 28 32 29 3b 65 6c 73 65 20 69 66 28 32 30 30 21 3d 68 2e 73 74 61 74 75 73 29 7b 69 66 28 35 30 30 3d 3d 68 2e 73 74 61 74 75 73 26 26 68 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 63 6c 75 64 65 73 28 22 44 65 63 6f 6d 70 72 65 73 73 65 64 20 73 69 7a 65 20 69 73 20 30 20 62 79 74 65 73 22 29 29 72 65 74 75 72 6e 22 70 22 3d 3d 65 3f 6f 62 28 21 31 29 3a 22 74 22 3d 3d 65 3f 70 62 28 21 31 29 3a 22 62 22 3d 3d 65 26 26 71 62 28 21 31 29 2c 21 30 3b 67 28 31 45 33 2b 68 2e 73 74 61 74 75 73 29 7d 65 6c 73 65 20 64 26 26 64 28 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 30 29 7d 3b 22 6f 6e 65 72 72 6f 72 22 69 6e 20 68 26 26 28 68 2e 6f 6e 65 72 72 6f 72 3d 0a Data Ascii: l=function(v){if(4!=h.readyState)g(2);else if(200!=h.status){if(500==h.status&&h.response.includes("Decompressed size is 0 bytes"))return"p"==e?ob(!1):"t"==e?pb(!1):"b"==e&&qb(!1),!0;g(1E3+h.status)}else d&&d(h.responseText,0)};"onerror"in h&&(h.onerror=
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 3d 64 3f 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 76 5f 22 2b 65 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 65 5f 22 2b 65 29 29 3a 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 76 5f 22 2b 65 2c 62 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 65 5f 22 2b 65 2c 2b 6e 65 77 20 44 61 74 65 2b 33 36 30 30 2a 64 29 29 29 7d 63 61 74 63 68 28 6c 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d Data Ascii: =d?(window.localStorage.removeItem("v_"+e),window.localStorage.removeItem("e_"+e)):(window.localStorage.setItem("v_"+e,b),window.localStorage.setItem("e_"+e,+new Date+3600*d)))}catch(l){}}function K(){return"undefined"!==typeof performance&&"undefined"!==
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 30 3b 62 3c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 65 2e 70 75 73 68 28 45 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 62 5d 29 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 0a 42 28 78 29 3b 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2c 62 3d 5b 5d 3b 62 2e 70 75 73 68 28 65 2e 73 74 61 72 74 45 29 3b 62 2e 70 75 73 68 28 65 2e 6f 6e 4c 6f 61 64 54 29 3b Data Ascii: 0;b<window.location.ancestorOrigins.length;b++)e.push(E(window.location.ancestorOrigins[b]))}catch(d){return-1}return e}();B(x);x=function(){if(!window.chrome\|\|!window.chrome.csi)return"";var e=window.chrome.csi(),b=[];b.push(e.startE);b.push(e.onLoadT);
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 69 70 63 52 65 6e 64 65 72 65 72 29 72 65 74 75 72 6e 20 32 30 3b 69 66 28 22 5f 70 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 22 63 61 6c 6c 50 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 31 3b 69 66 28 22 5f 5f 70 68 61 6e 74 6f 6d 61 73 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 32 3b 69 66 28 22 42 75 66 66 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 33 3b 69 66 28 22 65 6d 69 74 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 34 3b 69 66 28 22 73 70 61 77 6e 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 35 3b 69 66 28 22 77 65 62 64 72 69 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 2e 63 6c 69 65 6e 74 49 6e 66 6f 72 6d 61 74 69 Data Ascii: fined"!==typeof ipcRenderer)return 20;if("_phantom"in window\|\|"callPhantom"in window)return 1;if("__phantomas"in window)return 2;if("Buffer"in window)return 3;if("emit"in window)return 4;if("spawn"in window)return 5;if("webdriver"in window.clientInformati
2024-05-24 06:26:56 UTC	1369	IN	Data Raw: 65 6e 74 75 6d 22 29 3f 31 34 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 35 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 72 69 76 65 72 22 29 3f 0a 31 36 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 37 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 77 65 62 64 72 69 76 65 72 22 29 3f 31 38 3a 6e 75 6c 6c Data Ascii: entum")?14:window.document.documentElement.getAttribute("selenium")?15:window.document.documentElement.getAttribute("driver")?16:null!==document.documentElement.getAttribute("selenium")?17:null!==document.documentElement.getAttribute("webdriver")?18:null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49833	165.22.209.237	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:57 UTC	345	OUT	GET /f/gstats HTTP/1.1 Host: souhaija.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:57 UTC	261	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:26:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Cache-Control: no-store Cache-Control: no-cache
2024-05-24 06:26:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49841	185.200.118.51	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:57 UTC	617	OUT	POST / HTTP/1.1 Host: gu2nbmodgvw2.l4.adsco.re Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:57 UTC	464	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:57 GMT Content-Type: text/html Content-Length: 0 Last-Modified: Fri, 02 Jun 2023 14:03:32 GMT Connection: close ETag: "6479f6b4-0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range Access-Control-Expose-Headers: Content-Length,Content-Range Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49842	38.132.109.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:57 UTC	617	OUT	POST / HTTP/1.1 Host: gu2nbmodgvw2.n4.adsco.re Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:57 UTC	464	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:57 GMT Content-Type: text/html Content-Length: 0 Last-Modified: Fri, 16 Jun 2023 08:37:42 GMT Connection: close ETag: "648c1f56-0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range Access-Control-Expose-Headers: Content-Length,Content-Range Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49848	162.252.214.5	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:57 UTC	562	OUT	POST /p HTTP/1.1 Host: adsco.re Connection: keep-alive Content-Length: 2932 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:57 UTC	2932	OUT	Data Raw: 78 5e bd 58 eb 6a 24 c7 15 fe 9f a7 28 79 21 96 40 d3 53 d5 d5 57 15 8b d1 65 56 d6 ae a4 95 35 d2 6a 8d 6d 86 9a ae ea 99 5a f5 74 f7 76 f7 48 1a 99 80 4d 20 17 42 7e 86 c4 89 1d 02 59 db c1 c4 31 09 04 6c e3 10 88 5f c0 fb 06 fb 23 bb b6 43 82 5f 21 a7 7a ae d2 8c a4 f5 3a 64 a6 67 ba eb d4 77 4e 5d ce a9 73 e9 39 d3 c4 8c b8 c4 b1 b1 69 51 8f bd 14 dd 5c 1e 7e b2 dd ad 8d dd 7c 7d e5 b0 d2 4e ef de dd 5a eb d5 fd da c1 1d ef fe 4a 6d 83 99 a6 e3 3b 4c 7f 70 f9 6d ed 9b f1 ca 56 b2 b6 7e 74 60 b2 39 ca 8e 65 b3 15 99 8c 10 c6 e6 30 9b b3 fa 63 50 13 63 c7 c3 94 31 97 7a d8 f0 a0 9b d8 6c 8e d0 71 b7 6b d8 26 61 ed a2 48 ab c4 20 23 3a 21 86 e7 98 30 dc 08 e8 1b a6 4b d8 ed a2 2d 33 d6 8d 0f e3 e4 38 9e 18 c4 d0 a3 9c 6b ea c9 1a 0e b3 31 86 25 b3 bd 5e Data Ascii: x^Xj$(y!@SWeV5jmZtvHM B~Y1l_#C_!z:dgwN]s9iQ\~\|}NZJm;LpmV~t`9e0cPc1zlqk&aH #:!0K-38k1%^
2024-05-24 06:26:57 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive AS-P-1: OK nyc222 AS-P-2: OK AS-P-3: OK Access-Control-Max-Age: 2592000 Cache-Control: no-transform Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true
2024-05-24 06:26:57 UTC	126	IN	Data Raw: 37 33 0d 0a 42 41 59 41 5a 6c 41 7a 4d 51 46 6d 55 44 4d 78 67 41 47 42 41 63 41 41 49 42 43 54 51 52 7a 63 36 54 57 42 49 79 72 53 42 6d 66 78 59 44 45 5a 4c 67 53 72 39 48 64 73 35 5a 73 54 4f 33 6c 68 63 4f 31 62 77 51 41 67 33 32 79 4e 35 33 4b 64 5a 75 41 63 34 35 79 71 46 64 37 57 7a 69 41 39 5a 53 64 72 43 43 68 34 39 4d 61 58 69 56 49 64 44 4a 59 0d 0a 30 0d 0a 0d 0a Data Ascii: 73BAYAZlAzMQFmUDMxgAGBAcAAIBCTQRzc6TWBIyrSBmfxYDEZLgSr9Hds5ZsTO3lhcO1bwQAg32yN53KdZuAc45yqFd7WziA9ZSdrCCh49MaXiVIdDJY0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49859	162.252.214.5	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	461	OUT	GET / HTTP/1.1 Host: 4.adsco.re Connection: keep-alive Origin: https://c.adsco.re User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c.adsco.re/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	359	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: https://c.adsco.re Access-Control-Max-Age: 2592000 Cache-Control: private, max-age=5
2024-05-24 06:26:59 UTC	56	IN	Data Raw: 32 64 0d 0a 38 2e 34 36 2e 31 32 33 2e 31 37 35 2c 39 35 33 65 65 36 36 38 31 62 31 30 64 62 35 33 30 66 30 61 38 63 38 36 34 36 62 62 63 33 31 65 0d 0a 30 0d 0a 0d 0a Data Ascii: 2d8.46.123.175,953ee6681b10db530f0a8c8646bbc31e0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49849	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	550	OUT	GET /Scripts/MediaScripts/b.js?v=4 HTTP/1.1 Host: cdn.engine.4dsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:59 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: * Vary: Accept-Encoding Cache-Control: public, max-age=497 P3P: CP="CAO PSA OUR IND" Expires: Fri, 24 May 2024 06:35:16 GMT Access-Control-Allow-Origin: * Last-Modified: Fri, 24 May 2024 06:00:51 GMT CF-Cache-Status: HIT Age: 536 Server: cloudflare CF-RAY: 888b379fdd0a7c9f-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:59 UTC	757	IN	Data Raw: 37 64 35 31 0d 0a 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 20 7b 20 76 61 72 20 74 20 3d 20 4d 5b 65 5d 20 3d 20 7b 7d 3b 20 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 20 74 5b 6e 5d 20 3d 20 21 30 20 7d 29 2c 20 74 20 7d 20 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 20 6e 2c 20 72 29 20 7b 20 69 66 20 28 72 20 3d 3d 3d 20 74 20 26 26 20 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 29 20 7b 20 76 61 72 20 69 20 3d 20 22 64 61 74 61 2d 22 20 2b 20 6e 2e Data Ascii: 7d51/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function (e, t) { function _(e) { var t = M[e] = {}; return v.each(e.split(y), function (e, n) { t[n] = !0 }), t } function H(e, n, r) { if (r === t && e.nodeType === 1) { var i = "data-" + n.
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 7c 7c 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 31 20 7d 20 66 75 6e 63 74 69 6f 6e 20 61 74 28 65 2c 20 74 29 20 7b 20 64 6f 20 65 20 3d 20 65 5b 74 5d 3b 20 77 68 69 6c 65 20 28 65 20 26 26 20 65 2e 6e 6f 64 65 54 79 70 65 20 21 3d 3d 20 31 29 3b 20 72 65 74 75 72 6e 20 65 20 7d 20 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 2c 20 74 2c 20 6e 29 20 7b 20 74 20 3d 20 74 20 7c 7c 20 30 3b 20 69 66 20 28 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 76 2e 67 72 65 70 28 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 72 29 20 7b 20 76 61 72 20 69 20 3d 20 21 21 74 2e 63 61 6c 6c 28 65 2c 20 72 2c 20 65 29 3b 20 72 65 74 75 72 6e 20 69 20 3d 3d 3d 20 6e 20 7d 29 3b 20 69 66 20 28 74 2e 6e 6f 64 Data Ascii: \|\| e.parentNode.nodeType === 11 } function at(e, t) { do e = e[t]; while (e && e.nodeType !== 1); return e } function ft(e, t, n) { t = t \|\| 0; if (v.isFunction(t)) return v.grep(e, function (e, r) { var i = !!t.call(e, r, e); return i === n }); if (t.nod
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 54 4d 4c 20 26 26 20 21 76 2e 74 72 69 6d 28 74 2e 69 6e 6e 65 72 48 54 4d 4c 29 20 26 26 20 28 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 29 29 20 3a 20 6e 20 3d 3d 3d 20 22 69 6e 70 75 74 22 20 26 26 20 45 74 2e 74 65 73 74 28 65 2e 74 79 70 65 29 20 3f 20 28 74 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 20 3d 20 74 2e 63 68 65 63 6b 65 64 20 3d 20 65 2e 63 68 65 63 6b 65 64 2c 20 74 2e 76 61 6c 75 65 20 21 3d 3d 20 65 2e 76 61 6c 75 65 20 26 26 20 28 74 2e 76 61 6c 75 65 20 3d 20 65 2e 76 61 6c 75 65 29 29 20 3a 20 6e 20 3d 3d 3d 20 22 6f 70 74 69 6f 6e 22 20 3f 20 74 2e 73 65 6c 65 63 74 65 64 20 3d 20 65 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 20 3a 20 6e 20 3d 3d 3d 20 22 69 6e 70 75 74 22 20 7c 7c 20 6e 20 Data Ascii: TML && !v.trim(t.innerHTML) && (t.innerHTML = e.innerHTML)) : n === "input" && Et.test(e.type) ? (t.defaultChecked = t.checked = e.checked, t.value !== e.value && (t.value = e.value)) : n === "option" ? t.selected = e.defaultSelected : n === "input" \|\| n
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 20 7c 7c 20 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 3d 20 22 6e 6f 6e 65 22 20 7c 7c 20 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 3d 20 22 22 29 20 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 74 20 3f 20 69 5b 73 5d 20 7c 7c 20 22 22 20 3a 20 22 6e 6f 6e 65 22 20 7d 20 72 65 74 75 72 6e 20 65 20 7d 20 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 2c 20 74 2c 20 6e 29 20 7b 20 76 61 72 20 72 20 3d 20 52 74 2e 65 78 65 63 28 74 29 3b 20 72 65 74 75 72 6e 20 72 20 3f 20 4d 61 74 68 2e 6d 61 78 28 30 2c 20 72 5b 31 5d 20 2d 20 28 6e 20 7c 7c 20 30 29 29 20 2b 20 28 72 5b 32 5d 20 7c 7c 20 22 70 78 22 29 20 3a 20 74 20 7d 20 66 75 6e 63 74 69 6f 6e 20 65 6e 28 65 2c 20 74 2c 20 6e 2c 20 72 29 20 7b 20 76 61 72 20 69 20 3d 20 6e 20 Data Ascii: \|\| n.style.display === "none" \|\| n.style.display === "") n.style.display = t ? i[s] \|\| "" : "none" } return e } function Zt(e, t, n) { var r = Rt.exec(t); return r ? Math.max(0, r[1] - (n \|\| 0)) + (r[2] \|\| "px") : t } function en(e, t, n, r) { var i = n
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 50 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 20 48 74 20 3d 20 28 50 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 20 7c 7c 20 50 74 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 20 48 74 2e 77 72 69 74 65 28 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 20 48 74 2e 63 6c 6f 73 65 28 29 3b 20 74 20 3d 20 48 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 48 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2c 20 6e 20 3d 20 44 74 28 74 2c 20 22 64 69 73 70 6c 61 79 22 29 2c 20 69 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 50 74 29 20 7d 20 72 65 74 75 72 6e 20 57 74 5b 65 5d 20 3d 20 6e 2c 20 6e 20 7d 20 66 75 6e 63 74 69 6f 6e 20 66 6e 28 65 Data Ascii: Pt.createElement) Ht = (Pt.contentWindow \|\| Pt.contentDocument).document, Ht.write("<!doctype html><html><body>"), Ht.close(); t = Ht.body.appendChild(Ht.createElement(e)), n = Dt(t, "display"), i.body.removeChild(Pt) } return Wt[e] = n, n } function fn(e
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 2c 20 6f 2c 20 75 2c 20 61 20 3d 20 65 2e 63 6f 6e 74 65 6e 74 73 2c 20 66 20 3d 20 65 2e 64 61 74 61 54 79 70 65 73 2c 20 6c 20 3d 20 65 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 3b 20 66 6f 72 20 28 73 20 69 6e 20 6c 29 20 73 20 69 6e 20 72 20 26 26 20 28 6e 5b 6c 5b 73 5d 5d 20 3d 20 72 5b 73 5d 29 3b 20 77 68 69 6c 65 20 28 66 5b 30 5d 20 3d 3d 3d 20 22 2a 22 29 20 66 2e 73 68 69 66 74 28 29 2c 20 69 20 3d 3d 3d 20 74 20 26 26 20 28 69 20 3d 20 65 2e 6d 69 6d 65 54 79 70 65 20 7c 7c 20 6e 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 29 29 3b 20 69 66 20 28 69 29 20 66 6f 72 20 28 73 20 69 6e 20 61 29 20 69 66 20 28 61 5b 73 5d 20 26 26 20 61 5b 73 5d 2e 74 65 73 74 28 69 29 29 20 7b 20 66 2e 75 Data Ascii: , o, u, a = e.contents, f = e.dataTypes, l = e.responseFields; for (s in l) s in r && (n[l[s]] = r[s]); while (f[0] === "*") f.shift(), i === t && (i = e.mimeType \|\| n.getResponseHeader("content-type")); if (i) for (s in a) if (a[s] && a[s].test(i)) { f.u
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 28 29 20 7b 20 71 6e 20 3d 20 74 20 7d 2c 20 30 29 2c 20 71 6e 20 3d 20 76 2e 6e 6f 77 28 29 20 7d 20 66 75 6e 63 74 69 6f 6e 20 4a 6e 28 65 2c 20 74 29 20 7b 20 76 2e 65 61 63 68 28 74 2c 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6e 29 20 7b 20 76 61 72 20 72 20 3d 20 28 56 6e 5b 74 5d 20 7c 7c 20 5b 5d 29 2e 63 6f 6e 63 61 74 28 56 6e 5b 22 2a 22 5d 29 2c 20 69 20 3d 20 30 2c 20 73 20 3d 20 72 2e 6c 65 6e 67 74 68 3b 20 66 6f 72 20 28 3b 20 69 20 3c 20 73 3b 20 69 2b 2b 29 20 69 66 20 28 72 5b 69 5d 2e 63 61 6c 6c 28 65 2c 20 74 2c 20 6e 29 29 20 72 65 74 75 72 6e 20 7d 29 20 7d 20 66 75 6e 63 74 69 6f 6e 20 4b 6e 28 65 2c 20 74 2c 20 6e 29 20 7b 20 76 61 72 20 72 2c 20 69 20 3d 20 30 2c 20 73 20 3d 20 30 2c 20 6f 20 3d 20 58 6e 2e 6c Data Ascii: ction () { qn = t }, 0), qn = v.now() } function Jn(e, t) { v.each(t, function (t, n) { var r = (Vn[t] \|\| []).concat(Vn["*"]), i = 0, s = r.length; for (; i < s; i++) if (r[i].call(e, t, n)) return }) } function Kn(e, t, n) { var r, i = 0, s = 0, o = Xn.l
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 2e 70 72 6f 67 72 65 73 73 29 2e 64 6f 6e 65 28 66 2e 6f 70 74 73 2e 64 6f 6e 65 2c 20 66 2e 6f 70 74 73 2e 63 6f 6d 70 6c 65 74 65 29 2e 66 61 69 6c 28 66 2e 6f 70 74 73 2e 66 61 69 6c 29 2e 61 6c 77 61 79 73 28 66 2e 6f 70 74 73 2e 61 6c 77 61 79 73 29 20 7d 20 66 75 6e 63 74 69 6f 6e 20 51 6e 28 65 2c 20 74 29 20 7b 20 76 61 72 20 6e 2c 20 72 2c 20 69 2c 20 73 2c 20 6f 3b 20 66 6f 72 20 28 6e 20 69 6e 20 65 29 20 7b 20 72 20 3d 20 76 2e 63 61 6d 65 6c 43 61 73 65 28 6e 29 2c 20 69 20 3d 20 74 5b 72 5d 2c 20 73 20 3d 20 65 5b 6e 5d 2c 20 76 2e 69 73 41 72 72 61 79 28 73 29 20 26 26 20 28 69 20 3d 20 73 5b 31 5d 2c 20 73 20 3d 20 65 5b 6e 5d 20 3d 20 73 5b 30 5d 29 2c 20 6e 20 21 3d 3d 20 72 20 26 26 20 28 65 5b 72 5d 20 3d 20 73 2c 20 64 65 6c 65 74 65 Data Ascii: .progress).done(f.opts.done, f.opts.complete).fail(f.opts.fail).always(f.opts.always) } function Qn(e, t) { var n, r, i, s, o; for (n in e) { r = v.camelCase(n), i = t[r], s = e[n], v.isArray(s) && (i = s[1], s = e[n] = s[0]), n !== r && (e[r] = s, delete
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 68 6f 77 22 29 29 20 63 6f 6e 74 69 6e 75 65 3b 20 6d 2e 70 75 73 68 28 72 29 20 7d 20 7d 20 6f 20 3d 20 6d 2e 6c 65 6e 67 74 68 3b 20 69 66 20 28 6f 29 20 7b 20 75 20 3d 20 76 2e 5f 64 61 74 61 28 65 2c 20 22 66 78 73 68 6f 77 22 29 20 7c 7c 20 76 2e 5f 64 61 74 61 28 65 2c 20 22 66 78 73 68 6f 77 22 2c 20 7b 7d 29 2c 20 22 68 69 64 64 65 6e 22 20 69 6e 20 75 20 26 26 20 28 67 20 3d 20 75 2e 68 69 64 64 65 6e 29 2c 20 61 20 26 26 20 28 75 2e 68 69 64 64 65 6e 20 3d 20 21 67 29 2c 20 67 20 3f 20 76 28 65 29 2e 73 68 6f 77 28 29 20 3a 20 68 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 28 65 29 2e 68 69 64 65 28 29 20 7d 29 2c 20 68 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 74 3b 20 76 2e 72 65 6d 6f 76 65 44 Data Ascii: how")) continue; m.push(r) } } o = m.length; if (o) { u = v._data(e, "fxshow") \|\| v._data(e, "fxshow", {}), "hidden" in u && (g = u.hidden), a && (u.hidden = !g), g ? v(e).show() : h.done(function () { v(e).hide() }), h.done(function () { var t; v.removeD
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 7c 29 24 2f 2c 20 53 20 3d 20 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 20 78 20 3d 20 2f 28 3f 3a 5e 7c 3a 7c 2c 29 28 3f 3a 5c 73 2a 5c 5b 29 2b 2f 67 2c 20 54 20 3d 20 2f 5c 5c 28 3f 3a 5b 22 5c 5c 5c 2f 62 66 6e 72 74 5d 7c 75 5b 5c 64 61 2d 66 41 2d 46 5d 7b 34 7d 29 2f 67 2c 20 4e 20 3d 20 2f 22 5b 5e 22 5c 5c 5c 72 5c 6e 5d 2a 22 7c 74 72 75 65 7c 66 61 6c 73 65 7c 6e 75 6c 6c 7c 2d 3f 28 3f 3a 5c 64 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 5c 2d 2b 5d 3f 5c 64 2b 7c 29 2f 67 2c 20 43 20 3d 20 2f 5e 2d 6d 73 2d 2f 2c 20 6b 20 3d 20 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 20 4c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 72 65 74 75 72 6e 20 28 Data Ascii: (\w+)\s\/?>(?:<\/\1>\|)$/, S = /^[\],:{}\s]$/, x = /(?:^\|:\|,)(?:\s\[)+/g, T = /\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g, N = /"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d\d*\.\|)\d+(?:[eE][\-+]?\d+\|)/g, C = /^-ms-/, k = /-([\da-z])/gi, L = function (e, t) { return (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49855	104.17.167.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	501	OUT	GET / HTTP/1.1 Host: c.adsco.re Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c.adsco.re/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	1263	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2678400 Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re") Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect Expires: Mon, 24 Jun 2024 06:26:59 GMT ETag: W/"DWg73zXYn5haECmronil2Q==" CF-Cache-Status: HIT Age: 29476 Server: cloudflare CF-RAY: 888b379fd86f0cdd-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:59 UTC	106	IN	Data Raw: 37 61 63 35 0d 0a 2f 2a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 72 61 66 66 69 63 20 76 61 6c 69 64 61 74 69 6f 6e 20 62 79 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 61 64 73 63 6f 72 65 2e 63 6f 6d 27 3e 41 64 73 63 Data Ascii: 7ac5/*<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adsc
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 6f 72 65 3c 2f 61 3e 2c 20 61 20 62 6f 74 20 61 6e 64 20 70 72 6f 78 79 20 64 65 74 65 63 74 69 6f 6e 20 73 65 72 76 69 63 65 20 62 79 20 41 64 73 63 6f 72 65 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 44 4d 43 43 2e 3c 73 63 72 69 70 74 3e 69 66 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 21 3d 27 27 29 7b 74 72 79 7b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 61 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 61 2e 6f 70 65 6e 28 22 47 45 54 22 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f Data Ascii: ore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.locatio
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 39 5d 2c 35 2c 35 36 38 34 34 36 34 33 38 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 34 5d 2c 39 2c 2d 31 30 31 39 38 30 33 36 39 30 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 33 5d Data Ascii: 11],14,643717713);g=W(g,h,l,d,b[0],20,-373897302);d=W(d,g,h,l,b[5],5,-701558691);l=W(l,d,g,h,b[10],9,38016083);h=W(h,l,d,g,b[15],14,-660478335);g=W(g,h,l,d,b[4],20,-405537848);d=W(d,g,h,l,b[9],5,568446438);l=W(l,d,g,h,b[14],9,-1019803690);h=W(h,l,d,g,b[3]
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 2c 68 2c 6c 2c 62 5b 34 5d 2c 36 2c 2d 31 34 35 35 32 33 30 37 30 29 3b 6c 3d 58 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 31 5d 2c 31 30 2c 2d 31 31 32 30 32 31 30 33 37 39 29 3b 68 3d 58 28 68 2c 6c 2c 64 2c 67 2c 62 5b 32 5d 2c 31 35 2c 37 31 38 37 38 37 32 35 39 29 3b 67 3d 58 28 67 2c 68 2c 6c 2c 64 2c 62 5b 39 5d 2c 32 31 2c 2d 33 34 33 34 38 35 35 35 31 29 3b 65 5b 30 5d 3d 64 2b 65 5b 30 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 31 5d 3d 67 2b 65 5b 31 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 32 5d 3d 68 2b 65 5b 32 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 33 5d 3d 6c 2b 65 5b 33 5d 26 34 32 39 34 39 36 37 32 39 35 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 62 2c 64 2c 67 2c 68 2c 6c 29 7b 62 3d 28 62 2b 65 26 34 32 39 34 39 36 37 32 39 35 29 Data Ascii: ,h,l,b[4],6,-145523070);l=X(l,d,g,h,b[11],10,-1120210379);h=X(h,l,d,g,b[2],15,718787259);g=X(g,h,l,d,b[9],21,-343485551);e[0]=d+e[0]&4294967295;e[1]=g+e[1]&4294967295;e[2]=h+e[2]&4294967295;e[3]=l+e[3]&4294967295}function P(e,b,d,g,h,l){b=(b+e&4294967295)
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 2f 67 69 2c 22 5c 5c 21 22 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 69 2c 22 5c 5c 3b 22 29 3a 22 22 2c 62 2b 3d 67 2b 22 3b 22 29 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 76 61 72 20 65 3d 0a 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 65 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 74 72 79 7b 65 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 74 72 79 7b 65 Data Ascii: /gi,"\\!").replace(/;/gi,"\\;"):"",b+=g+";")}return b}function cb(){if(window.XMLHttpRequest)var e=new XMLHttpRequest;else if(window.XDomainRequest)e=new XDomainRequest;else if(window.ActiveXObject)try{e=new ActiveXObject("Msxml2.XMLHTTP")}catch(b){try{e
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 6c 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 69 66 28 34 21 3d 68 2e 72 65 61 64 79 53 74 61 74 65 29 67 28 32 29 3b 65 6c 73 65 20 69 66 28 32 30 30 21 3d 68 2e 73 74 61 74 75 73 29 7b 69 66 28 35 30 30 3d 3d 68 2e 73 74 61 74 75 73 26 26 68 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 63 6c 75 64 65 73 28 22 44 65 63 6f 6d 70 72 65 73 73 65 64 20 73 69 7a 65 20 69 73 20 30 20 62 79 74 65 73 22 29 29 72 65 74 75 72 6e 22 70 22 3d 3d 65 3f 6f 62 28 21 31 29 3a 22 74 22 3d 3d 65 3f 70 62 28 21 31 29 3a 22 62 22 3d 3d 65 26 26 71 62 28 21 31 29 2c 21 30 3b 67 28 31 45 33 2b 68 2e 73 74 61 74 75 73 29 7d 65 6c 73 65 20 64 26 26 64 28 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 30 29 7d 3b 22 6f 6e 65 72 72 6f 72 22 69 6e 20 68 26 26 28 68 2e 6f 6e 65 72 72 6f 72 3d 0a Data Ascii: l=function(v){if(4!=h.readyState)g(2);else if(200!=h.status){if(500==h.status&&h.response.includes("Decompressed size is 0 bytes"))return"p"==e?ob(!1):"t"==e?pb(!1):"b"==e&&qb(!1),!0;g(1E3+h.status)}else d&&d(h.responseText,0)};"onerror"in h&&(h.onerror=
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 3d 64 3f 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 76 5f 22 2b 65 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 65 5f 22 2b 65 29 29 3a 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 76 5f 22 2b 65 2c 62 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 65 5f 22 2b 65 2c 2b 6e 65 77 20 44 61 74 65 2b 33 36 30 30 2a 64 29 29 29 7d 63 61 74 63 68 28 6c 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d Data Ascii: =d?(window.localStorage.removeItem("v_"+e),window.localStorage.removeItem("e_"+e)):(window.localStorage.setItem("v_"+e,b),window.localStorage.setItem("e_"+e,+new Date+3600*d)))}catch(l){}}function K(){return"undefined"!==typeof performance&&"undefined"!==
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 30 3b 62 3c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 65 2e 70 75 73 68 28 45 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 62 5d 29 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 0a 42 28 78 29 3b 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2c 62 3d 5b 5d 3b 62 2e 70 75 73 68 28 65 2e 73 74 61 72 74 45 29 3b 62 2e 70 75 73 68 28 65 2e 6f 6e 4c 6f 61 64 54 29 3b Data Ascii: 0;b<window.location.ancestorOrigins.length;b++)e.push(E(window.location.ancestorOrigins[b]))}catch(d){return-1}return e}();B(x);x=function(){if(!window.chrome\|\|!window.chrome.csi)return"";var e=window.chrome.csi(),b=[];b.push(e.startE);b.push(e.onLoadT);
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 69 70 63 52 65 6e 64 65 72 65 72 29 72 65 74 75 72 6e 20 32 30 3b 69 66 28 22 5f 70 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 22 63 61 6c 6c 50 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 31 3b 69 66 28 22 5f 5f 70 68 61 6e 74 6f 6d 61 73 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 32 3b 69 66 28 22 42 75 66 66 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 33 3b 69 66 28 22 65 6d 69 74 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 34 3b 69 66 28 22 73 70 61 77 6e 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 35 3b 69 66 28 22 77 65 62 64 72 69 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 2e 63 6c 69 65 6e 74 49 6e 66 6f 72 6d 61 74 69 Data Ascii: fined"!==typeof ipcRenderer)return 20;if("_phantom"in window\|\|"callPhantom"in window)return 1;if("__phantomas"in window)return 2;if("Buffer"in window)return 3;if("emit"in window)return 4;if("spawn"in window)return 5;if("webdriver"in window.clientInformati
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 65 6e 74 75 6d 22 29 3f 31 34 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 35 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 72 69 76 65 72 22 29 3f 0a 31 36 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 37 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 77 65 62 64 72 69 76 65 72 22 29 3f 31 38 3a 6e 75 6c 6c Data Ascii: entum")?14:window.document.documentElement.getAttribute("selenium")?15:window.document.documentElement.getAttribute("driver")?16:null!==document.documentElement.getAttribute("selenium")?17:null!==document.documentElement.getAttribute("webdriver")?18:null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49852	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	902	OUT	GET /tr/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=96, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 06:26:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49850	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	553	OUT	GET /Scripts/MediaScripts/push.js?v=4 HTTP/1.1 Host: cdn.engine.4dsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	729	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:59 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: * Vary: Accept-Encoding Cache-Control: public, max-age=566 P3P: CP="CAO PSA OUR IND" Expires: Fri, 24 May 2024 06:36:25 GMT Access-Control-Allow-Origin: * Last-Modified: Fri, 24 May 2024 06:11:40 GMT CF-Cache-Status: HIT Age: 321 Server: cloudflare CF-RAY: 888b379fd85e447a-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:26:59 UTC	640	IN	Data Raw: 66 62 65 0d 0a 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4d 6f 64 75 6c 65 73 2e 57 65 62 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 69 3d 7b 4c 6f 61 64 65 72 3a 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2c 4d 65 64 69 61 3a 6e 2c 54 6f 70 57 69 6e 64 6f 77 3a 74 2c 53 74 6f 72 61 67 65 4e 61 6d 65 3a 22 49 6e 66 53 57 55 70 64 61 74 65 22 2c 49 6e 69 74 49 6e 50 61 67 65 50 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 49 6e 69 74 49 6e 50 61 67 65 50 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 2e 4d 65 64 69 61 2e 50 6c 61 63 65 6d 65 6e 74 49 6e 63 6c 75 64 65 Data Ascii: fbeg367CB268B1094004A3689751E7AC568F.Modules.WebPushNotification=function(n,t){var i={Loader:g367CB268B1094004A3689751E7AC568F,Media:n,TopWindow:t,StorageName:"InfSWUpdate",InitInPagePush:function(){i.InitInPagePush=function(){};i.Media.PlacementInclude
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 6e 42 75 74 74 6f 6e 54 65 78 74 2c 31 65 33 2c 21 31 2c 69 2e 4d 65 64 69 61 2e 5a 6f 6e 65 49 64 2c 69 2e 4d 65 64 69 61 2e 53 65 74 74 69 6e 67 73 2c 69 2e 4c 6f 61 64 65 72 2e 41 64 54 72 61 6e 73 70 61 72 65 6e 63 79 2e 47 65 74 55 72 6c 28 69 2e 4d 65 64 69 61 2e 52 65 64 69 72 65 63 74 55 72 6c 29 29 7d 2c 7b 41 63 63 65 70 74 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 29 7d 29 7d 2c 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 2e 4d 65 64 69 61 2e 53 65 74 74 69 6e 67 73 2e 52 75 6e 4f 6e 6c 79 49 6e 50 61 67 65 50 75 73 68 29 69 2e 49 6e 69 74 49 6e 50 61 67 65 50 75 73 68 28 29 3b 65 6c 73 65 20 69 66 28 69 2e 4c 6f 61 64 65 72 2e 50 75 73 68 53 65 72 76 69 63 65 55 72 6c 3d 74 68 69 73 2e 4c 6f 61 64 65 72 2e 49 Data Ascii: nButtonText,1e3,!1,i.Media.ZoneId,i.Media.Settings,i.Loader.AdTransparency.GetUrl(i.Media.RedirectUrl))},{Accept:"application/json"})})},Init:function(){if(i.Media.Settings.RunOnlyInPagePush)i.InitInPagePush();else if(i.Loader.PushServiceUrl=this.Loader.I
2024-05-24 06:26:59 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 74 3a 6e 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 69 2e 55 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 69 2e 4c 6f 61 64 65 72 2e 56 61 70 69 64 50 75 62 6c 69 63 4b 65 79 29 7d 29 7d 29 2e 74 68 65 6e 28 69 2e 53 75 62 73 63 72 69 62 65 44 65 76 69 63 65 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 2e 43 6f 6e 73 6f 6c 65 4c 6f 67 28 22 45 72 72 6f 72 20 73 75 62 73 63 72 69 62 69 6e 67 20 75 73 65 72 3a 20 22 2b 74 29 3b 69 2e 4c 6f 61 64 65 72 2e 42 72 6f 77 73 65 72 Data Ascii: ption().then(function(t){return t?t:n.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:i.UrlBase64ToUint8Array(i.Loader.VapidPublicKey)})}).then(i.SubscribeDevice).catch(function(t){i.ConsoleLog("Error subscribing user: "+t);i.Loader.Browser
2024-05-24 06:26:59 UTC	659	IN	Data Raw: 72 61 79 28 69 2e 6c 65 6e 67 74 68 29 2c 74 3d 30 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 2b 2b 74 29 72 5b 74 5d 3d 69 2e 63 68 61 72 43 6f 64 65 41 74 28 74 29 3b 72 65 74 75 72 6e 20 72 7d 2c 42 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 62 74 6f 61 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6e 29 29 29 7d 2c 43 6f 6e 73 6f 6c 65 4c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 2e 4c 6f 61 64 65 72 2e 44 65 62 75 67 45 6e 61 62 6c 65 64 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 6e 29 7d 2c 49 73 57 6f 72 6b 65 72 53 74 61 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 69 3d 21 74 3f 67 33 36 Data Ascii: ray(i.length),t=0;t<i.length;++t)r[t]=i.charCodeAt(t);return r},Base64Encode:function(n){return btoa(String.fromCharCode.apply(null,new Uint8Array(n)))},ConsoleLog:function(n){i.Loader.DebugEnabled&&console.log(n)},IsWorkerStale:function(n,t){var i=!t?g36
2024-05-24 06:26:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49851	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	994	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x0fa5718854dfdd97","source_keys":["1","2"]},{"key_piece":"0x71da309a42a27891","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 06:26:59 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 06:26:59 UTC	1788	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:26:59 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49847	185.200.116.51	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	617	OUT	POST / HTTP/1.1 Host: gu2nbmodgvw2.s4.adsco.re Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	464	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:59 GMT Content-Type: text/html Content-Length: 0 Last-Modified: Tue, 03 Oct 2023 13:29:59 GMT Connection: close ETag: "651c1757-0" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range Access-Control-Expose-Headers: Content-Length,Content-Range Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49857	54.220.158.112	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	633	OUT	GET /map/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34 HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	433	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:26:59 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.15.129 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49858	104.17.166.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	461	OUT	GET / HTTP/1.1 Host: 6.adsco.re Connection: keep-alive Origin: https://c.adsco.re User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c.adsco.re/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	426	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:59 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://c.adsco.re Cache-Control: private, max-age=10 Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Max-Age: 2592000 Server: cloudflare CF-RAY: 888b379fdbf142c4-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49853	108.138.128.28	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	533	OUT	GET /c/4575/cc_af.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	565	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 56598 Connection: close Date: Fri, 24 May 2024 01:10:35 GMT Last-Modified: Mon, 03 Oct 2022 20:58:35 GMT ETag: "09cbe8bc81a16aa97f13458c21729605" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c7947fe0c635bc68b2cbc2a30738872c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P4 X-Amz-Cf-Id: WEOZJ_OTL8FLLGjISr2ip6784sx9zYIANrAEy7FBtg71xbf_HT1Yig== Age: 18985
2024-05-24 06:26:59 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 63 4a 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 6d 6f 64 65 3d 22 42 43 50 22 3b 76 61 72 20 75 73 65 46 50 43 3d 66 61 6c 73 65 3b 76 61 72 20 69 6e 63 6c 75 64 65 52 65 66 65 72 72 65 72 3d 66 61 6c 73 65 3b 76 61 72 20 72 75 6e 4f 70 74 69 6d 75 73 4f 6e 6c 79 3d 66 61 6c 73 65 3b 76 61 72 20 63 6d 70 3d 7b 64 61 69 73 79 62 69 74 3a 6e 75 6c 6c 2c 77 61 69 74 3a 32 35 30 2c 64 6f 6e 65 3a 30 2c 73 74 61 72 74 3a 30 7d 3b 76 61 72 20 62 61 73 65 44 6f 6d 61 69 6e 3d 22 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 22 3b 76 61 72 20 76 61 6c 69 64 50 72 65 66 69 78 3d 5b 22 62 63 70 22 2c 22 63 6e 22 5d 3b 76 61 72 20 62 63 70 44 6f 6d 61 69 6e 50 72 65 66 69 78 3d 22 62 63 70 Data Ascii: (function(){var ccJs=function(options){var mode="BCP";var useFPC=false;var includeReferrer=false;var runOptimusOnly=false;var cmp={daisybit:null,wait:250,done:0,start:0};var baseDomain=".crwdcntrl.net";var validPrefix=["bcp","cn"];var bcpDomainPrefix="bcp
2024-05-24 06:26:59 UTC	16384	IN	Data Raw: 25 2d 5d 2b 29 28 2e 63 6f 6d 7c 2e 63 6f 6d 2e 69 6e 7c 2e 63 6f 2e 75 6b 7c 2e 69 6e 7c 2e 76 6e 7c 2e 66 6d 7c 2e 6f 72 67 7c 2e 74 76 7c 2e 6d 79 7c 2e 73 67 7c 2e 63 61 7c 2e 6e 65 74 7c 2e 70 6b 7c 2e 61 72 7c 2e 62 72 7c 2e 63 6c 7c 2e 65 63 7c 2e 67 79 7c 2e 65 73 7c 2e 6d 78 29 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2d 5d 2b 29 22 2c 0a 65 6c 65 6d 65 6e 74 3a 22 7b 7b 68 74 6d 6c 7d 7d 22 2c 6f 70 72 3a 34 31 33 33 30 7d 29 3b 61 64 64 54 72 69 67 67 65 72 28 7b 22 6d 65 64 22 3a 5b 22 57 61 73 68 69 6e 67 74 6f 6e 54 69 6d 65 73 20 3a 20 41 72 74 69 63 6c 65 20 3a 20 54 6f 70 69 63 20 3a 20 7b 7b 64 69 76 2e 63 72 75 6d 62 79 20 75 6c 2e 63 72 75 6d 62 73 20 6c 69 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 29 20 61 7d 7d 2e 74 65 78 74 43 6f 6e Data Ascii: %-]+)(.com\|.com.in\|.co.uk\|.in\|.vn\|.fm\|.org\|.tv\|.my\|.sg\|.ca\|.net\|.pk\|.ar\|.br\|.cl\|.ec\|.gy\|.es\|.mx)/([a-zA-Z0-9_-]+)",element:"{{html}}",opr:41330});addTrigger({"med":["WashingtonTimes : Article : Topic : {{div.crumby ul.crumbs li:nth-of-type(2) a}}.textCon
2024-05-24 06:26:59 UTC	16384	IN	Data Raw: 69 6f 6e 20 64 6f 6e 65 6c 6f 61 64 28 29 7b 69 66 28 64 6f 62 63 70 29 62 63 70 66 28 29 3b 6e 61 6d 65 73 70 61 63 65 2e 6c 6f 61 64 65 64 3d 0a 74 72 75 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 41 73 79 6e 63 28 29 7b 69 66 28 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 29 74 72 79 7b 66 6f 72 28 74 79 70 65 20 69 6e 20 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 42 65 68 61 76 69 6f 72 73 29 66 6f 72 28 76 61 72 20 69 3d 30 2c 62 3b 62 3d 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 42 65 68 61 76 69 6f 72 73 5b 74 79 70 65 5d 5b 69 2b 2b 5d 3b 29 61 64 64 28 74 79 70 65 2c 62 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 69 64 3b 69 64 3d 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 4f 70 70 6f 72 74 75 6e 69 74 79 49 64 73 Data Ascii: ion doneload(){if(dobcp)bcpf();namespace.loaded=true}function loadAsync(){if(async_props.async)try{for(type in async_props.asyncBehaviors)for(var i=0,b;b=async_props.asyncBehaviors[type][i++];)add(type,b);for(var i=0,id;id=async_props.asyncOpportunityIds
2024-05-24 06:26:59 UTC	7446	IN	Data Raw: 75 6c 74 3d 70 65 70 70 79 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 73 65 6c 65 63 74 6f 72 2c 72 6f 6f 74 2c 69 6e 63 6c 75 64 65 52 6f 6f 74 2c 66 6c 61 74 29 3b 65 6c 65 6d 65 6e 74 73 3d 67 72 6f 75 70 73 2e 6c 65 6e 67 74 68 3e 31 3f 65 6c 65 6d 65 6e 74 73 2e 63 6f 6e 63 61 74 28 72 65 73 75 6c 74 29 3a 72 65 73 75 6c 74 7d 7d 69 66 28 67 72 6f 75 70 73 2e 6c 65 6e 67 74 68 3e 0a 31 29 65 6c 65 6d 65 6e 74 73 3d 66 69 6c 74 65 72 28 65 6c 65 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 63 61 63 68 65 5b 63 61 63 68 65 4b 65 79 5d 3d 65 6c 65 6d 65 6e 74 73 2e 73 6c 69 63 65 28 30 29 7d 2c 71 75 65 72 79 43 6f 6d 62 69 6e 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 72 2c 63 29 7b 76 61 72 20 72 65 73 75 6c 74 3d 5b 5d 2c 75 69 64 73 3d 7b 7d 2c Data Ascii: ult=peppy.querySelector(selector,root,includeRoot,flat);elements=groups.length>1?elements.concat(result):result}}if(groups.length>1)elements=filter(elements);return cache[cacheKey]=elements.slice(0)},queryCombinator:function(l,r,c){var result=[],uids={},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49854	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:26:59 UTC	614	OUT	GET /5/c=3722/pe=y/callback=g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback?41947963 HTTP/1.1 Host: ad.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:26:59 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:26:59 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 131 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.21.42 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 06:26:59 UTC	131	IN	Data Raw: 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4c 6f 74 61 6d 65 2e 43 61 6c 6c 45 78 74 72 61 63 74 69 6f 6e 41 50 49 43 61 6c 6c 62 61 63 6b 28 7b 22 50 72 6f 66 69 6c 65 22 3a 20 7b 22 74 70 69 64 22 3a 22 22 2c 22 70 69 64 22 3a 22 22 2c 22 41 75 64 69 65 6e 63 65 73 22 3a 20 7b 22 41 75 64 69 65 6e 63 65 22 3a 5b 5d 7d 7d 7d 29 3b Data Ascii: g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback({"Profile": {"tpid":"","pid":"","Audiences": {"Audience":[]}}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49871	54.220.158.112	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:00 UTC	659	OUT	GET /map/ct=y/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34 HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-05-24 06:27:01 UTC	942	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:00 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.10.95 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=72aac350df2b4a40201cac1fd18dfe1f;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGMTBgQAAF4fCp8%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4nGNgYGBICzA2YYADAA5WAR4%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:01 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49869	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:02 UTC	762	OUT	GET /images/mgid/mgid_ua.svg HTTP/1.1 Host: cdn.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
2024-05-24 06:27:02 UTC	840	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:02 GMT Content-Type: image/svg+xml Content-Length: 2302 Connection: close x-amz-id-2: 6Lju8V592HZrnW7ZPbVsIMNhHUTc9FV0Wt7NODFvgemMqtwqKrmjsefqnKSuq4jPJYjEKtnSgmc= x-amz-request-id: 2D2C6JEEDF3XGBMC Last-Modified: Tue, 08 Mar 2022 17:05:01 GMT ETag: "617c205137825561208ef7c1a2d8f319" x-amz-meta-s3cmd-attrs: atime:1646759091/ctime:1646759091/gid:0/gname:root/md5:617c205137825561208ef7c1a2d8f319/mode:33206/mtime:1646759091/uid:0/uname:root x-amz-version-id: null CF-Cache-Status: HIT Age: 5096 Expires: Sat, 25 May 2024 06:27:02 GMT Cache-Control: public, max-age=86400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b37b23e784332-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:02 UTC	529	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 33 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 33 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 39 38 30 35 20 34 2e 37 37 35 38 38 4c 34 31 2e 32 36 39 35 20 36 2e 33 32 36 31 32 4c 35 30 2e 38 34 36 33 20 31 31 2e 38 31 31 36 4c 35 34 2e 30 33 38 35 20 39 2e 39 38 33 31 31 4c 34 34 2e 39 38 30 35 20 34 2e 37 37 35 38 38 5a 22 20 66 69 6c 6c 3d 22 23 46 46 30 30 30 30 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 37 2e 36 35 34 33 20 39 2e 39 38 33 4c 35 30 2e 38 34 36 35 20 31 31 2e 38 31 31 35 4c 37 30 20 30 2e 38 30 30 37 38 Data Ascii: <svg width="70" height="37" viewBox="0 0 70 37" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M44.9805 4.77588L41.2695 6.32612L50.8463 11.8116L54.0385 9.98311L44.9805 4.77588Z" fill="#FF0000"/><path d="M47.6543 9.983L50.8465 11.8115L70 0.80078
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 31 4c 30 20 33 31 56 33 36 48 32 39 2e 33 32 38 35 5a 22 20 66 69 6c 6c 3d 22 23 30 34 38 41 46 46 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 36 2e 38 31 38 32 20 35 2e 38 35 31 34 39 56 31 32 2e 31 37 30 37 43 36 35 2e 33 34 36 36 20 31 30 2e 39 36 33 32 20 36 33 2e 34 37 37 33 20 31 30 2e 32 33 38 37 20 36 31 2e 34 34 38 39 20 31 30 2e 32 33 38 37 43 35 36 2e 37 31 35 39 20 31 30 2e 32 33 38 37 20 35 32 2e 38 39 37 38 20 31 34 2e 31 30 32 37 20 35 32 2e 38 39 37 38 20 31 38 2e 38 39 32 34 43 35 32 2e 38 39 37 38 20 32 33 2e 36 38 32 31 20 35 36 2e 37 31 35 39 20 32 37 2e 35 34 36 31 20 36 31 2e 34 34 38 39 20 32 37 2e 35 34 36 31 43 Data Ascii: 1L0 31V36H29.3285Z" fill="#048AFF"/><path fill-rule="evenodd" clip-rule="evenodd" d="M66.8182 5.85149V12.1707C65.3466 10.9632 63.4773 10.2387 61.4489 10.2387C56.7159 10.2387 52.8978 14.1027 52.8978 18.8924C52.8978 23.6821 56.7159 27.5461 61.4489 27.5461C
2024-05-24 06:27:02 UTC	404	IN	Data Raw: 20 32 37 2e 35 34 38 31 20 33 35 2e 39 39 33 38 20 32 37 2e 35 34 38 31 43 33 31 2e 32 36 30 39 20 32 37 2e 35 34 38 31 20 32 37 2e 34 34 32 37 20 32 33 2e 36 38 34 31 20 32 37 2e 34 34 32 37 20 31 38 2e 38 39 34 34 43 32 37 2e 34 34 32 37 20 31 34 2e 31 30 34 37 20 33 31 2e 32 36 30 39 20 31 30 2e 32 34 30 37 20 33 35 2e 39 39 33 38 20 31 30 2e 32 34 30 37 43 33 38 2e 30 32 32 32 20 31 30 2e 32 34 30 37 20 33 39 2e 38 39 31 35 20 31 30 2e 39 36 35 32 20 34 31 2e 33 36 33 31 20 31 32 2e 31 37 32 37 5a 4d 33 30 2e 36 32 34 35 20 31 38 2e 38 39 34 34 43 33 30 2e 36 32 34 35 20 32 31 2e 39 31 33 31 20 33 33 2e 30 31 30 38 20 32 34 2e 33 32 38 31 20 33 35 2e 39 39 33 38 20 32 34 2e 33 32 38 31 43 33 38 2e 39 37 36 37 20 32 34 2e 33 32 38 31 20 34 31 2e 33 36 Data Ascii: 27.5481 35.9938 27.5481C31.2609 27.5481 27.4427 23.6841 27.4427 18.8944C27.4427 14.1047 31.2609 10.2407 35.9938 10.2407C38.0222 10.2407 39.8915 10.9652 41.3631 12.1727ZM30.6245 18.8944C30.6245 21.9131 33.0108 24.3281 35.9938 24.3281C38.9767 24.3281 41.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49870	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:02 UTC	765	OUT	GET /images/logos/Adchoices.svg HTTP/1.1 Host: cdn.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
2024-05-24 06:27:02 UTC	838	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:02 GMT Content-Type: image/svg+xml Content-Length: 836 Connection: close x-amz-id-2: CxpyNkMvUy7EglrL46ndveEgmcKj5NlhgNn3xrtwadQGLxOYO5GJbbUWfWYVC/75XuxenQ1eXpI= x-amz-request-id: YQB9E0XZ4AF5YHE7 Last-Modified: Wed, 17 Feb 2021 18:15:53 GMT ETag: "7d59364b7ed2df3f02507c9f92560df9" x-amz-meta-s3cmd-attrs: atime:1613585745/ctime:1613585745/gid:0/gname:root/md5:7d59364b7ed2df3f02507c9f92560df9/mode:33206/mtime:1613585745/uid:0/uname:root x-amz-version-id: null CF-Cache-Status: HIT Age: 434 Expires: Sat, 25 May 2024 06:27:02 GMT Cache-Control: public, max-age=86400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b37b23e9543e9-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:02 UTC	531	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-05-24 06:27:02 UTC	305	IN	Data Raw: 2e 39 43 30 2c 38 39 2c 35 2e 39 2c 39 30 2e 31 2c 31 33 2e 36 2c 38 35 2e 39 6c 37 2e 32 2d 34 2e 31 0a 09 63 32 2e 33 2d 31 2e 32 2c 33 2e 35 2d 33 2e 38 2c 33 2e 31 2d 36 2e 33 63 2d 30 2e 36 2d 32 2e 34 2d 33 2d 33 2e 39 2d 35 2e 34 2d 33 2e 33 6c 2d 30 2e 38 2c 30 2e 33 63 2d 34 2e 33 2c 32 2e 33 2d 37 2e 31 2c 30 2d 37 2e 31 2d 34 2e 39 56 31 38 2e 39 63 30 2d 34 2e 38 2c 33 2e 35 2d 37 2e 32 2c 37 2e 37 2d 34 2e 35 6c 34 34 2e 31 2c 32 35 2e 32 0a 09 63 34 2e 33 2c 32 2e 35 2c 34 2e 33 2c 36 2e 33 2c 30 2c 38 2e 37 4c 33 35 2e 35 2c 36 32 2e 36 56 34 35 2e 38 63 30 2d 32 2e 35 2d 32 2e 31 2d 34 2e 36 2d 34 2e 36 2d 34 2e 36 73 2d 34 2e 36 2c 32 2e 31 2d 34 2e 36 2c 34 2e 36 6c 30 2c 30 56 36 39 63 30 2e 35 2c 33 2e 35 2c 33 2e 38 2c 35 2e 39 2c 37 Data Ascii: .9C0,89,5.9,90.1,13.6,85.9l7.2-4.1c2.3-1.2,3.5-3.8,3.1-6.3c-0.6-2.4-3-3.9-5.4-3.3l-0.8,0.3c-4.3,2.3-7.1,0-7.1-4.9V18.9c0-4.8,3.5-7.2,7.7-4.5l44.1,25.2c4.3,2.5,4.3,6.3,0,8.7L35.5,62.6V45.8c0-2.5-2.1-4.6-4.6-4.6s-4.6,2.1-4.6,4.6l0,0V69c0.5,3.5,3.8,5.9,7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49771	104.19.130.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:02 UTC	1653	OUT	GET /1604063/1?cmpreason=wvz&w=300&h=795&sz=297x236&szp=1,2,3&szl=1;2;3&cols=1&sessionId=66503333-055f9&sessionPage=1&sessionNumberWeek=1&sessionNumber=1&lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532019398489248870&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0&mp4=1&ap=1&consentStrLen=0&uniqId=16514&niet=4g&nisd=false&pv=5&lct=1716458280&jsv=es6&pageView=1&dpr=1&ref=&hashCommit=428598fd&apt=2024-05-16T20%3A18%3A31%2B00%3A00&tfre=11632 HTTP/1.1 Host: servicer.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ
2024-05-24 06:27:02 UTC	585	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:02 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:02 GMT; domain=.mgid.com; path=/; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37b29ba8425f-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:02 UTC	784	IN	Data Raw: 31 39 34 32 0d 0a 76 61 72 20 5f 6d 67 71 3d 5f 6d 67 71 7c 7c 5b 5d 3b 0a 5f 6d 67 71 2e 70 75 73 68 28 5b 22 4d 61 72 6b 65 74 47 69 64 4c 6f 61 64 47 6f 6f 64 73 31 36 30 34 30 36 33 5f 31 36 35 31 34 22 2c 5b 0a 5b 22 47 61 6d 65 6f 66 67 6c 61 6d 22 2c 22 31 39 35 37 34 32 38 37 22 2c 22 31 22 2c 22 31 35 20 4f 66 20 54 68 65 20 4d 6f 73 74 20 49 6e 61 70 70 72 6f 70 72 69 61 74 65 20 44 72 65 73 73 65 73 20 4f 6e 20 54 68 65 20 52 65 64 20 43 61 72 70 65 74 22 2c 22 22 2c 22 30 22 2c 22 22 2c 22 22 2c 22 22 2c 22 69 41 55 4a 79 6a 64 67 38 51 50 43 32 4d 6d 77 63 4a 6e 37 36 61 50 4e 6e 55 2d 33 4a 30 66 68 44 48 6e 4d 41 58 37 42 64 71 74 48 53 5f 66 73 73 43 63 6c 79 36 34 66 6c 4c 67 44 4d 4d 68 4a 4d 2d 5f 4e 33 73 53 6d 44 52 34 50 36 77 79 59 Data Ascii: 1942var _mgq=_mgq\|\|[];_mgq.push(["MarketGidLoadGoods1604063_16514",[["Gameofglam","19574287","1","15 Of The Most Inappropriate Dresses On The Red Carpet","","0","","","","iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyY
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 59 7a 59 68 6d 77 6e 52 46 54 55 34 47 4f 68 53 56 63 43 58 47 6a 77 37 75 4a 4f 73 2a 26 72 69 64 3d 61 31 63 39 61 39 34 34 2d 31 39 39 36 2d 31 31 65 66 2d 39 62 37 36 2d 63 38 34 62 64 36 38 33 37 30 63 30 26 74 73 3d 61 63 74 65 6e 67 61 67 65 26 74 74 3d 52 65 66 65 72 72 61 6c 26 61 74 74 3d 34 26 63 70 6d 3d 31 26 61 62 64 3d 31 26 69 76 3d 31 31 26 63 74 3d 31 26 67 64 70 72 41 70 70 6c 69 65 73 3d 30 26 6d 75 69 64 3d 6f 34 6e 32 44 58 39 74 54 42 72 6e 26 73 74 3d 2d 32 34 30 26 6d 70 34 3d 31 26 68 32 3d 78 77 49 7a 69 55 53 34 77 6f 5f 55 54 32 6d 55 45 7a 58 43 5a 6b 6c 50 79 34 51 75 53 53 79 43 65 30 49 52 75 66 46 37 6b 2d 6c 75 77 35 75 79 32 57 49 6d 77 47 77 76 6d 76 4c 30 79 30 47 7a 22 2c 22 61 64 63 22 3a 5b 5d 2c 22 73 64 6c 22 3a Data Ascii: YzYhmwnRFTU4GOhSVcCXGjw7uJOs*&rid=a1c9a944-1996-11ef-9b76-c84bd68370c0&ts=actengage&tt=Referral&att=4&cpm=1&abd=1&iv=11&ct=1&gdprApplies=0&muid=o4n2DX9tTBrn&st=-240&mp4=1&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy2WImwGwvmvL0y0Gz","adc":[],"sdl":
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 61 67 65 26 74 74 3d 52 65 66 65 72 72 61 6c 26 61 74 74 3d 34 26 63 70 6d 3d 31 26 61 62 64 3d 31 26 69 76 3d 31 31 26 63 74 3d 31 26 67 64 70 72 41 70 70 6c 69 65 73 3d 30 26 6d 75 69 64 3d 6f 34 6e 32 44 58 39 74 54 42 72 6e 26 73 74 3d 2d 32 34 30 26 6d 70 34 3d 31 26 68 32 3d 78 77 49 7a 69 55 53 34 77 6f 5f 55 54 32 6d 55 45 7a 58 43 5a 6b 6c 50 79 34 51 75 53 53 79 43 65 30 49 52 75 66 46 37 6b 2d 6c 75 77 35 75 79 32 57 49 6d 77 47 77 76 6d 76 4c 30 79 30 47 7a 22 2c 22 61 64 63 22 3a 5b 5d 2c 22 73 64 6c 22 3a 30 2c 22 64 6c 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 77 22 2c 22 6d 65 64 69 61 2d 74 79 70 65 22 3a 22 73 74 61 74 69 63 22 2c 22 63 6c 69 63 6b 74 72 61 63 6b 65 72 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 2e 6d 67 69 64 2e 63 6f 6d 2f Data Ascii: age&tt=Referral&att=4&cpm=1&abd=1&iv=11&ct=1&gdprApplies=0&muid=o4n2DX9tTBrn&st=-240&mp4=1&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy2WImwGwvmvL0y0Gz","adc":[],"sdl":0,"dl":"","type":"w","media-type":"static","clicktrackers":["https://a.mgid.com/
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 30 6d 42 65 53 35 39 6e 48 59 51 35 6d 32 76 6f 7a 38 39 4d 4c 52 57 44 53 66 67 63 56 52 35 6b 70 44 4f 6b 4f 4b 6f 6c 4e 65 79 67 78 4f 55 48 67 51 47 69 52 38 68 49 79 56 7a 41 4f 77 30 73 58 74 66 52 6d 39 77 42 38 64 58 30 58 39 58 6b 5f 69 31 43 46 66 4c 61 6d 55 2d 52 42 4f 32 63 4f 61 36 70 46 4e 61 53 39 68 70 58 71 32 59 55 7a 37 72 61 2d 2d 30 49 74 6f 35 59 31 47 33 49 44 2d 52 4f 6f 76 65 49 4c 4f 45 64 50 66 48 35 6f 49 33 38 72 32 6a 52 37 57 6e 50 68 2d 71 39 46 4b 58 59 77 58 62 43 5a 66 4f 62 54 70 50 6d 78 57 37 65 33 62 49 63 70 71 68 36 54 35 61 49 56 68 47 74 6a 30 7a 38 34 58 72 69 42 43 57 2d 79 42 65 6e 54 6f 64 31 63 6f 62 43 50 46 76 45 54 37 50 73 36 49 47 54 73 77 58 41 70 35 63 38 55 32 79 46 63 5f 32 6d 67 44 74 4f 59 78 4b Data Ascii: 0mBeS59nHYQ5m2voz89MLRWDSfgcVR5kpDOkOKolNeygxOUHgQGiR8hIyVzAOw0sXtfRm9wB8dX0X9Xk_i1CFfLamU-RBO2cOa6pFNaS9hpXq2YUz7ra--0Ito5Y1G3ID-ROoveILOEdPfH5oI38r2jR7WnPh-q9FKXYwXbCZfObTpPmxW7e3bIcpqh6T5aIVhGtj0z84XriBCW-yBenTod1cobCPFvET7Ps6IGTswXAp5c8U2yFc_2mgDtOYxK
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 62 56 5a 51 62 33 6b 33 62 31 46 48 57 6d 74 68 62 31 39 72 4d 45 31 4f 54 46 64 34 55 6d 4e 6b 61 6d 5a 66 4c 53 31 48 54 56 55 7a 56 48 42 76 65 6a 42 4e 51 55 4e 31 61 45 56 4c 4f 54 67 34 56 69 31 48 65 54 5a 5a 4e 31 64 66 4e 6e 4a 6a 52 7a 52 6e 56 32 5a 33 55 58 5a 4c 4e 55 4a 35 55 55 5a 30 5a 54 41 77 61 58 68 33 53 6e 5a 4b 5a 32 49 32 4f 47 4e 49 4e 6c 46 32 62 31 46 77 65 44 6c 71 54 58 68 68 62 7a 5a 51 62 55 34 31 61 6b 74 6d 4e 30 6c 50 52 6d 45 78 4d 31 68 54 4f 54 4e 44 51 32 5a 74 5a 33 70 51 57 6c 56 73 63 6c 6c 74 55 31 52 57 62 6a 68 6c 5a 30 31 55 63 45 68 45 4f 58 46 6e 53 55 39 53 51 6d 56 46 4e 44 4a 50 64 56 64 57 4d 31 64 75 58 31 4a 5a 53 57 31 4a 62 48 56 6d 52 6c 42 6f 63 6b 4a 35 58 31 5a 4b 5a 47 46 5a 65 6a 42 4b 56 30 38 Data Ascii: bVZQb3k3b1FHWmthb19rME1OTFd4UmNkamZfLS1HTVUzVHBvejBNQUN1aEVLOTg4Vi1HeTZZN1dfNnJjRzRnV2Z3UXZLNUJ5UUZ0ZTAwaXh3SnZKZ2I2OGNINlF2b1FweDlqTXhhbzZQbU41aktmN0lPRmExM1hTOTNDQ2ZtZ3pQWlVsclltU1RWbjhlZ01UcEhEOXFnSU9SQmVFNDJPdVdWM1duX1JZSW1JbHVmRlBockJ5X1ZKZGFZejBKV08
2024-05-24 06:27:02 UTC	214	IN	Data Raw: 62 36 37 38 62 34 66 35 39 35 33 34 26 69 6e 69 74 69 61 74 6f 72 3d 6d 65 26 67 64 70 72 3d 30 22 3b 0a 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 49 4d 47 22 29 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 75 73 65 2e 6d 66 61 64 73 72 76 72 2e 63 6f 6d 2f 73 79 6e 63 3f 73 73 70 3d 69 6e 74 65 6e 74 69 71 26 73 65 6c 6c 65 72 5f 6e 65 74 77 6f 72 6b 3d 6d 67 69 64 5f 26 62 69 64 5f 69 64 3d 36 63 38 30 62 63 37 38 2d 33 39 64 35 2d 34 36 38 63 2d 62 61 65 33 2d 62 36 37 38 62 34 66 35 39 35 33 34 26 69 6e 69 74 69 61 74 6f 72 3d 6d 65 26 67 64 70 72 3d 30 22 3b 0a 7d 29 28 29 3b 0a 0d 0a Data Ascii: b678b4f59534&initiator=me&gdpr=0";(document.createElement("IMG")).src="https://rtb-use.mfadsrvr.com/sync?ssp=intentiq&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0";})();
2024-05-24 06:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49878	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:02 UTC	701	OUT	GET /Scripts/ippnotice.js?v=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2&80249607 HTTP/1.1 Host: cdn.engine.4dsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:02 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:02 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: * Vary: Accept-Encoding Cache-Control: public, max-age=900 P3P: CP="CAO PSA OUR IND" Expires: Fri, 24 May 2024 06:42:02 GMT Last-Modified: Fri, 24 May 2024 06:27:02 GMT CF-Cache-Status: MISS Server: cloudflare CF-RAY: 888b37b678064264-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:02 UTC	798	IN	Data Raw: 34 36 39 65 0d 0a 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4e 6f 74 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 6e 26 26 28 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 29 2c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 70 29 2c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 66 29 2c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 76 29 2c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f Data Ascii: 469eg367CB268B1094004A3689751E7AC568F.Notice=function(){function f(e){n&&(n.removeEventListener("click",f),n.removeEventListener("animationend",p),n.removeEventListener("animationend",f),n.removeEventListener("mouseover",v),n.removeEventListener("mouseo
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 6f 6e 65 6e 64 22 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 2e 68 69 64 65 54 69 6d 65 6f 75 74 49 64 29 3b 68 2e 68 69 64 65 54 69 6d 65 6f 75 74 49 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 69 74 2c 67 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 2e 68 69 64 65 54 69 6d 65 6f 75 74 49 64 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 75 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 70 29 3b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 76 29 3b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 Data Ascii: onend",f)}function ut(){clearTimeout(h.hideTimeoutId);h.hideTimeoutId=setTimeout(it,g)}function v(){clearTimeout(h.hideTimeoutId)}function y(){ut()}function p(){n.removeEventListener("animationend",p);n.addEventListener("mouseover",v);n.addEventListener("
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 2c 74 2e 76 61 6c 75 65 7d 76 61 72 20 75 3d 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2c 69 3d 75 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2c 6c 3d 7b 7d 2c 73 3d 7b 74 6f 4c 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 6c 61 73 73 4e 61 6d 65 2e 74 72 69 6d 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 73 5d 2b 2f 67 2c 22 20 22 29 3b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 30 3f 5b 5d 3a 74 2e 73 70 6c 69 74 28 22 20 22 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 63 6c 61 73 73 4e 61 6d 65 3d 74 2e 6a 6f 69 6e 28 22 20 22 29 7d 2c 61 64 64 3a 66 75 6e 63 74 69 Data Ascii: a");return t.innerHTML=n,t.value}var u=g367CB268B1094004A3689751E7AC568F,i=u._Top.document,l={},s={toList:function(n){var t=n.className.trim().replace(/[\s]+/g," ");return t.length===0?[]:t.split(" ")},set:function(n,t){n.className=t.join(" ")},add:functi
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 61 23 6e 6f 74 69 63 65 2d 5b 69 6e 66 2d 69 64 5d 20 64 69 76 2e 62 72 6f 77 73 65 72 2d 6c 6f 67 6f 2d 5b 69 6e 66 2d 69 64 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 51 41 41 41 41 45 41 43 41 59 41 41 41 42 63 63 71 68 6d 41 41 42 6f 2f 45 6c 45 51 56 52 34 41 65 7a 55 4e 58 59 44 4d 52 44 47 38 52 6c 70 6e 2b 76 67 45 58 77 46 58 79 42 55 68 70 6d 5a 6d 5a 6e 78 6a 47 47 4e 33 51 55 4f 45 45 75 5a 66 64 75 47 6d 76 44 33 65 2f 35 72 64 77 57 6c 52 58 38 4e 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 44 44 39 47 65 43 6d 42 70 69 59 69 Data Ascii: rsor:default}a#notice-[inf-id] div.browser-logo-[inf-id]{background-image:url(\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAQAAAAEACAYAAABccqhmAABo/ElEQVR4AezUNXYDMRDG8Rlpn+vgEXwFXyBUhpmZmZnxjGGN3QUOEEuZfduGmvD3e/5rdwWlRX8NAAAAAAAAAAAAAAAAADD9GeCmBpiYi
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 75 7a 6b 4d 66 2b 74 43 68 77 71 2b 2f 2f 71 71 44 7a 71 41 55 67 31 64 78 47 33 44 52 52 6f 41 53 54 6d 58 65 34 6d 64 5a 4c 2b 69 61 75 66 4e 66 70 58 48 7a 62 5a 65 6e 39 55 2b 44 79 43 66 42 37 47 49 57 68 62 4c 56 68 44 58 6e 59 4f 31 32 52 46 45 63 4b 76 67 75 6b 64 6a 66 61 52 64 63 6a 43 53 58 58 67 43 47 6d 51 61 79 6e 77 59 52 67 38 39 45 36 33 57 6e 49 36 4f 51 72 69 42 6b 6d 55 48 30 49 79 44 2f 6a 55 58 2b 54 38 31 33 76 50 6e 39 68 31 37 48 73 65 74 76 56 52 61 46 70 50 55 79 4d 31 68 55 42 2f 42 31 58 34 4a 58 68 68 4c 7a 4e 6a 66 4c 70 48 2b 75 5a 62 75 39 57 57 71 31 7a 34 4c 49 5a 38 48 73 63 75 61 35 57 50 4d 41 37 4d 41 63 32 57 6c 48 78 43 67 41 46 43 4a 79 75 4f 43 35 38 43 4a 62 4c 69 36 41 78 4d 4a 41 39 43 44 53 4c 77 5a 4d 4e 44 Data Ascii: uzkMf+tChwq+//qqDzqAUg1dxG3DRRoASTmXe4mdZL+iaufNfpXHzbZen9U+DyCfB7GIWhbLVhDXnYO12RFEcKvgukdjfaRdcjCSXXgCGmQaynwYRg89E63WnI6OQriBkmUH0IyD/jUX+T813vPn9h17HsetvVRaFpPUyM1hUB/B1X4JXhhLzNjfLpH+uZbu9WWq1z4LIZ8Hscua5WPMA7MAc2WlHxCgAFCJyuOC58CJbLi6AxMJA9CDSLwZMND
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 6a 6f 35 39 71 66 68 73 36 71 6c 66 2b 62 33 33 54 72 2f 7a 66 64 7a 34 70 74 63 35 68 67 43 59 72 55 6e 4b 73 31 2f 37 78 56 68 72 63 47 4e 6a 4b 70 57 71 41 49 6a 57 62 6c 36 53 4c 76 38 6d 69 2b 4c 61 75 47 38 76 55 38 63 33 6b 41 70 56 57 62 54 35 75 42 39 6c 44 72 43 59 49 65 44 43 58 77 63 7a 41 6a 43 33 59 59 4f 36 54 53 65 4a 5a 4e 6d 62 6d 58 65 2b 44 73 43 48 74 44 62 69 32 4f 6d 73 79 55 4f 4c 56 5a 7a 48 6d 6d 47 31 4a 71 37 52 63 42 43 78 7a 6d 4d 50 4b 32 50 34 45 63 6b 71 37 30 6c 46 66 32 33 2b 33 44 4d 78 54 45 38 42 71 67 37 44 75 33 37 5a 74 56 65 71 47 31 4b 56 52 42 65 6d 70 70 41 2f 2f 57 52 4d 32 63 34 31 33 66 63 2b 38 55 63 37 6a 7a 2f 71 30 76 74 76 45 48 45 4d 68 53 52 69 72 56 44 58 79 68 4f 56 57 6c 56 31 5a 45 54 68 73 38 67 Data Ascii: jo59qfhs6qlf+b33Tr/zfdz4ptc5hgCYrUnKs1/7xVhrcGNjKpWqAIjWbl6SLv8mi+LauG8vU8c3kApVWbT5uB9lDrCYIeDCXwczAjC3YYO6TSeJZNmbmXe+DsCHtDbi2OmsyUOLVZzHmmG1Jq7RcBCxzmMPK2P4Eckq70lFf23+3DMxTE8Bqg7Du37ZtVeqG1KVRBemppA//WRM2c413fc+8Uc7jz/q0vtvEHEMhSRirVDXyhOVWlV1ZEThs8g
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 35 7a 66 7a 6d 67 52 45 4c 63 53 46 55 42 58 32 67 4e 4f 78 65 38 68 69 4b 43 39 52 72 4c 73 66 2f 49 39 6b 35 73 54 6f 7a 6a 6e 65 30 56 50 41 52 66 79 56 58 6b 38 53 43 45 57 69 68 49 6c 78 4c 6b 55 44 6b 37 45 4d 44 6d 2b 75 66 73 5a 46 4e 58 58 67 4f 77 46 7a 69 75 4a 75 70 49 65 62 46 36 70 65 42 43 42 35 46 56 51 2f 63 39 69 63 76 7a 55 73 48 64 76 46 4f 39 63 33 36 77 2f 67 4f 45 75 67 50 32 44 41 56 47 69 78 4d 73 4b 42 38 4f 2b 76 62 47 59 32 48 31 71 39 37 4d 49 6b 61 74 41 42 67 41 65 4b 77 69 4b 46 59 4a 4f 4a 66 4d 55 42 41 44 58 43 65 53 65 66 47 4c 33 68 6a 53 4c 6d 58 6a 76 44 6f 66 38 37 42 58 35 6f 62 58 2b 64 66 53 64 73 58 2b 68 64 41 45 6c 6a 69 30 63 64 48 46 36 79 74 4a 49 73 41 47 43 65 79 42 79 48 59 44 46 46 6f 46 53 41 44 70 5a Data Ascii: 5zfzmgRELcSFUBX2gNOxe8hiKC9RrLsf/I9k5sTozjne0VPARfyVXk8SCEWihIlxLkUDk7EMDm+ufsZFNXXgOwFziuJupIebF6peBCB5FVQ/c9icvzUsHdvFO9c36w/gOEugP2DAVGixMsKB8O+vbGY2H1q97MIkatABgAeKwiKFYJOJfMUBADXCeSefGL3hjSLmXjvDof87BX5obX+dfSdsX+hdAElji0cdHF6ytJIsAGCeyByHYDFFoFSADpZ
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 66 43 6c 57 46 32 4f 6f 6a 33 6a 75 54 77 36 58 47 34 43 78 67 65 43 48 4b 68 66 79 63 67 2f 38 2f 65 57 59 44 48 63 53 54 74 2f 31 63 39 73 79 43 79 5a 49 61 4c 51 70 63 34 6a 4f 66 6b 49 4c 6b 77 66 76 63 64 4d 34 65 50 6d 5a 6d 5a 6d 5a 6b 43 78 38 79 4d 59 57 59 47 6b 79 79 4c 64 72 55 30 30 2f 58 66 62 7a 56 72 7a 64 50 50 61 44 53 53 5a 65 74 2f 66 6c 52 35 4b 71 74 74 39 38 35 6f 37 58 6d 72 33 6e 36 37 61 67 5a 51 4e 48 46 62 55 42 63 79 34 2f 62 62 51 76 4e 51 38 78 6f 50 42 67 63 65 34 66 66 30 66 72 54 70 53 4c 48 44 4e 4a 33 35 38 6e 6b 37 2b 56 67 2b 37 32 6b 6a 43 46 47 65 47 59 77 4d 76 2b 6a 2f 65 76 72 78 66 42 39 56 56 37 78 7a 77 4f 75 71 2f 49 71 6d 43 59 4c 71 44 6a 42 6c 6e 30 43 38 6b 45 69 56 39 44 36 42 68 65 79 34 49 45 7a 4f 63 Data Ascii: fClWF2Ooj3juTw6XG4CxgeCHKhfycg/8/eWYDHcSTt/1c9syCyZIaLQpc4jOfkILkwfvcdM4ePmZmZmZkCx8yMYWYGkyyLdrU00/XfbzVrzdPPaDSSZet/flR5Kqtt985o7Xmr3n67agZQNHFbUBcy4/bbQvNQ8xoPBgce4ff0frTpSLHDNJ358nk7+Vg+72kjCFGeGYwMv+j/evrxfB9VV7xzwOuq/IqmCYLqDjBln0C8kEiV9D6Bhey4IEzOc
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 61 31 54 63 50 56 45 62 57 42 42 71 47 52 6f 7a 55 71 6c 58 2b 2b 62 42 2b 68 6a 72 79 62 4b 37 62 53 65 43 35 57 4e 56 70 68 44 38 46 74 32 56 59 46 53 77 77 57 56 57 6f 47 51 52 42 78 2b 4a 43 6f 55 78 2f 34 78 44 56 4f 51 48 4f 41 72 41 58 75 69 45 46 47 34 62 68 34 4f 41 61 57 79 36 39 75 65 6d 49 59 50 34 72 48 77 2f 2b 34 6b 66 76 59 31 51 31 37 50 49 4c 44 78 6d 71 6c 5a 34 2f 58 43 76 6a 69 66 46 55 77 47 73 45 33 4e 58 6e 63 2b 32 36 66 75 71 56 67 41 45 56 56 42 56 70 67 38 37 47 45 72 63 71 45 79 2b 61 7a 41 4a 69 57 6b 4d 45 2b 70 5a 50 32 79 63 67 51 4b 71 2b 6f 46 4e 76 43 7a 4b 33 66 51 4b 37 50 76 31 58 46 69 79 6a 47 64 2b 7a 70 56 48 43 6b 65 45 58 6d 47 4c 48 6b 61 61 7a 4f 77 51 78 2f 33 55 50 42 78 30 4c 71 68 50 65 71 4c 79 31 6d 66 Data Ascii: a1TcPVEbWBBqGRozUqlX++bB+hjrybK7bSeC5WNVphD8Ft2VYFSwwWVWoGQRBx+JCoUx/4xDVOQHOArAXuiEFG4bh4OAaWy69uemIYP4rHw/+4kfvY1Q17PILDxmqlZ4/XCvjifFUwGsE3NXnc+26fuqVgAEVVBVpg87GErcqEy+azAJiWkME+pZP2ycgQKq+oFNvCzK3fQK7Pv1XFiyjGd+zpVHCkeEXmGLHkaazOwQx/3UPBx0LqhPeqLy1mf
2024-05-24 06:27:02 UTC	1369	IN	Data Raw: 31 43 6e 6d 44 4b 71 51 42 2f 71 4d 51 51 51 67 66 53 6e 67 67 68 48 63 35 55 45 63 37 4c 68 4c 41 63 51 4e 47 4d 36 79 59 66 49 6c 66 6f 6e 48 6d 59 65 34 46 2f 6d 63 42 77 41 52 4d 47 49 49 67 50 46 36 6e 64 4a 34 68 57 70 6f 6b 5a 35 65 69 72 76 76 51 66 64 2b 42 39 43 39 64 6e 38 36 39 39 69 54 2f 4c 49 56 2b 4e 30 39 53 44 36 48 69 4e 6b 6d 6e 4b 71 4e 43 61 67 41 36 6c 79 46 59 69 4a 74 57 46 43 31 61 46 6a 48 31 73 59 49 79 70 74 6f 44 4e 39 46 62 66 42 47 47 6f 4d 33 59 45 66 75 6f 6a 6d 41 35 78 6d 4d 58 30 52 4d 4c 71 61 6a 6b 42 77 41 54 43 77 41 4f 48 2b 66 45 4d 31 4e 42 4c 64 37 7a 55 6a 37 65 49 6b 6f 46 34 30 64 52 79 51 78 49 53 44 4f 75 51 52 6f 42 34 54 34 50 50 63 55 34 67 4a 59 48 42 44 72 5a 50 4c 51 68 4e 39 64 67 4a 59 37 68 35 50 Data Ascii: 1CnmDKqQB/qMQQQgfSngghHc5UEc7LhLAcQNGM6yYfIlfonHmYe4F/mcBwARMGIIgPF6ndJ4hWpokZ5eirvvQfd+B9C9dn8699iT/LIV+N09SD6HiNkmnKqNCagA6lyFYiJtWFC1aFjH1sYIyptoDN9FbfBGGoM3YEfuojmA5xmMX0RMLqajkBwATCwAOH+fEM1NBLd7zUj7eIkoF40dRyQxISDOuQRoB4T4PPcU4gJYHBDrZPLQhN9dgJY7h5P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49880	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:02 UTC	3332	OUT	GET /pagead/adview?ai=CElMHMDNQZrrcD6eU7_UPu4uiiAOG65bpd9bFhf3eEL_hHhABILjbvStgyQagAZ26zZoDyAEBqQIiF0A1MwcoPqgDAcgDywSqBKcCT9Asl5OXzJvRQQpqX5lWBTLp6TcZQMtO7xJ23rUHI5L095cVIAMYmiLRO_q_nj6XNQTeGk0hEyBjv0f7umT8giBEoRpy-gnw0PBMUkHMBeciYVe2ZIY-1mcXkv7uQ1D45uuroBROJssJv-01I9csc5xFq2oanmjqHbLGXFYIZAuJ0G3jjx4k37sYYUzln4HIJkORcHmkNuYw-zQZXm6zKiLj8GKlT_W8S2e0OsZ8KaUppig19pBIPKhxUj9hP52YJYauPvkKAUjdW9V5a6Ra8ZfIc93RTQSS5KmDt97XxZu5SuB-wIomg_Nt0gwo7KHG27aMC-AykgfeGuGy1KG7EVBbKogpyRKtF_KnkpAD8HzmC64g_PLj4Ptjhn-IAJSLGoEr7dJ2esAEntqhm5IEiAXMu9rPRpIFBAgEGAGSBQQIBRgEoAYCgAfLxbJlqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQtv8C0ggkCIBhEAEYHzICigI6CYBAgMCAgICgKEi9_cE6WOKUzIjUpYYDmgmYAWh0dHBzOi8vbWVkaWNhbHN0dWR5aHVuZ2FyeS5jb20vcHJlLW1lZGljYWw_dXRtX3NvdXJjZT1nb29nbGVhZHMmdXRtX21lZGl1bT1jcGMmdXRtX2NhbXBhaWduPWFkcy00MyZ1dG1faWQ9NDMmdXRtX3Rlcm09JnV0bV9zb3VyY2U9Z29vZ2xlJnV0bV9tZWRpdW09Y3BjgAoByAsB2gwRCgsQ8MeSmbKyjrL1ARICAQPYEw2IFAPQFQGYFgGAFwGyFxwKGggAEhRwdWItNzY2NjI3ODM2Mjg3OTE2NhgAshgJEgKLVBgCIgEA&sigh [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&s [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-24 06:27:03 UTC	1542	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xc1600c872123af800000000000000000","2":"0xf9895eaacf4bd2650000000000000000","3":"0x662640c7296e3abc0000000000000000","4":"0x52adbc812e07e2df0000000000000000","5":"0xc090e3027d7e0ae0000000000000000"},"debug_key":"9127787617917718226","debug_reporting":true,"destination":"https://medicalstudyhungary.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["861101341"],"22":["true"],"4":["05-24"],"6":["true"]},"priority":"500","source_event_id":"1569196698866403665"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:27:03 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg; expires=Sun, 24-May-2026 06:27:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49894	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:04 UTC	1183	OUT	GET /pv/?lu=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&cbuster=1716532013842654359696&pvid=18fa947eb118598204d&implVersion=11&cxurl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&site=733245&i=1&scua=%22x86%22&scub=%2264%22&scu=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&scufvl=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&scum=%3F0&scup=%22Windows%22&scupv=%2210.0.0%22&scufv=%22117.0.5938.132%22&scuw=%3F0 HTTP/1.1 Host: c.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:04 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37c22fa38c33-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49898	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:04 UTC	751	OUT	GET /i.js?muid=o4n2DX9tTBrn&cbuster=1716532021707697797340 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:04 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:04 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:04 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37c22d4f42e7-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:04 UTC	552	IN	Data Raw: 31 31 66 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 64 34 33 30 37 30 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 64 34 33 30 37 30 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 69 66 72 61 6d 65 20 69 64 3d 5c 22 6d 75 6c 74 69 73 79 6e 63 2d 69 66 72 61 6d 65 5c 22 20 68 65 69 67 68 74 3d 5c 22 30 5c 22 20 77 69 64 74 68 3d 5c 22 30 5c 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 5c 22 30 5c 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 5c 22 30 5c 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 5c 22 6e 6f 5c 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 5c 22 30 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 Data Ascii: 11f2(function() {var d43070 = document.createElement('div');d43070.innerHTML="<iframe id=\"multisync-iframe\" height=\"0\" width=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" frameborder=\"0\" src=\"https://secure-assets.rubiconproject.c
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 49 4d 47 27 29 29 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 72 74 62 2d 75 73 77 2e 6d 66 61 64 73 72 76 72 2e 63 6f 6d 2f 73 79 6e 63 3f 73 73 70 3d 6d 67 69 64 27 3b 0a 09 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 49 4d 47 27 29 29 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6d 61 72 6b 65 74 67 69 64 26 67 6f 6f 67 6c 65 5f 63 6d 3d 26 67 6f 6f 67 6c 65 5f 75 6c 61 3d 7b 67 75 69 64 7d 26 67 6f 6f 67 6c 65 5f 68 6d 3d 62 7a 52 75 4d 6b 52 59 4f 58 52 55 51 6e 4a 75 26 6d 75 69 64 6e 3d 6f 34 6e 32 44 58 39 74 54 42 72 6e 26 67 64 70 72 3d 30 26 67 64 70 72 5f Data Ascii: eateElement('IMG')).src = 'https://rtb-usw.mfadsrvr.com/sync?ssp=mgid';(document.createElement('IMG')).src = 'https://cm.g.doubleclick.net/pixel?google_nid=marketgid&google_cm=&google_ula={guid}&google_hm=bzRuMkRYOXRUQnJu&muidn=o4n2DX9tTBrn&gdpr=0&gdpr_
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 25 32 46 63 6d 2e 6d 67 69 64 2e 63 6f 6d 25 32 46 6d 25 33 46 63 64 73 70 25 33 44 35 35 36 33 37 32 25 32 36 63 25 33 44 25 32 34 25 37 42 55 53 45 52 25 37 44 27 3b 0a 09 76 61 72 20 64 38 33 34 30 39 38 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 64 38 33 34 30 39 38 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 69 66 72 61 6d 65 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 74 61 67 2d 73 79 73 2e 63 6f 6d 2f 75 73 79 6e 63 2f 3f 70 75 62 49 64 3d 37 63 64 39 64 37 63 37 63 31 33 66 66 33 36 26 73 79 6e 63 5f 69 64 3d 6f 34 6e 32 44 58 39 74 54 42 72 6e 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 5c 22 20 73 74 79 6c 65 3d 5c 22 64 69 73 70 Data Ascii: %2Fcm.mgid.com%2Fm%3Fcdsp%3D556372%26c%3D%24%7BUSER%7D';var d834098 = document.createElement('div');d834098.innerHTML="<iframe src=\"https://onetag-sys.com/usync/?pubId=7cd9d7c7c13ff36&sync_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=\" style=\"disp
2024-05-24 06:27:04 UTC	1312	IN	Data Raw: 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 33 30 33 26 75 73 65 72 5f 69 64 3d 6f 34 6e 32 44 58 39 74 54 42 72 6e 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 27 3b 0a 09 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 49 4d 47 27 29 29 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 74 2e 61 64 78 2e 6f 70 65 72 61 2e 63 6f 6d 2f 70 75 62 2f 73 79 6e 63 3f 70 75 62 36 31 30 33 35 32 33 32 35 33 33 31 32 26 67 64 70 72 3d 30 26 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 27 3b 0a 09 76 61 72 20 64 37 39 36 38 38 37 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 64 37 39 36 38 38 37 2e 69 6e 6e 65 72 48 Data Ascii: net/sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=';(document.createElement('IMG')).src = 'https://t.adx.opera.com/pub/sync?pub6103523253312&gdpr=0&consent=&us_privacy=';var d796887 = document.createElement('div');d796887.innerH
2024-05-24 06:27:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49896	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:04 UTC	930	OUT	GET /g/19574287/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwczovL2ltZ2hvc3RzLmNvbS90LzIwMjQtMDUvODI1Mjk4LzBlMzNmNTcyZjI2NzU3MWQ3ZWVhNjJkMjhlYzlkYmZiLnBuZw.webp?v=1716532022-QkteOGqeVaRcUJ02RxM5pJXViDpBNmbZFN-ozX0Ytaw HTTP/1.1 Host: s-img.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:04 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:04 GMT Content-Type: image/webp Content-Length: 27036 Connection: close X-Mg-Request-UUID: f92e0b1f-ffe1-4184-bbb7-bab8020e9670 Access-Control-Allow-Origin: * Last-Modified: Thu, 23 May 2024 06:13:32 GMT Cache-Control: immutable, max-age=31536000 CF-Cache-Status: HIT Age: 86054 Accept-Ranges: bytes Set-Cookie: __cf_bm=ylrwUOmxccQo7hK8Aj0VO1.D_M0ZsgzLusOuyRwKQt0-1716532024-1.0.1.1-AuBkiBQfl8DiNW8DkuU8Okledw5gqTW8HdZ_xSVMpIZkXsnH9FGldeEhOQrz5oFLXhLdG1Zxnxnr3T9b.Lx57g; path=/; expires=Fri, 24-May-24 06:57:04 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Robots-Tag: noindex Server: cloudflare CF-RAY: 888b37c23cfa440c-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:04 UTC	567	IN	Data Raw: 52 49 46 46 94 69 00 00 57 45 42 50 56 50 38 20 88 69 00 00 d0 56 01 9d 01 2a ec 01 15 01 3e 91 38 97 48 25 a3 22 23 ad 78 0d b0 b0 12 09 62 6d eb c8 93 4a e4 ec 06 90 5c ae f3 fa e3 e9 37 d2 f3 cc e4 3f 0e 7e 5b e5 1f 6c 9e 0b 77 07 9d 47 54 f9 cd ff 9f ff 2f db d7 f7 2f 51 9f 1e 2f 5f 9f bb be a6 ff 65 7f 62 bd d8 7f ef fe e4 7b e1 fe b3 ea 1b fd 0b fc ff 5c 47 f8 ff 52 0e 98 ef ed 1f f6 fd 2b bf ff e6 bd 7a 46 f2 e3 f4 df 95 1e 75 f9 4b f7 17 ef 7f e6 bf e2 7a fe e6 2f ae 5f a9 bf 66 7d ce fe 7b f8 43 f6 5f e1 ff 77 bf 34 3e ec 7f 5d ff 83 fd 27 90 7f 30 7f d8 f5 11 f6 b7 fb bf 18 dd c0 9b ef fb bf 40 ef 7b fe d9 ff 5b fc c7 a9 57 d3 ff d2 ff 49 ea af eb 3f e5 7f ec 7b 80 ff 34 fe bb ff 37 d6 ef fa 9e 24 bf 74 ff a3 fb 59 f0 0b fd 03 fb ff fe 4f f2 fe Data Ascii: RIFFiWEBPVP8 iV*>8H%"#xbmJ\7?~[lwGT//Q/_eb{\GR+zFuKz/_f}{C_w4>]'0@{[WI?{47$tYO
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: ab 13 71 e4 a5 9d 3e 01 5a 13 91 58 18 db 2c cb ef a1 1b 43 88 82 6a b9 3a 75 8e 94 50 d3 33 0a 18 31 b8 cf 22 f1 3b d0 be ea 65 3f a5 3b 8e c7 96 91 af 9e 13 8b d0 5f 1d 28 5c 3e 3f 43 0d 79 75 9d e7 09 a0 b0 75 2a 06 9f 67 31 82 fb 53 40 3e 25 eb a0 55 52 fa 81 83 3e 62 75 f8 e6 f4 c3 b3 bf 26 b6 ec b3 3b 9c bd 58 03 69 2f a3 8b af b0 93 39 a3 04 b8 16 c8 ae a3 ed 98 be 45 d4 f3 b7 e5 51 c9 a9 d0 69 84 ac db bf 38 dc b6 f0 b1 b1 ac 31 ae 8f 8b 3d 2b 9a b7 92 7d 8a a3 0d c0 ed d2 14 26 8f d8 86 20 4e fe 3b a4 3f ba 82 27 69 c3 59 2a f3 3c 1d 4a ff 2d a3 67 f5 9d de ea b9 c0 c5 9a fa a3 b4 63 b5 a3 a0 01 d3 29 ea ca 74 8f ca 6f 9f 45 38 7a ba b8 62 41 b5 79 10 ec 6b 7b 1a 5b f8 41 43 56 39 11 c3 94 a5 25 85 39 ed c7 26 f8 35 4d 67 eb 0c cb ed b0 4a 4b 9e Data Ascii: q>ZX,Cj:uP31";e?;_(\>?Cyuug1S@>%UR>bu&;Xi/9EQi81=+}& N;?'iY<J-gc)toE8zbAyk{[ACV9%9&5MgJK
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: df eb 17 78 f8 16 8d a1 81 b6 de e7 c2 11 d5 2e b2 d0 d7 a3 62 dc 20 ce 68 90 39 46 56 61 62 14 41 49 89 f7 d5 e5 7f 73 9b 65 c5 8f a4 64 58 6c 05 89 16 5b a7 cd d9 72 4c 61 7a e0 d8 3d 8b 07 17 15 95 e9 e7 15 86 aa 02 a6 ec f7 b1 c9 1f 87 53 a5 69 92 29 8a 72 47 93 db 18 6d 3d b8 b2 16 8b 19 7e 93 3e 8b 7b 4c d4 02 95 ca 1d 7e fa a6 8f a1 8b f8 ba ba 8a 8d 04 22 a1 a9 d0 75 a7 c0 fe 83 75 bd 8a 07 31 ec 25 16 d0 23 2b b2 e4 82 9b 41 26 c8 25 7e 68 cc 1b 24 a1 16 00 f2 76 56 da 02 f5 ed c1 6c 1b 76 2b 4f 95 85 f6 7e df 08 ab e3 5b 5f 0a 52 57 fe 54 30 1c 22 10 b5 ad ed 6a d4 b3 f1 31 72 e3 5e ec 3a e9 8d 7c a3 99 fa 72 15 23 15 84 4b 14 ed 0c 2f 2b 27 f6 cd d3 94 92 91 6b 78 63 27 b3 2a 26 d8 af 0f 53 ae e6 5a 13 27 af 23 75 b5 b6 7e aa 28 56 e6 16 e8 fa Data Ascii: x.b h9FVabAIsedXl[rLaz=Si)rGm=~>{L~"uu1%#+A&%~h$vVlv+O~[_RWT0"j1r^:\|r#K/+'kxc'*&SZ'#u~(V
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: f0 f1 cd 12 d9 92 86 c5 0a d4 a8 f8 04 6c 12 ba 0a 88 80 be da 01 31 b9 95 05 c3 f5 1f 19 1e 96 91 7f f2 d5 f9 f7 b0 0e a0 a8 39 b4 c3 25 49 38 31 ff dc 8f 5b 2f 5c 2e 70 72 64 8a 20 6f ec d6 c8 fc c6 ba 02 59 cb 22 d6 73 86 a0 16 e3 b4 91 2c 89 45 90 58 ee 8a 12 89 ab 03 3d c0 11 da 20 25 51 02 68 cc ad 52 09 1c c6 27 0a e8 ab 96 25 89 33 a3 77 d8 77 d9 3d 90 0e 09 20 b8 69 2d cf 45 ae 94 ee 2b 7c 82 70 52 8b 01 82 37 f8 ed b1 31 7b 67 54 f5 4e 28 ad 7b af a6 46 ed 27 75 4d 55 ca 91 f2 13 52 12 37 ad e3 b3 f5 19 76 74 54 a6 77 6e 58 85 c5 3a 4c bb 0d 8b 73 c2 94 48 67 fc f9 af 72 66 29 e1 b4 31 c3 fa 61 6c c3 6d d6 93 e2 3c 9a ff d2 cf fe 1e b5 dc 31 54 35 f2 77 d9 e8 ea 86 ed af ee 1d eb 13 51 94 17 b9 86 24 ed a7 de 6c 24 af db 9e 4c a7 8a c2 8f e8 53 Data Ascii: l19%I81[/\.prd oY"s,EX= %QhR'%3ww= i-E+\|pR71{gTN({F'uMUR7vtTwnX:LsHgrf)1alm<1T5wQ$l$LS
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 2e d1 b7 6b 19 d1 8c 19 cd de aa 48 c6 e1 56 b2 74 d9 0e 85 17 99 71 9f 40 34 2d 0d 1b f4 2c b6 5f 9f 82 75 98 9a 7e 3b d0 8b 41 5e f9 d7 40 b2 af c3 4a f0 5b 11 23 06 c1 60 33 dd 08 6a 5b 0e cb 2f 75 e4 de 89 76 f3 5f 6c 7b 7d 50 f2 54 58 6d 3e d3 77 f0 c0 71 d0 9b 09 e2 1a e2 11 50 89 05 f5 e9 d4 e2 4c d7 fa 9a de 18 f1 95 1d a9 ad 2c 9b 40 75 ef fd fc 69 8a a7 4f 83 8d 7e 38 92 60 7f b6 c6 e7 67 d8 ba 6b 02 3c db c0 3f 7b 02 c0 0f 29 ae ad f8 8b 4d cb 6e b3 87 64 70 3a f2 fc 6a d0 da 4c 56 10 f4 50 18 95 3b 1e 0e d1 7d 9d bc f5 09 77 90 54 1e 1f 8d 8a b3 d2 64 6b c8 4e 0f 4e c6 dd 07 6c f4 82 69 16 f0 64 8d f8 ea 73 bd e6 68 3f 40 d1 99 f4 a4 17 d2 5a b0 17 c3 59 2e ec 03 ff 9d 19 95 41 96 0c 2e 91 c2 76 43 03 fa ef f2 49 d1 53 eb ef 9d 5f d5 03 d1 50 Data Ascii: .kHVtq@4-,_u~;A^@J[#`3j[/uv_l{}PTXm>wqPL,@uiO~8`gk<?{)Mndp:jLVP;}wTdkNNlidsh?@ZY.A.vCIS_P
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 51 0e 97 19 be 0c 56 6f 5d 44 1a 13 14 b7 89 3a a4 33 2a 08 a7 b0 56 81 d8 a8 b0 f3 eb 08 d6 fd 85 ac 11 bd ae c1 df 4e 45 c2 b4 fa 2c 5f cf 62 da fa 7f f2 1c 30 14 a8 a6 03 5f bd 48 e2 51 0d 0a a8 f5 a9 47 7a ef 34 c3 16 1a 6f 47 19 71 30 af 84 86 8e fb 62 fc b5 07 24 81 67 07 cd a3 c7 8c 44 72 2b 2e ac 26 c5 42 3a f8 db 09 84 34 e7 9a 8a d6 16 d9 c8 6d 7a d4 84 22 89 61 32 eb b8 43 38 cd 96 99 f2 5d 96 61 d0 e3 86 11 9a ce a4 07 6b 1f 77 a0 0b 92 ab 02 95 99 11 72 fd f9 55 34 11 d7 37 95 38 f0 4f 3d 5d 18 31 c6 1d 00 7a cb a4 15 32 d9 ed 05 95 49 97 ae 0c 47 ba 7c 2e 76 a3 d0 c4 f1 81 52 18 f5 a7 c9 f3 85 4b 5d ce 5b 63 c0 ff 99 a4 98 1f 1b b9 7c ae 5e 92 26 5a ea 4d 7d 70 34 a7 a0 7d ff 2b 02 49 b2 b9 0f 17 66 6e ef fe 66 e3 94 69 cd 36 2b 86 00 28 f0 Data Ascii: QVo]D:3*VNE,_b0_HQGz4oGq0b$gDr+.&B:4mz"a2C8]akwrU478O=]1z2IG\|.vRK][c\|^&ZM}p4}+Ifnfi6+(
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: b4 56 ed 2d a8 f5 0b ee 2b 1a e5 e9 90 fd 6d 82 df d4 8a f6 bf 92 8f 1d 96 aa b7 ff 91 e9 bd 41 c4 d9 a1 6d d1 65 2a 95 9b 6b ca f8 5d 00 91 e7 0e 49 a6 86 ed 6b dc 63 bb 0b 5c f2 5e 29 d6 e3 db a5 79 78 71 3b dd 53 de 92 47 60 f0 e3 78 14 8d f9 f1 6f 6c 5f b1 d9 bc cc 7e ae 16 a8 d5 f2 0f 54 1b c3 b8 3a 13 a6 19 32 83 64 87 c9 38 0c d1 12 ad 18 f1 c6 8c 96 34 fb ee b8 f6 5c 11 4c 8c 11 f6 de b9 08 98 6f 09 64 0f d4 e4 d7 05 82 a3 5c 86 80 ab e9 7e 9a 34 71 c7 8c 06 60 dd b4 96 c8 6a 7d 3f 24 2f df af e1 e0 fe ba 8f 63 3b d2 69 06 88 e3 74 ef 07 cd f7 ab 2f 6e 7a b8 8b 9f df 9a bf 1f 5c 94 f1 79 02 b0 5a 79 36 ae 08 e1 a5 57 93 f6 3c 65 9d c4 f4 d2 d4 c0 6e 00 2f 2f c6 b2 1c 37 43 0c 39 97 60 22 88 48 2b 89 b2 ba b0 e7 71 57 70 ab 18 aa 9f 35 60 85 2a 38 Data Ascii: V-+mAmek]Ikc\^)yxq;SG`xol_~T:2d84\Lod\~4q`j}?$/c;it/nz\yZy6W<en//7C9`"H+qWp5`8
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: b8 6e e7 55 04 46 c0 18 eb 74 72 28 9b 95 20 2e b7 23 5f 4d 2d 8d 64 f7 39 55 ef 89 9e 44 90 40 9d 30 a6 9e fe 5d 9f 7f 85 96 2c fc 75 9e 20 92 0b cc 1f 10 37 95 ea c5 72 80 47 6d 8a 73 fc 25 ae 07 83 ea f0 a3 b4 2c 43 87 1b 73 70 bc 21 a9 05 07 32 de 20 3e e9 c3 a1 13 5a 20 f9 a9 5d fd 74 d7 6e 40 cc 00 01 9e 85 f7 15 1d 6e 01 d5 13 ce 2f 25 b7 75 63 37 c1 71 03 3a 81 fa 4b 06 f2 43 69 5c 99 0b ed 7c 7a 1d f9 ad 3c 12 39 b3 4a 7a 06 99 bb b4 53 4d ea 30 d2 c3 a8 54 7f 60 7a 00 cd be 87 92 e5 6a a7 d6 39 99 b3 fc 63 d6 1a 7d 0f 3e f7 db 0c b8 ab 33 64 88 8f 59 b8 c6 da 99 7f b0 fe 29 d5 0a 01 54 64 52 fe 86 3b 9a 3b 50 36 e1 43 81 df 9e eb 0d ae a8 5d a6 3c 1a fb 10 bc 47 aa 1c 5d d7 bc e0 42 02 be 36 94 e7 17 3c 55 af 3f 0f 1d 7d 0f 7d 09 59 17 22 31 35 Data Ascii: nUFtr( .#_M-d9UD@0],u 7rGms%,Csp!2 >Z ]tn@n/%uc7q:KCi\\|z<9JzSM0T`zj9c}>3dY)TdR;;P6C]<G]B6<U?}}Y"15
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: c3 0f 90 f0 be b6 f6 c3 e0 d3 1f be 15 3a da 9a 1e 36 72 07 9f 76 62 25 cc f0 82 55 36 3d 59 96 0c 42 b3 62 80 5f cc af 56 be d4 ec c7 c9 36 c4 07 3e 30 da 14 d3 ca 7e e3 5b e0 8c ad f2 30 18 81 be 16 57 52 d1 be 29 45 2c 69 3f a0 d0 df 5b 95 46 9a b0 19 99 08 72 88 32 ce 24 b0 fe a5 95 33 28 c6 79 9f 0a 93 b1 0d 5e 97 57 82 7a b1 3c 10 11 3d fa b8 a1 36 05 c4 05 7c b9 72 4d 35 49 ec 9f da 46 53 25 a5 30 8e f4 5b 82 e9 49 60 91 bf 0a 30 96 a5 f3 6a da 6a bd db a7 2d 98 a9 6b 0f 92 53 74 83 d7 b5 25 fa b6 a2 7d 5a 68 fa 98 3e 15 22 33 b4 05 f7 27 fd 66 19 36 76 a9 95 37 28 8e b4 4c b3 5b 14 8f fc cc 53 0e da af cc 58 8c 9c b8 8a e3 c7 25 f7 ea 49 2b 09 8d 6f 43 99 87 68 79 a3 2d 00 46 8f c9 f7 80 d6 46 1c db 4e 85 c5 12 28 eb a1 ed 6d b5 4c 40 1a 8c 9f 70 Data Ascii: :6rvb%U6=YBb_V6>0~[0WR)E,i?[Fr2$3(y^Wz<=6\|rM5IFS%0[I`0jj-kSt%}Zh>"3'f6v7(L[SX%I+oChy-FFN(mL@p
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 31 de d4 c6 0d 9c 4e 6b c9 69 66 ee 20 28 9b ad 45 05 e0 b9 6a f0 7d 94 cd 93 80 49 eb 70 09 ff f1 11 b8 41 86 8d 0a 16 af d2 26 7b de 47 ad 67 ed c0 1f e3 53 39 44 c8 8b 6f e1 d5 1d 09 eb ff 73 ef f7 9a d4 cc 14 8f 7c 1d 9d d8 ef 62 d0 a1 5b 7a 05 07 f0 8f 9d 82 f8 9b 61 ac 95 09 80 64 21 3c cc ad d7 28 eb ed b5 41 fe 6a 63 1a 83 1e 99 23 a5 30 75 5e 90 1f 03 2d bf 41 90 a8 a3 1c 7f e7 a4 ff 30 1c ad fe 31 51 de f6 30 6d 03 63 c2 fa d1 2b cc a6 8e e9 a2 03 af 7b f5 21 d5 f7 d4 ed 8c d8 12 ff 43 d3 b0 ad 78 58 e0 6d de 42 16 2c e4 d5 29 9a fe 59 34 46 89 f4 8a 5e ab 67 f8 25 7d 0d ed e7 bb 36 19 7c 60 01 0a eb fd 9d 67 62 ad 20 b3 b7 d0 17 e6 e0 10 29 2c 86 08 8f 51 21 db ac 3a 0e 08 7f 6a 9b df 74 9b 04 88 95 98 6d 76 e2 ad fb 63 17 fd 03 05 bf 25 53 ba Data Ascii: 1Nkif (Ej}IpA&{GgS9Dos\|b[zad!<(Ajc#0u^-A01Q0mc+{!CxXmB,)Y4F^g%}6\|`gb ),Q!:jtmvc%S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49884	104.16.203.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:04 UTC	1924	OUT	GET /Redirect.eng?MediaSegmentId=79057&dcid=1_ctx_19447f0d-6c1d-469b-90ed-716e90133242&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=-300&dst=True&v=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ft [TRUNCATED] Host: engine.4dsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:04 UTC	361	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: Accept-Encoding Cache-Control: private, no-transform P3P: CP="CAO PSA OUR IND"
2024-05-24 06:27:04 UTC	2358	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 6e 67 69 6e 65 2e 34 64 73 70 6c 79 2e 63 6f 6d 2f 6d 65 64 69 61 68 6f 73 74 69 6e 67 2e 65 6e 67 69 6e 65 3f 4d 65 64 69 61 49 64 3d 31 32 39 33 33 31 26 41 49 64 3d 31 32 36 37 34 26 43 49 64 3d 35 36 32 33 35 26 50 49 64 3d 31 31 31 39 39 32 26 53 69 74 65 49 64 3d 32 32 36 39 36 26 5a 6f 6e 65 49 64 3d 38 34 33 39 36 26 76 6d 3d 39 45 70 2d 73 4c 61 2d 5f 46 45 6b 58 35 46 36 47 54 70 65 33 58 67 32 64 37 37 53 65 78 4f 35 72 7a 4c 4f 64 5a 66 4c 6c 6a 72 78 44 33 43 38 69 37 30 5f 70 31 54 6e 49 67 73 4b 59 6f 69 6c 39 66 63 76 4b 6c 79 77 51 68 49 76 65 79 49 4d 6f 5f 74 41 30 66 6f 67 4a 68 57 59 5f 45 70 6a 50 6e 49 38 58 33 64 4b 4a 37 34 34 45 51 41 4a 6f 6a 5a 78 6b 46 77 73 58 54 76 37 Data Ascii: Location: https://engine.4dsply.com/mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv7
2024-05-24 06:27:04 UTC	1289	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 3d 6e 75 6c 6c 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 34 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 4c 55 3d 23 31 2f 31 2f 30 30 30 31 20 31 32 3a 30 30 3a 30 30 20 41 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 34 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 45 41 4c 43 3d 23 31 2f 31 2f 30 30 30 31 20 31 32 3a 30 30 3a 30 30 20 41 4d 3b 20 Data Ascii: Set-Cookie: ILP=null; expires=Wed, 24-May-2034 06:27:04 GMT; path=/; SameSite=None; secureSet-Cookie: ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 24-May-2034 06:27:04 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: ILEALC=#1/1/0001 12:00:00 AM;
2024-05-24 06:27:04 UTC	1550	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 5a 48 3d 23 7b 22 38 34 33 39 36 22 3a 5b 7b 22 53 49 64 22 3a 22 37 33 38 32 37 46 22 2c 22 44 22 3a 22 32 34 2f 35 2f 32 33 54 32 33 3a 32 37 3a 34 22 7d 5d 7d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 34 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 5a 48 5f 51 3d 23 5b 38 34 33 39 36 5d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 34 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 Data Ascii: Set-Cookie: IZH=#{"84396":[{"SId":"73827F","D":"24/5/23T23:27:4"}]}; expires=Wed, 24-May-2034 06:27:04 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: IZH_Q=#[84396]; expires=Wed, 24-May-2034 06:27:04 GMT; path=/; SameSite=None; secure; HttpOnly
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 36 30 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 6e 67 69 6e 65 2e 34 64 73 70 6c 79 2e 63 6f 6d 2f 6d 65 64 69 61 68 6f 73 74 69 6e 67 2e 65 6e 67 69 6e 65 3f 4d 65 64 69 61 49 64 3d 31 32 39 33 33 31 26 61 6d 70 3b 41 49 64 3d 31 32 36 37 34 26 61 6d 70 3b 43 49 64 3d 35 36 32 33 35 26 61 6d 70 3b 50 49 64 3d 31 31 31 39 39 32 26 61 6d 70 3b 53 69 74 65 49 64 3d 32 32 36 39 36 26 61 6d 70 3b 5a 6f 6e 65 49 64 3d 38 34 33 39 36 26 61 6d 70 3b 76 6d 3d 39 45 70 2d 73 4c 61 2d 5f 46 45 6b 58 35 46 36 47 54 70 65 33 58 Data Ascii: 604<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://engine.4dsply.com/mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=9Ep-sLa-_FEkX5F6GTpe3X
2024-05-24 06:27:04 UTC	178	IN	Data Raw: 4b 68 4e 71 72 51 69 33 38 39 38 4b 5a 4c 42 75 30 26 61 6d 70 3b 50 61 73 73 42 61 63 6b 55 72 6c 3d 26 61 6d 70 3b 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 61 6d 70 3b 64 63 69 64 3d 31 5f 63 74 78 5f 31 39 34 34 37 66 30 64 2d 36 63 31 64 2d 34 36 39 62 2d 39 30 65 64 2d 37 31 36 65 39 30 31 33 33 32 34 32 26 61 6d 70 3b 63 75 3d 26 61 6d 70 3b 6b 77 3d 26 61 6d 70 3b 6d 77 3d 38 30 30 26 61 6d 70 3b 6d 68 3d 36 30 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: KhNqrQi3898KZLBu0&PassBackUrl=&res=1280x1024&dcid=1_ctx_19447f0d-6c1d-469b-90ed-716e90133242&cu=&kw=&mw=800&mh=600">here</a>.</h2></body></html>
2024-05-24 06:27:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49897	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:04 UTC	928	OUT	GET /g/19586376/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wNS83ODMzODUvNmYyMDQyNjAxZTQ4ZmE3NmRkNmRiOTZiNDg2OTc5ZDEuanBn.webp?v=1716532022-rlwLC0T0ZIliwQjwfcwCAKIGvNrQ4ESjT1wePK-FokQ HTTP/1.1 Host: s-img.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pjnewsletter.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:04 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:04 GMT Content-Type: image/webp Content-Length: 6894 Connection: close X-Mg-Request-UUID: 530a370a-943e-40f3-a38c-7f1fdf5e3b1c Access-Control-Allow-Origin: * Last-Modified: Fri, 24 May 2024 06:11:04 GMT Cache-Control: immutable, max-age=31536000 CF-Cache-Status: HIT Age: 959 Accept-Ranges: bytes Set-Cookie: __cf_bm=kH8SJW3jdXmewPQdlLkB0028TtITrEDVMQfemiurVVc-1716532024-1.0.1.1-CXw8kmKq60ryY7BZFjJSL0oxIjGsc6YAbvV_yg3LDyYzFghmtxx4R6VHXN9m2.2aycRwfqYE.iHA.bikUkjmqA; path=/; expires=Fri, 24-May-24 06:57:04 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Robots-Tag: noindex Server: cloudflare CF-RAY: 888b37c25ef80fa8-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:04 UTC	570	IN	Data Raw: 52 49 46 46 e6 1a 00 00 57 45 42 50 56 50 38 20 da 1a 00 00 d0 cb 00 9d 01 2a ec 01 15 01 3e 91 46 9d 4a 25 a4 22 ad a8 74 09 41 b0 12 09 67 6c 56 eb 26 cd c0 c4 d2 54 b2 86 d0 bf d8 72 87 4f d5 94 b2 83 47 1f 34 6a 5e a3 b0 2a 3c ad fc f4 51 72 c9 1c 4d bf f7 3e 76 66 60 11 10 e0 40 79 f4 d1 8d cd db ba e5 d2 27 55 d1 a3 63 da 61 e2 37 c6 b7 02 a7 7b a5 5f 99 b8 86 dc b4 84 dc 2f ad 08 63 9e 9e b5 14 9d 58 a8 5f 5c 59 ad d8 3e 2c 51 8a b0 26 0e 3a f6 29 57 8e ac c8 25 9f fd 4f 43 ee 0e 36 af 54 40 e2 15 f7 34 b1 2e 00 b3 fe 8d 00 08 93 a9 03 16 6b 19 9c 32 6c c2 12 ca 5d 00 57 b5 05 e9 f3 b5 ec 16 bd 87 01 7e 37 a7 eb e0 e9 b9 c3 2c 43 7a 1d 88 35 a3 a0 a1 80 e3 39 14 f6 17 14 f1 f6 af f8 61 05 5a e2 d3 bc 9f 41 a5 8b 9f b6 c0 d0 70 3a ca b0 e1 45 39 50 Data Ascii: RIFFWEBPVP8 >FJ%"tAglV&TrOG4j^<QrM>vf`@y'Uca7{_/cX_\Y>,Q&:)W%OC6T@4.k2l]W~7,Cz59aZAp:E9P
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: cd fe 87 e3 39 bf 3d 8a 68 5e f1 61 02 55 38 b9 e7 4b b4 4b b5 4c 19 48 10 10 c6 c7 7d e4 b4 85 c5 90 22 85 cc 7d 0a 1e 7d 1d 4a d1 39 b9 89 45 79 2f f4 05 a8 73 ac 80 8c 7d 34 35 c5 48 0a 7d 4f 2c 86 ed c6 30 bf e7 0d ab 6e fc 1d bc 69 52 fd 44 b3 54 2b 84 e8 d1 12 44 1e ae 4d 66 82 12 b8 f6 94 75 86 d5 2d 76 9f 69 7d 0f cb 79 c4 b4 20 d4 49 35 65 cd ea ec c5 bc be c0 cf 0d 6b f7 ca 75 69 75 93 4d ba 76 80 70 74 94 2b 0e c6 90 8d 65 c8 2c 27 79 47 84 a1 65 ef 00 57 53 0c 53 b6 f5 8e fa 26 27 4a cc 65 68 9b 8e 40 d0 4f 20 d3 c9 1b 7a ed e5 f9 ff 6c 44 d5 8a e7 e5 02 31 d9 30 76 7e 72 fd 37 f3 98 be ee f1 fb 24 48 77 83 b3 f6 18 44 f9 61 14 5a 9e 16 9e 1a 4d 21 9c f5 22 02 22 6a 84 8e 7c b3 b9 0f eb 97 c4 39 5e 26 ec 34 2d 58 81 06 6d d9 2e b1 d8 b9 33 d1 Data Ascii: 9=h^aU8KKLH}"}}J9Ey/s}45H}O,0niRDT+DMfu-vi}y I5ekuiuMvpt+e,'yGeWSS&'Jeh@O zlD10v~r7$HwDaZM!""j\|9^&4-Xm.3
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: ae f8 0a 58 99 f9 c2 59 e2 4d 27 04 c9 c1 e9 38 70 7d d9 29 8b 71 bb d5 32 13 84 ac f6 29 2a 9c 1f 80 07 65 60 91 cd eb d1 7b a2 55 ec 26 34 10 09 93 11 fb a5 8d 11 5a e5 9c ec 97 0a 73 f8 0b 02 37 ad 25 67 9b 86 b2 5e 12 f4 e8 7d 29 8c 4d 5a 4d cd 8e dc 83 2b b8 23 b0 75 1e da ad 5e 59 7c 1e 31 17 37 ac af 6e 02 3b d7 81 4a 58 8b f9 11 5f a7 1b 65 03 99 43 6c f0 0a 4d 7b d1 a0 57 a5 13 63 df 89 50 0d c2 a3 f2 c1 89 78 3b 9f 89 17 d0 b7 e7 19 de dc a2 92 3e 5a 70 63 d7 10 4a bc a9 2b d1 07 46 71 5b 35 07 51 54 be 20 9f f3 d4 f7 96 72 d3 45 df 1c 63 49 15 e4 45 41 cd 67 d4 ec 6d 79 4a 4c 11 4e 61 bc b9 9d 80 aa 1e 16 1d 1f a6 d8 39 e4 47 b0 de 9e 11 a8 35 0e d0 83 ed 6d 92 88 5b 92 56 c5 76 3b c4 99 00 63 8c fe e2 89 2e 50 98 d1 04 5a 53 a4 4d d9 27 d6 e7 Data Ascii: XYM'8p})q2)*e`{U&4Zs7%g^})MZM+#u^Y\|17n;JX_eClM{WcPx;>ZpcJ+Fq[5QT rEcIEAgmyJLNa9G5m[Vv;c.PZSM'
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: d4 c7 aa 99 de 71 65 78 04 b6 f2 ac 69 2b c4 83 c1 6c 75 ef fa a5 f0 a9 59 2d ef a4 fc b5 4a 8f ea b6 8e 18 2f 0b d9 ba c4 5d 66 f2 87 a5 ce 9d 24 97 73 fa b6 51 d1 5b 29 74 f3 75 fc 82 e2 d9 d1 45 c0 70 00 ed 4d 2e 54 75 4b 81 51 73 d1 3e 01 43 eb 77 3a 1e b8 77 3e 6a 74 55 ad 51 55 b5 0b 38 d2 da 11 2f 89 72 d7 18 eb d5 4c ec 66 27 4e 4d bc 69 61 8a 2b 33 14 86 07 f6 01 ce 19 1a 8c 5c 99 75 cf 5e 3a ce 30 3e 6f 18 24 97 a6 b4 00 93 5a 30 a9 f6 1a ad bf 4c 3d de 46 70 d8 6a 23 20 48 f7 c0 fe 38 84 97 bb c7 e4 6b a9 41 30 6a 67 b4 42 e6 ae aa c8 93 3f 6f 24 2f 7b 93 c7 49 99 54 29 d8 69 df de fc 55 cd 78 9c d8 6f f5 f6 9e d2 fe 5b 69 c2 d8 37 02 32 99 d7 81 20 f2 33 a3 64 f5 81 a6 54 57 64 71 a3 cc 24 c5 24 1e 73 05 95 7a 62 d3 66 f1 e5 9a 2c cf c1 2c cd Data Ascii: qexi+luY-J/]f$sQ[)tuEpM.TuKQs>Cw:w>jtUQU8/rLf'NMia+3\u^:0>o$Z0L=Fpj# H8kA0jgB?o$/{IT)iUxo[i72 3dTWdq$$szbf,,
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 2d cc 82 40 4e 70 fa 27 48 dc 90 47 62 22 5c 27 02 5f 6b 4f b5 d7 08 4c 45 8c 89 d7 64 6c 79 ab 58 bd e7 20 5e 64 65 c2 07 9b d4 2e 4e 6c 0d a7 e5 13 49 ba 69 1a 86 e5 66 0a f6 f5 55 88 f9 08 62 69 9a eb 37 5d b2 4a bc dd 2f cc bf 9e 32 95 a0 05 c1 76 8f 9f e8 67 8a 43 f0 94 84 76 8a 23 0f 44 ab 8a 5b 9b 52 21 9f c5 b1 11 ea 06 00 c5 92 fc 58 67 3c eb 12 1c f4 6f 68 b3 32 55 81 c3 93 5b 09 8d fd 70 16 53 39 fa dc 45 2d 2b f1 c6 ab 7a 66 da f6 bd 27 91 ac 0b f3 0e 18 f7 ff ef 0a 81 ac 2a d4 6b 02 80 f4 8e fa c8 01 1c 57 36 ab 19 c0 45 b1 cf a7 4f e5 74 9d f2 cf 21 ac be fb cd ee 46 aa 84 7d 39 7f 5e 43 89 c4 1c 21 6e b2 87 a4 26 b6 40 51 53 ce f0 d0 32 7a 03 87 5d 99 17 3c ac e4 91 ed 8a 71 f8 84 98 d7 2b af 45 80 53 9b 7c c4 2e 0e 3a bd e7 b9 0f 55 e1 7a Data Ascii: -@Np'HGb"\'_kOLEdlyX ^de.NlIifUbi7]J/2vgCv#D[R!Xg<oh2U[pS9E-+zf'*kW6EOt!F}9^C!n&@QS2z]<q+ES\|.:Uz
2024-05-24 06:27:04 UTC	848	IN	Data Raw: 86 f1 0c ec 85 67 52 ad f1 ef 5d ea 5d f8 d9 f7 d7 7a ba 2c 64 68 24 d8 e2 16 1b fc 46 5a e4 2e 7e d0 68 79 87 4b 86 d5 1b bf 72 5d 7b ce 5e 1c 90 3f ae 7e 64 7b 7f d7 55 fe 39 21 2d c6 71 70 9b 1d 4f 49 19 73 c4 a8 f8 be 5d dd 50 de 86 7e 56 b2 9f fa 14 97 c5 03 b6 6e 89 80 a9 28 f2 16 77 92 e0 a5 9b ef 5c 5e b3 24 bc ef 9a c4 3e 75 f0 cb d5 d5 40 61 84 0b 69 b5 65 97 51 e2 6c bc 61 aa 6d dd dc 87 89 5d 41 e1 8c 10 87 fc d4 50 66 d9 ba 8a e4 56 2f 69 75 60 dc 77 04 7f 7a ef 38 fb 6d e9 61 9f 09 42 13 74 bf 7a cb 72 33 c0 cb c6 21 d4 5e fe 5d fe d9 41 36 e4 8b ca 7c e7 db 98 0e 49 b5 64 5a 51 7a 94 62 b2 12 4c dd cb b7 51 7c 49 9c 29 c9 a0 25 43 73 6c 0a 00 15 d8 59 c9 ce cb c5 3a 1d 37 e8 ca 49 b1 81 a4 d5 5f be 2e a7 47 d6 6e 2d a0 5d af ee ad dc a5 85 Data Ascii: gR]]z,dh$FZ.~hyKr]{^?~d{U9!-qpOIs]P~Vn(w\^$>u@aieQlam]APfV/iu`wz8maBtzr3!^]A6\|IdZQzbLQ\|I)%CslY:7I_.Gn-]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49899	104.17.167.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:04 UTC	334	OUT	GET / HTTP/1.1 Host: 6.adsco.re Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:04 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:04 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Cache-Control: private, max-age=10 Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Max-Age: 2592000 Server: cloudflare CF-RAY: 888b37c26f118c53-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49895	172.67.38.106	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:04 UTC	534	OUT	GET /api/1.0/id5-api.js HTTP/1.1 Host: cdn.id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:04 UTC	622	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:04 GMT Content-Type: text/javascript;charset=utf-8 Content-Length: 95268 Connection: close x-amz-id-2: 15DcHWInvn5CgG3291NVgQauXX1dMRaNp7uLsr+AIZL+k3IFqQdrGh7R9FE6u3WLEEYr4Uvd/hvj8dOkH6GavQ== x-amz-request-id: CVXRT6VPHMV0W9NE Last-Modified: Wed, 08 May 2024 12:31:06 GMT ETag: "975872beea6fa436507d8a74321584b7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 CF-Cache-Status: HIT Age: 2867 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 888b37c249470f9f-EWR
2024-05-24 06:27:04 UTC	747	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 69 64 35 69 6f 2f 69 64 35 2d 61 70 69 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 30 2e 36 35 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 69 64 35 2e 69 6f 2f 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 76 61 72 20 69 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 2c 65 26 26 28 69 3d 69 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f Data Ascii: /** * @id5io/id5-api.js * @version v1.0.65 * @link https://id5.io/ * @license Apache-2.0 */!function(){"use strict";function r(t,e){var i,r=Object.keys(t);return Object.getOwnPropertySymbols&&(i=Object.getOwnPropertySymbols(t),e&&(i=i.filter(functio
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 69 28 65 29 7d 61 2e 64 6f 6e 65 3f 74 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 72 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 61 2e 61 70 70 6c 79 28 65 2c 6f 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 63 28 72 2c 74 2c 69 2c 73 2c 6e 2c 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 63 28 72 2c 74 2c 69 2c 73 2c 6e 2c 22 74 68 72 6f 77 22 2c 65 29 7d 73 28 76 6f 69 64 20 30 29 7d 29 7d 7d Data Ascii: (e){return void i(e)}a.done?t(c):Promise.resolve(c).then(r,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,i){var r=a.apply(e,o);function s(e){c(r,t,i,s,n,"next",e)}function n(e){c(r,t,i,s,n,"throw",e)}s(void 0)})}}
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 65 3f 6e 75 6c 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 75 6c 6c 21 3d 69 29 7b 76 61 72 20 72 2c 73 2c 6e 2c 6f 2c 61 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 3b 74 72 79 7b 69 66 28 6e 3d 28 69 3d 69 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 69 29 21 3d 3d 69 29 72 65 74 75 72 6e 3b 63 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 63 3d 28 72 3d 6e 2e 63 61 6c 6c 28 69 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 2c 61 2e 6c 65 6e 67 74 68 21 Data Ascii: on(e,t){var i=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=i){var r,s,n,o,a=[],c=!0,l=!1;try{if(n=(i=i.call(e)).next,0===t){if(Object(i)!==i)return;c=!1}else for(;!(c=(r=n.call(i)).done)&&(a.push(r.value),a.length!
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 73 2c 6e 3d 21 30 2c 6f 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 69 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 21 30 2c 73 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 69 2e 72 65 74 75 72 6e 7c 7c 69 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 73 7d 7d 7d 7d 63 6c 61 73 73 20 65 7b 64 65 62 75 67 Data Ascii: objects must have a [Symbol.iterator]() method.")}var s,n=!0,o=!1;return{s:function(){i=i.call(e)},n:function(){var e=i.next();return n=e.done,e},e:function(e){o=!0,s=e},f:function(){try{n\|\|null==i.return\|\|i.return()}finally{if(o)throw s}}}}class e{debug
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 65 61 74 65 42 72 6f 61 64 63 61 73 74 4d 65 73 73 61 67 65 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6e 65 77 20 76 28 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 5f 73 65 6e 64 65 72 49 64 2c 5f 2c 2b 2b 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 53 65 71 4e 62 2c 65 2c 74 7c 7c 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 7d 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eateBroadcastMessage(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:e.constructor.name;return new v(Date.now(),this._senderId,_,++this._messageSeqNb,e,t\|\|e.constructor.name)}createResponse(e,t){var i=2<arguments.length&&void 0!==arguments
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 69 73 7d 5f 68 61 6e 64 6c 65 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 74 2e 74 61 72 67 65 74 5d 3b 69 66 28 65 29 74 72 79 7b 65 5b 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 5d 28 2e 2e 2e 74 2e 6d 65 74 68 6f 64 41 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 65 29 7b 74 68 69 73 2e 5f 6c 6f 67 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 77 68 69 6c 65 20 68 61 6e 64 6c 69 6e 67 20 6d 65 74 68 6f 64 20 63 61 6c 6c 20 22 2c 74 2c 65 29 7d 7d 7d 63 6c 61 73 73 20 43 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 67 3b 6c 28 74 68 69 73 Data Ascii: is}_handle(t){const e=this._targets[t.target];if(e)try{e[t.methodName](...t.methodArguments)}catch(e){this._log.error("Error while handling method call ",t,e)}}}class C{constructor(e,t){var i=2<arguments.length&&void 0!==arguments[2]?arguments[2]:g;l(this
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 61 73 74 4d 65 73 73 61 67 65 28 65 2c 74 29 29 7d 73 65 6e 64 52 65 73 70 6f 6e 73 65 4d 65 73 73 61 67 65 28 65 2c 74 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 74 68 69 73 2e 5f 6c 6f 67 2e 64 65 62 75 67 28 22 53 65 6e 64 69 6e 67 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 22 2c 65 2c 69 2c 74 29 2c 74 68 69 73 2e 5f 70 6f 73 74 4d 65 73 73 61 67 65 28 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 46 61 63 74 6f 72 79 2e 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 2c 69 29 29 7d 75 6e 69 63 61 73 74 4d 65 73 73 61 67 65 28 65 2c 74 29 7b 76 Data Ascii: astMessage(e,t))}sendResponseMessage(e,t){var i=2<arguments.length&&void 0!==arguments[2]?arguments[2]:t.constructor.name;this._log.debug("Sending response message",e,i,t),this._postMessage(this._messageFactory.createResponse(e,t,i))}unicastMessage(e,t){v
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 50 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 45 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 44 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4e 75 6d 62 65 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 69 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 31 3b 69 66 28 52 28 65 29 7c 7c 4f 28 65 29 29 72 65 74 75 72 6e 21 28 30 3c 65 Data Ascii: ction P(e){return A(e,E)}function O(e){return A(e,D)}function R(e){return A(e,b)}function x(e){return A(e,"Number")}function L(e){return A(e,"Object")}function U(e){return void 0!==e}function N(t,i){if(!function(e){if(!e)return 1;if(R(e)\|\|O(e))return!(0<e
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 61 74 28 69 5b 74 5d 29 29 2e 6a 6f 69 6e 28 22 26 22 29 29 29 3a 22 22 29 2b 28 65 2e 68 61 73 68 3f 22 23 22 2e 63 6f 6e 63 61 74 28 65 2e 68 61 73 68 29 3a 22 22 29 3b 76 61 72 20 69 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 69 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 50 28 4d 61 74 68 2e 69 6d 75 6c 29 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 69 6d 75 6c 28 65 2c 74 29 3b 76 61 72 20 69 3d 28 34 31 39 34 33 30 33 26 65 29 2a 28 74 7c 3d 30 29 3b 72 65 74 75 72 6e 20 34 32 39 30 37 37 32 39 39 32 26 65 26 26 28 69 2b 3d 28 34 32 39 30 37 37 32 39 39 32 26 65 29 2a 74 7c 30 29 2c 30 7c 69 7d 65 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 30 3b 6c 65 74 20 73 3d 33 37 33 35 39 Data Ascii: at(i[t])).join("&"))):"")+(e.hash?"#".concat(e.hash):"");var i}function M(i,e){function r(e,t){if(P(Math.imul))return Math.imul(e,t);var i=(4194303&e)(t\|=0);return 4290772992&e&&(i+=(4290772992&e)t\|0),0\|i}e=1<arguments.length&&void 0!==e?e:0;let s=37359
2024-05-24 06:27:04 UTC	1369	IN	Data Raw: 73 65 43 6f 6e 73 65 6e 74 3a 21 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 36 29 7c 7c 21 28 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 30 29 26 26 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 2d 31 29 26 26 30 21 3d 3d 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 29 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 7c 7c 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 29 7d 7d 63 6c 61 73 73 20 48 7b 63 6f 6e 73 74 Data Ascii: seConsent:!!this.applicableSections.includes(6)\|\|!(!this.applicableSections.includes(0)&&!this.applicableSections.includes(-1)&&0!==this.applicableSections.length)&&(void 0===this.localStoragePurposeConsent\|\|this.localStoragePurposeConsent)}}class H{const

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49906	104.17.166.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	334	OUT	GET / HTTP/1.1 Host: c.adsco.re Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	1263	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2678400 Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re") Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect Expires: Mon, 24 Jun 2024 06:27:05 GMT ETag: W/"DWg73zXYn5haECmronil2Q==" CF-Cache-Status: HIT Age: 29482 Server: cloudflare CF-RAY: 888b37c4fcf241de-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:05 UTC	106	IN	Data Raw: 37 61 63 36 0d 0a 2f 2a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 72 61 66 66 69 63 20 76 61 6c 69 64 61 74 69 6f 6e 20 62 79 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 61 64 73 63 6f 72 65 2e 63 6f 6d 27 3e 41 64 73 63 Data Ascii: 7ac6/*<html><body>This domain is used for traffic validation by <a href='https:\/\/www.adscore.com'>Adsc
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 6f 72 65 3c 2f 61 3e 2c 20 61 20 62 6f 74 20 61 6e 64 20 70 72 6f 78 79 20 64 65 74 65 63 74 69 6f 6e 20 73 65 72 76 69 63 65 20 62 79 20 41 64 73 63 6f 72 65 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 44 4d 43 43 2e 3c 73 63 72 69 70 74 3e 69 66 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 21 3d 27 27 29 7b 74 72 79 7b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 61 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 61 2e 6f 70 65 6e 28 22 47 45 54 22 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f Data Ascii: ore</a>, a bot and proxy detection service by Adscore Technologies DMCC.<script>if(document.location.hash!=''){try{try{var a=new XMLHttpRequest}catch(b){a=new ActiveXObject("Microsoft.XMLHTTP")}a.open("GET",document.location.protocol+"//"+document.locatio
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 3b 67 3d 57 28 67 2c 68 2c 6c 2c 64 2c 62 5b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 3b 64 3d 57 28 64 2c 67 2c 68 2c 6c 2c 62 5b 39 5d 2c 35 2c 35 36 38 34 34 36 34 33 38 29 3b 6c 3d 57 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 34 5d 2c 39 2c 2d 31 30 31 39 38 30 33 36 39 30 29 3b 68 3d 57 28 68 2c 6c 2c 64 2c 67 2c 62 5b 33 5d Data Ascii: 11],14,643717713);g=W(g,h,l,d,b[0],20,-373897302);d=W(d,g,h,l,b[5],5,-701558691);l=W(l,d,g,h,b[10],9,38016083);h=W(h,l,d,g,b[15],14,-660478335);g=W(g,h,l,d,b[4],20,-405537848);d=W(d,g,h,l,b[9],5,568446438);l=W(l,d,g,h,b[14],9,-1019803690);h=W(h,l,d,g,b[3]
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 2c 68 2c 6c 2c 62 5b 34 5d 2c 36 2c 2d 31 34 35 35 32 33 30 37 30 29 3b 6c 3d 58 28 6c 2c 64 2c 67 2c 68 2c 62 5b 31 31 5d 2c 31 30 2c 2d 31 31 32 30 32 31 30 33 37 39 29 3b 68 3d 58 28 68 2c 6c 2c 64 2c 67 2c 62 5b 32 5d 2c 31 35 2c 37 31 38 37 38 37 32 35 39 29 3b 67 3d 58 28 67 2c 68 2c 6c 2c 64 2c 62 5b 39 5d 2c 32 31 2c 2d 33 34 33 34 38 35 35 35 31 29 3b 65 5b 30 5d 3d 64 2b 65 5b 30 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 31 5d 3d 67 2b 65 5b 31 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 32 5d 3d 68 2b 65 5b 32 5d 26 34 32 39 34 39 36 37 32 39 35 3b 65 5b 33 5d 3d 6c 2b 65 5b 33 5d 26 34 32 39 34 39 36 37 32 39 35 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 62 2c 64 2c 67 2c 68 2c 6c 29 7b 62 3d 28 62 2b 65 26 34 32 39 34 39 36 37 32 39 35 29 Data Ascii: ,h,l,b[4],6,-145523070);l=X(l,d,g,h,b[11],10,-1120210379);h=X(h,l,d,g,b[2],15,718787259);g=X(g,h,l,d,b[9],21,-343485551);e[0]=d+e[0]&4294967295;e[1]=g+e[1]&4294967295;e[2]=h+e[2]&4294967295;e[3]=l+e[3]&4294967295}function P(e,b,d,g,h,l){b=(b+e&4294967295)
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 2f 67 69 2c 22 5c 5c 21 22 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 69 2c 22 5c 5c 3b 22 29 3a 22 22 2c 62 2b 3d 67 2b 22 3b 22 29 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 76 61 72 20 65 3d 0a 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 65 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 3b 65 6c 73 65 20 69 66 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 74 72 79 7b 65 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 74 72 79 7b 65 Data Ascii: /gi,"\\!").replace(/;/gi,"\\;"):"",b+=g+";")}return b}function cb(){if(window.XMLHttpRequest)var e=new XMLHttpRequest;else if(window.XDomainRequest)e=new XDomainRequest;else if(window.ActiveXObject)try{e=new ActiveXObject("Msxml2.XMLHTTP")}catch(b){try{e
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 6c 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 69 66 28 34 21 3d 68 2e 72 65 61 64 79 53 74 61 74 65 29 67 28 32 29 3b 65 6c 73 65 20 69 66 28 32 30 30 21 3d 68 2e 73 74 61 74 75 73 29 7b 69 66 28 35 30 30 3d 3d 68 2e 73 74 61 74 75 73 26 26 68 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 63 6c 75 64 65 73 28 22 44 65 63 6f 6d 70 72 65 73 73 65 64 20 73 69 7a 65 20 69 73 20 30 20 62 79 74 65 73 22 29 29 72 65 74 75 72 6e 22 70 22 3d 3d 65 3f 6f 62 28 21 31 29 3a 22 74 22 3d 3d 65 3f 70 62 28 21 31 29 3a 22 62 22 3d 3d 65 26 26 71 62 28 21 31 29 2c 21 30 3b 67 28 31 45 33 2b 68 2e 73 74 61 74 75 73 29 7d 65 6c 73 65 20 64 26 26 64 28 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 30 29 7d 3b 22 6f 6e 65 72 72 6f 72 22 69 6e 20 68 26 26 28 68 2e 6f 6e 65 72 72 6f 72 3d 0a Data Ascii: l=function(v){if(4!=h.readyState)g(2);else if(200!=h.status){if(500==h.status&&h.response.includes("Decompressed size is 0 bytes"))return"p"==e?ob(!1):"t"==e?pb(!1):"b"==e&&qb(!1),!0;g(1E3+h.status)}else d&&d(h.responseText,0)};"onerror"in h&&(h.onerror=
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 3d 64 3f 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 76 5f 22 2b 65 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 65 5f 22 2b 65 29 29 3a 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 76 5f 22 2b 65 2c 62 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 65 5f 22 2b 65 2c 2b 6e 65 77 20 44 61 74 65 2b 33 36 30 30 2a 64 29 29 29 7d 63 61 74 63 68 28 6c 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d Data Ascii: =d?(window.localStorage.removeItem("v_"+e),window.localStorage.removeItem("e_"+e)):(window.localStorage.setItem("v_"+e,b),window.localStorage.setItem("e_"+e,+new Date+3600*d)))}catch(l){}}function K(){return"undefined"!==typeof performance&&"undefined"!==
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 30 3b 62 3c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 65 2e 70 75 73 68 28 45 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 62 5d 29 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 0a 42 28 78 29 3b 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2c 62 3d 5b 5d 3b 62 2e 70 75 73 68 28 65 2e 73 74 61 72 74 45 29 3b 62 2e 70 75 73 68 28 65 2e 6f 6e 4c 6f 61 64 54 29 3b Data Ascii: 0;b<window.location.ancestorOrigins.length;b++)e.push(E(window.location.ancestorOrigins[b]))}catch(d){return-1}return e}();B(x);x=function(){if(!window.chrome\|\|!window.chrome.csi)return"";var e=window.chrome.csi(),b=[];b.push(e.startE);b.push(e.onLoadT);
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 69 70 63 52 65 6e 64 65 72 65 72 29 72 65 74 75 72 6e 20 32 30 3b 69 66 28 22 5f 70 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 22 63 61 6c 6c 50 68 61 6e 74 6f 6d 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 31 3b 69 66 28 22 5f 5f 70 68 61 6e 74 6f 6d 61 73 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 32 3b 69 66 28 22 42 75 66 66 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 33 3b 69 66 28 22 65 6d 69 74 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 34 3b 69 66 28 22 73 70 61 77 6e 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 35 3b 69 66 28 22 77 65 62 64 72 69 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 2e 63 6c 69 65 6e 74 49 6e 66 6f 72 6d 61 74 69 Data Ascii: fined"!==typeof ipcRenderer)return 20;if("_phantom"in window\|\|"callPhantom"in window)return 1;if("__phantomas"in window)return 2;if("Buffer"in window)return 3;if("emit"in window)return 4;if("spawn"in window)return 5;if("webdriver"in window.clientInformati
2024-05-24 06:27:05 UTC	1369	IN	Data Raw: 65 6e 74 75 6d 22 29 3f 31 34 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 35 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 72 69 76 65 72 22 29 3f 0a 31 36 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 6e 69 75 6d 22 29 3f 31 37 3a 6e 75 6c 6c 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 77 65 62 64 72 69 76 65 72 22 29 3f 31 38 3a 6e 75 6c 6c Data Ascii: entum")?14:window.document.documentElement.getAttribute("selenium")?15:window.document.documentElement.getAttribute("driver")?16:null!==document.documentElement.getAttribute("selenium")?17:null!==document.documentElement.getAttribute("webdriver")?18:null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49901	162.252.214.5	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	333	OUT	GET /p HTTP/1.1 Host: adsco.re Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	461	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive AS-P-1: OK nyc222 AS-P-2: OK AS-P-3: OK Access-Control-Max-Age: 2592000 Cache-Control: no-transform Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
2024-05-24 06:27:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49900	162.252.214.5	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	334	OUT	GET / HTTP/1.1 Host: 4.adsco.re Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Access-Control-Max-Age: 2592000 Cache-Control: private, max-age=5
2024-05-24 06:27:05 UTC	56	IN	Data Raw: 32 64 0d 0a 38 2e 34 36 2e 31 32 33 2e 31 37 35 2c 39 35 33 65 65 36 36 38 31 62 31 30 64 62 35 33 30 66 30 61 38 63 38 36 34 36 62 62 63 33 31 65 0d 0a 30 0d 0a 0d 0a Data Ascii: 2d8.46.123.175,953ee6681b10db530f0a8c8646bbc31e0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49889	54.220.158.112	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	839	OUT	GET /5/c=3722/ctax=Campaigns%5EExpose%5EViewers%5EPlacement%20111992%20-%20Viewer HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGMTBgQAAF4fCp8%3D"; _cc_aud="ABR4nGNgYGBICzA2YYADAA5WAR4%3D"
2024-05-24 06:27:05 UTC	979	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:05 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.24.96 Set-Cookie: _cc_id=72aac350df2b4a40201cac1fd18dfe1f;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGPL3%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARq1E%2FA%3D%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4nGNgYGBICzC2ZIABRgaGWQuBNAAcEAJf";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:05 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49904	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	703	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 06:27:05 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49903	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	666	OUT	GET /tr/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&rl=&if=false&ts=1716532015329&sw=1280&sh=1024&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=96, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 06:27:05 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49908	35.207.24.140	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	678	OUT	GET /sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	771	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 24 May 2024 06:27:05 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 Set-Cookie: tuuid=831e0548-0164-4f07-a0e6-1957cb22d82b; path=/; expires=Sat, 24-May-2025 06:27:05 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1716532025; path=/; expires=Sat, 24-May-2025 06:27:05 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1716532025; path=/; expires=Sat, 24-May-2025 06:27:05 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49907	35.207.24.140	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	682	OUT	GET /sync?ssp=intentiq&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	775	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 24 May 2024 06:27:05 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=intentiq&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 Set-Cookie: tuuid=f2c9834a-eb80-459e-8abc-438c425949b9; path=/; expires=Sat, 24-May-2025 06:27:05 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1716532025; path=/; expires=Sat, 24-May-2025 06:27:05 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1716532025; path=/; expires=Sat, 24-May-2025 06:27:05 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49902	65.9.7.102	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	625	OUT	GET /16afc0b29e2a47c4091aea1e77b64c9d.webp HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	655	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 57686 Connection: close Date: Thu, 23 May 2024 08:00:49 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Mon, 08 Apr 2024 12:03:10 GMT ETag: "3480490b1b9dafa252b83a425006a20d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2a3a093b493a82493f3431437cb166ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: PMBallMlqe5VcEy1ZYHe7qwmh002JTUbGmFj8ssC0o4pJUo7tqUiqg== Age: 80777
2024-05-24 06:27:05 UTC	15729	IN	Data Raw: 52 49 46 46 4e e1 00 00 57 45 42 50 56 50 38 20 42 e1 00 00 30 ca 05 9d 01 2a b0 04 73 02 3e 6d 32 94 47 a4 23 26 a9 27 d3 eb 71 20 0d 89 67 6e 29 1d 18 75 49 12 49 8c 8b 76 55 8f 2b 4c 6a 77 e4 5f db b7 7b 7b 0f b0 3f 40 0f 02 7e 6b 73 db ff 49 e8 8f f5 97 4f af f4 bc 9b 7d 7b 83 a9 d2 38 6e ec d2 fb eb af f4 ff 81 e7 fb ce 8f 70 ed b7 cb e7 99 7f fe fd 5b 7d 7b 7f ec de f1 8e ad 7a 7b 31 1f 2c fe f7 ff 87 fb df 23 7f 3b f7 c9 fe a3 93 ac 51 fe b1 fc c3 fe be b0 ff ea f2 47 ec 3c 7d ba 9d 3f d3 ca 53 29 bf f6 f4 ff ef 3f b1 3f 20 27 f0 bd 29 fd 1c bf f4 ef e2 2d e6 c9 68 3a 7d 15 67 ce f1 ba 12 5d 48 67 13 b8 ed e8 63 2a 9b 81 b7 bd d2 a3 5f 70 17 30 5b 52 5a f4 80 fb 2c db a7 0b 7d 8e 59 56 75 2e d1 77 7f 9d 4f 91 af c5 9c 8d 1d f7 b7 c0 13 65 d6 17 75 Data Ascii: RIFFNWEBPVP8 B0s>m2G#&'q gn)uIIvU+Ljw_{{?@~ksIO}{8np[}{z{1,#;QG<}?S)?? ')-h:}g]Hgc_p0[RZ,}YVu.wOeu
2024-05-24 06:27:05 UTC	16384	IN	Data Raw: 12 42 e8 75 7e c6 2e 6c b5 cb 7b a2 ed fc ba de 2a c2 5a 57 11 19 1f b6 d1 af ca 89 89 f9 64 70 0c d1 c7 fa b0 f5 cf 2b 71 70 fd 9a d4 11 1e c5 67 b4 71 03 04 8e 12 bc 25 b0 b8 9b 23 84 48 39 ca eb cc b5 60 50 e5 f8 9e d8 b2 ca d4 9b 32 aa 51 54 a1 7d fa 5f ef 55 22 ca 5a 9b 8b 08 cf 23 6b 8a c4 ec 21 2f 37 2e f0 a1 11 a2 6a 48 42 cf ba 16 e1 e2 a8 ef 52 05 66 d8 0f bc 3d 8c 63 fd 06 2c e4 a5 fe 81 7b 01 ec 58 ce 51 d6 f7 bf 51 72 04 e5 4a 4c d4 cb 03 1e 77 6d cd c6 48 01 47 0e 2d 01 ae f5 b8 de c0 b4 aa 62 63 f9 5b 82 23 6c 25 c6 2f 6c ee 0c f7 9a 19 b3 b2 88 27 58 96 94 94 75 3e 30 4e 33 ee 3c 5d d0 ef e6 15 00 c2 26 90 5d 9e da 6a 50 5b da 2f b9 c3 20 6f 18 70 5a 66 3f 19 8d ab 00 94 44 c0 16 71 8f fc b9 43 b3 3f 99 a7 9e 07 3d 25 38 05 4b 4e b1 3c a7 Data Ascii: Bu~.l{*ZWdp+qpgq%#H9`P2QT}_U"Z#k!/7.jHBRf=c,{XQQrJLwmHG-bc[#l%/l'Xu>0N3<]&]jP[/ opZf?DqC?=%8KN<
2024-05-24 06:27:05 UTC	16384	IN	Data Raw: 2b f9 cd 9f 5a 1f 2b ba 52 c0 02 83 4a 8f 28 2c fd 55 48 86 1a 1e b5 32 e2 14 47 f9 ff a3 87 23 f8 c7 7c bb 3f a7 dd 77 27 a1 19 28 7b ef 26 f6 c9 53 f9 a6 f4 9f fa 78 05 65 cf df 83 c1 06 2f 7c e7 fc 89 5c 11 e7 c8 55 bf 35 16 c1 6c e5 d6 8d 36 87 f2 54 cd c4 3b 93 81 a9 e2 18 fd a2 34 8c 78 46 a8 fc 4f 6b 49 c0 da 93 14 87 3c 0a 07 d9 16 99 60 d7 cd 3d 2f 62 d5 4e f9 4d 60 3f c7 b9 b9 3e fc 9c 2d a0 b9 44 c3 44 7c 80 0f 46 31 51 90 7b 96 6b d2 36 75 e5 6b f8 85 26 ac 0c 80 f8 85 c8 3e f1 b7 ff c9 9b a8 2e 5e e9 63 da ac aa 87 89 9c 01 0b 39 7e 81 a0 da c5 6c e7 00 7d 04 29 db 53 8e 89 4e 53 4b a6 bd 63 c9 c0 e9 ee 88 5e e1 dd d1 50 3e f7 53 ab c3 72 4e 7c 77 c9 81 43 1d b0 c7 5c e2 34 91 14 67 30 f7 a0 23 bf 93 d5 33 35 59 8e 2b b5 ca df a5 f7 9b 71 ea Data Ascii: +Z+RJ(,UH2G#\|?w'({&Sxe/\|\U5l6T;4xFOkI<`=/bNM`?>-DD\|F1Q{k6uk&>.^c9~l})SNSKc^P>SrN\|wC\4g0#35Y+q
2024-05-24 06:27:05 UTC	9189	IN	Data Raw: 1b 3b 55 2d 8a 82 80 59 6b ed fb 95 9a fd f9 9f 48 0b 78 da 96 de 37 f6 97 c0 51 aa ad 33 95 d9 ac 26 cc a7 73 15 4f b2 d4 2f a0 e7 69 e4 3b a1 4b d2 8f d5 d2 0a 94 87 b9 26 bb c2 7c 05 84 be ce 1e 21 06 f6 b8 f2 02 61 06 42 cc b3 e8 31 3c 1e e4 a1 89 7e ad bc ee c7 72 d7 ff f7 7d 13 30 c0 68 2c e3 d8 e6 b2 8b 3a ef b1 2c c7 49 c4 4e ff fb e0 38 41 be 6b af 60 3c 2f 62 6a 22 b8 d4 9d f5 c4 f4 96 e0 5e a0 d9 02 3a 21 79 07 5a 0d d7 d3 d4 64 5d d6 73 d7 34 f5 eb 1a 1c 1a 7d dc ad ba e8 af 00 09 0c 3d f6 f4 78 f4 e4 8f 47 c2 49 78 0b bc 0b 06 e8 d5 3a 11 ac c0 ae 95 f5 0e ef 48 0b 20 a9 3d 71 4c 1e 7d db ae 94 2b b7 11 8a 47 93 9b b5 81 4a 2f 64 cd 39 b4 f0 89 59 f5 04 96 56 60 75 ef c9 a5 88 b0 22 c9 ad db 8f ea 26 cd de 83 11 e2 9c 9f 1d 59 e8 3e 04 a0 9a Data Ascii: ;U-YkHx7Q3&sO/i;K&\|!aB1<~r}0h,:,IN8Ak`</bj"^:!yZd]s4}=xGIx:H =qL}+GJ/d9YV`u"&Y>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49911	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	1266	OUT	GET /c?v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyYzYhmwnRFTU4GOhSVcCXGjw7uJOs&v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76bFDl5xvVQU4rWzN5S_2tbuwqvfipqPw01I0PbiW_12CM-_N3sSmDR4P6wyYzYhmwh-vYa_Zsq_IqIeVGeEg4GM&fw=1&f=1&cid=1604063&cbuster=1716532023447415882264&pageImp=1&pvid=18fa947eb118598204d&pv=3&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy2WImwGwvmvL0y0Gz&rid=a1c9a944-1996-11ef-9b76-c84bd68370c0&tt=Referral&ts=actengage&iv=11&completion=2,3&muidn=o4n2DX9tTBrn HTTP/1.1 Host: c.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:05 UTC	389	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Mg-Request-UUID: 8576262e-af05-4755-8d77-e99b7210a103 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37c84ff1c35d-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49910	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	922	OUT	GET /track?r=pjnewsletter.com&sn=&ic=0&tgt=0&app=&wi=540&he=303&test=5&d36=6.2.212&apppkg=&fv=3&proto=https&d65=Control&d66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&e=inventory&vi=0&plt=2&cb=1716532023413 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:05 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:05 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49915	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	865	OUT	GET /1x1.gif?id=825298&type=c&tg=d67dc17da8918b77c2d9121386e379a0&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=006f8 HTTP/1.1 Host: a.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:05 UTC	452	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:05 GMT; domain=.mgid.com; path=/; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37c989ad0f65-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49914	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	865	OUT	GET /1x1.gif?id=783385&type=c&tg=f8602a8c26ce5bee805634dcb1adaca2&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=0bc4c HTTP/1.1 Host: a.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:05 UTC	452	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:05 GMT; domain=.mgid.com; path=/; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37c98c373314-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49913	173.0.146.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:05 UTC	1324	OUT	GET /api/adserver/tag/5/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532023417&wfc=1 HTTP/1.1 Host: go1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:06 UTC	1126	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:06 GMT content-type: application/json transfer-encoding: chunked vary: Accept-Encoding set-cookie: aniC=1716532025945-172031150014-000201-002-004790; Expires=Thu, 13-Jun-24 06:27:05 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None access-control-allow-origin: https://pjnewsletter.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, INDEX access-control-allow-headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With access-control-max-age: 1728000 x-bamboo-c-s: BYPASS x-bamboo-c-skfe: 1 x-bamboo-c-skst: 1 expires: Sun, 12 May 2024 16:40:26 GMT cache-control: no-cache accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 critical-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 connection: close
2024-05-24 06:27:06 UTC	268	IN	Data Raw: 31 30 35 0d 0a 7b 22 64 61 74 61 22 3a 20 7b 22 74 72 61 63 6b 65 72 73 22 3a 20 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 75 74 69 6c 73 2f 78 61 70 69 2f 6d 75 6c 74 69 2d 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 61 6e 69 76 69 65 77 26 65 6e 64 70 6f 69 6e 74 3d 75 73 2d 65 61 73 74 22 2c 20 22 65 22 3a 20 22 73 79 6e 63 22 2c 20 22 70 72 22 3a 20 22 35 22 2c 20 22 74 22 3a 33 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 6d 61 74 63 68 69 6e 67 3f 69 64 3d 33 36 35 35 26 5f 66 77 5f 67 64 70 72 3d 30 26 5f 66 77 5f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d Data Ascii: 105{"data": {"trackers": [{"url":"https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east", "e": "sync", "pr": "5", "t":3},{"url":"https://ads.stickyadstv.com/user-matching?id=3655&_fw_gdpr=0&_fw_gdpr_consent=&gpp=
2024-05-24 06:27:06 UTC	5600	IN	Data Raw: 31 35 44 38 0d 0a 20 22 65 22 3a 20 22 73 79 6e 63 22 2c 20 22 70 72 22 3a 20 22 39 22 2c 20 22 74 22 3a 33 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 61 75 74 6f 2d 75 73 65 72 2d 73 79 6e 63 3f 70 78 3d 31 39 35 33 26 5f 66 77 5f 67 64 70 72 3d 30 26 5f 66 77 5f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 20 22 65 22 3a 20 22 73 79 6e 63 22 2c 20 22 70 72 22 3a 20 22 39 22 2c 20 22 74 22 3a 33 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 73 70 2e 64 69 73 71 75 73 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 75 73 65 72 2f 3f 70 61 72 74 6e 65 72 3d 61 6e 69 76 69 65 77 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 61 6e 69 76 69 65 77 2e 63 6f 6d 25 32 46 Data Ascii: 15D8 "e": "sync", "pr": "9", "t":3},{"url":"https://ads.stickyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=", "e": "sync", "pr": "9", "t":3},{"url":"https://ssp.disqus.com/redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2F
2024-05-24 06:27:06 UTC	6998	IN	Data Raw: 31 42 34 45 0d 0a 41 56 43 5f 44 54 5d 26 69 6d 69 64 3d 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 5f 61 64 73 73 65 72 76 6e 67 6c 61 79 65 72 36 62 34 36 38 66 34 64 34 63 64 63 66 77 67 5f 31 33 37 32 38 30 31 35 36 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 22 2c 20 22 74 79 70 65 22 3a 22 70 6c 22 2c 20 22 70 6c 61 74 66 6f 72 6d 22 3a 33 2c 20 22 70 72 6f 76 69 64 65 72 22 3a 37 35 2c 20 22 73 75 70 22 3a 36 31 31 36 36 2e 35 39 35 32 36 35 36 37 2c 20 22 63 6c 69 63 6b 54 68 72 6f 75 67 68 55 72 6c 22 3a 22 22 2c 20 22 74 72 61 63 6b 65 72 73 22 3a 20 5b 5d 7d 2c 7b 20 22 61 73 69 64 22 3a 22 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 7c 36 34 66 38 38 62 31 34 31 34 Data Ascii: 1B4EAVC_DT]&imid=244578ccbebd41e3744959cc05d9b210_adsservnglayer6b468f4d4cdcfwg_137280156_[AVC_WFCYCLE]", "type":"pl", "platform":3, "provider":75, "sup":61166.59526567, "clickThroughUrl":"", "trackers": []},{ "asid":"64ddec09ef5e241fc1061287\|64f88b1414
2024-05-24 06:27:06 UTC	1405	IN	Data Raw: 35 37 36 0d 0a 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 25 37 43 36 34 64 64 65 62 39 35 34 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 68 3d 65 36 39 32 30 66 38 33 38 63 65 32 36 33 63 37 33 30 64 34 37 39 34 32 31 33 66 36 65 33 35 37 35 61 63 61 39 39 64 64 26 64 39 3d 30 30 30 30 26 61 64 3d 5b 41 56 5f 41 44 44 55 52 41 54 49 4f 4e 5d 26 76 69 3d 5b 41 56 5f 56 49 45 57 41 42 49 4c 49 54 59 5d 26 64 37 31 3d 5b 41 56 43 5f 41 44 49 44 5d 26 64 37 33 3d 5b 41 56 43 5f 44 54 5d 26 69 6d 69 64 3d 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 5f 61 64 73 73 65 72 76 6e 67 6c 61 79 65 72 36 62 34 36 38 66 34 64 Data Ascii: 5768a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb9540829a4d45051144&h=e6920f838ce263c730d4794213f6e3575aca99dd&d9=0000&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&imid=244578ccbebd41e3744959cc05d9b210_adsservnglayer6b468f4d
2024-05-24 06:27:06 UTC	6998	IN	Data Raw: 31 42 34 45 0d 0a 25 37 44 25 35 44 25 37 44 22 2c 20 22 63 72 65 61 74 69 76 65 54 79 70 65 22 3a 20 31 2c 20 22 76 70 70 22 3a 31 2c 20 22 66 70 22 3a 30 2c 20 22 73 63 22 3a 30 2e 37 2c 20 22 70 72 69 63 65 22 3a 30 2e 34 30 30 30 30 2c 20 22 72 22 3a 30 2e 34 30 30 30 30 2c 20 22 61 63 22 3a 20 7b 22 63 22 3a 31 2c 22 66 70 22 3a 31 2c 22 76 22 3a 30 2e 37 2c 22 74 22 3a 32 7d 2c 20 22 73 63 68 61 69 6e 22 3a 20 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 68 70 22 3a 31 2c 22 61 73 69 22 3a 22 61 6e 69 76 69 65 77 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 22 7d 5d 7d 2c 20 22 6f 70 74 22 3a 20 7b 22 69 6d 70 22 3a 31 Data Ascii: 1B4E%7D%5D%7D", "creativeType": 1, "vpp":1, "fp":0, "sc":0.7, "price":0.40000, "r":0.40000, "ac": {"c":1,"fp":1,"v":0.7,"t":2}, "schain": {"ver":"1.0","complete":1,"nodes":[{"hp":1,"asi":"aniview.com","sid":"64db4ddc8904509d8303ce64"}]}, "opt": {"imp":1
2024-05-24 06:27:06 UTC	5579	IN	Data Raw: 31 35 42 45 0d 0a 35 44 25 37 44 22 2c 20 22 63 72 65 61 74 69 76 65 54 79 70 65 22 3a 20 31 2c 20 22 76 70 70 22 3a 31 2c 20 22 66 70 22 3a 30 2c 20 22 73 63 22 3a 30 2e 36 36 35 2c 20 22 70 72 69 63 65 22 3a 30 2e 36 36 35 30 30 2c 20 22 72 22 3a 30 2e 36 36 35 30 30 2c 20 22 61 63 22 3a 20 7b 22 63 22 3a 31 2c 22 66 70 22 3a 31 2c 22 76 22 3a 30 2e 36 36 35 2c 22 72 22 3a 30 2c 22 74 22 3a 32 7d 2c 20 22 73 63 68 61 69 6e 22 3a 20 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 68 70 22 3a 31 2c 22 61 73 69 22 3a 22 61 6e 69 76 69 65 77 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 22 7d 5d 7d 2c 20 22 6f 70 74 22 3a 20 7b 22 Data Ascii: 15BE5D%7D", "creativeType": 1, "vpp":1, "fp":0, "sc":0.665, "price":0.66500, "r":0.66500, "ac": {"c":1,"fp":1,"v":0.665,"r":0,"t":2}, "schain": {"ver":"1.0","complete":1,"nodes":[{"hp":1,"asi":"aniview.com","sid":"64db4ddc8904509d8303ce64"}]}, "opt": {"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49930	35.207.24.140	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	771	OUT	GET /ul_cb/sync?ssp=mgid&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532025; tuuid_lu=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9
2024-05-24 06:27:06 UTC	712	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 24 May 2024 06:27:06 GMT Location: //cm.mgid.com/m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 Set-Cookie: tuuid=f2c9834a-eb80-459e-8abc-438c425949b9; path=/; expires=Sat, 24-May-2025 06:27:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1716532026; path=/; expires=Sat, 24-May-2025 06:27:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!mgid=1716532026; path=/; expires=Sat, 24-May-2025 06:27:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49928	35.207.24.140	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	775	OUT	GET /ul_cb/sync?ssp=intentiq&seller_network=mgid_&bid_id=6c80bc78-39d5-468c-bae3-b678b4f59534&initiator=me&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532025; tuuid_lu=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9
2024-05-24 06:27:06 UTC	782	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 24 May 2024 06:27:06 GMT Location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9 Set-Cookie: tuuid=f2c9834a-eb80-459e-8abc-438c425949b9; path=/; expires=Sat, 24-May-2025 06:27:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1716532026; path=/; expires=Sat, 24-May-2025 06:27:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!intentiq=1716532026; path=/; expires=Sat, 24-May-2025 06:27:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49933	104.19.133.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	549	OUT	GET /images/logos/Adchoices.svg HTTP/1.1 Host: cdn.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:06 UTC	838	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:06 GMT Content-Type: image/svg+xml Content-Length: 836 Connection: close x-amz-id-2: CxpyNkMvUy7EglrL46ndveEgmcKj5NlhgNn3xrtwadQGLxOYO5GJbbUWfWYVC/75XuxenQ1eXpI= x-amz-request-id: YQB9E0XZ4AF5YHE7 Last-Modified: Wed, 17 Feb 2021 18:15:53 GMT ETag: "7d59364b7ed2df3f02507c9f92560df9" x-amz-meta-s3cmd-attrs: atime:1613585745/ctime:1613585745/gid:0/gname:root/md5:7d59364b7ed2df3f02507c9f92560df9/mode:33206/mtime:1613585745/uid:0/uname:root x-amz-version-id: null CF-Cache-Status: HIT Age: 438 Expires: Sat, 25 May 2024 06:27:06 GMT Cache-Control: public, max-age=86400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b37cedea50f41-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:06 UTC	531	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-05-24 06:27:06 UTC	305	IN	Data Raw: 2e 39 43 30 2c 38 39 2c 35 2e 39 2c 39 30 2e 31 2c 31 33 2e 36 2c 38 35 2e 39 6c 37 2e 32 2d 34 2e 31 0a 09 63 32 2e 33 2d 31 2e 32 2c 33 2e 35 2d 33 2e 38 2c 33 2e 31 2d 36 2e 33 63 2d 30 2e 36 2d 32 2e 34 2d 33 2d 33 2e 39 2d 35 2e 34 2d 33 2e 33 6c 2d 30 2e 38 2c 30 2e 33 63 2d 34 2e 33 2c 32 2e 33 2d 37 2e 31 2c 30 2d 37 2e 31 2d 34 2e 39 56 31 38 2e 39 63 30 2d 34 2e 38 2c 33 2e 35 2d 37 2e 32 2c 37 2e 37 2d 34 2e 35 6c 34 34 2e 31 2c 32 35 2e 32 0a 09 63 34 2e 33 2c 32 2e 35 2c 34 2e 33 2c 36 2e 33 2c 30 2c 38 2e 37 4c 33 35 2e 35 2c 36 32 2e 36 56 34 35 2e 38 63 30 2d 32 2e 35 2d 32 2e 31 2d 34 2e 36 2d 34 2e 36 2d 34 2e 36 73 2d 34 2e 36 2c 32 2e 31 2d 34 2e 36 2c 34 2e 36 6c 30 2c 30 56 36 39 63 30 2e 35 2c 33 2e 35 2c 33 2e 38 2c 35 2e 39 2c 37 Data Ascii: .9C0,89,5.9,90.1,13.6,85.9l7.2-4.1c2.3-1.2,3.5-3.8,3.1-6.3c-0.6-2.4-3-3.9-5.4-3.3l-0.8,0.3c-4.3,2.3-7.1,0-7.1-4.9V18.9c0-4.8,3.5-7.2,7.7-4.5l44.1,25.2c4.3,2.5,4.3,6.3,0,8.7L35.5,62.6V45.8c0-2.5-2.1-4.6-4.6-4.6s-4.6,2.1-4.6,4.6l0,0V69c0.5,3.5,3.8,5.9,7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49932	104.19.133.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	546	OUT	GET /images/mgid/mgid_ua.svg HTTP/1.1 Host: cdn.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:06 UTC	840	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:06 GMT Content-Type: image/svg+xml Content-Length: 2302 Connection: close x-amz-id-2: 6Lju8V592HZrnW7ZPbVsIMNhHUTc9FV0Wt7NODFvgemMqtwqKrmjsefqnKSuq4jPJYjEKtnSgmc= x-amz-request-id: 2D2C6JEEDF3XGBMC Last-Modified: Tue, 08 Mar 2022 17:05:01 GMT ETag: "617c205137825561208ef7c1a2d8f319" x-amz-meta-s3cmd-attrs: atime:1646759091/ctime:1646759091/gid:0/gname:root/md5:617c205137825561208ef7c1a2d8f319/mode:33206/mtime:1646759091/uid:0/uname:root x-amz-version-id: null CF-Cache-Status: HIT Age: 5100 Expires: Sat, 25 May 2024 06:27:06 GMT Cache-Control: public, max-age=86400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 888b37cedc65421f-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:06 UTC	529	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 33 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 33 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 39 38 30 35 20 34 2e 37 37 35 38 38 4c 34 31 2e 32 36 39 35 20 36 2e 33 32 36 31 32 4c 35 30 2e 38 34 36 33 20 31 31 2e 38 31 31 36 4c 35 34 2e 30 33 38 35 20 39 2e 39 38 33 31 31 4c 34 34 2e 39 38 30 35 20 34 2e 37 37 35 38 38 5a 22 20 66 69 6c 6c 3d 22 23 46 46 30 30 30 30 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 37 2e 36 35 34 33 20 39 2e 39 38 33 4c 35 30 2e 38 34 36 35 20 31 31 2e 38 31 31 35 4c 37 30 20 30 2e 38 30 30 37 38 Data Ascii: <svg width="70" height="37" viewBox="0 0 70 37" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M44.9805 4.77588L41.2695 6.32612L50.8463 11.8116L54.0385 9.98311L44.9805 4.77588Z" fill="#FF0000"/><path d="M47.6543 9.983L50.8465 11.8115L70 0.80078
2024-05-24 06:27:06 UTC	1369	IN	Data Raw: 31 4c 30 20 33 31 56 33 36 48 32 39 2e 33 32 38 35 5a 22 20 66 69 6c 6c 3d 22 23 30 34 38 41 46 46 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 36 36 2e 38 31 38 32 20 35 2e 38 35 31 34 39 56 31 32 2e 31 37 30 37 43 36 35 2e 33 34 36 36 20 31 30 2e 39 36 33 32 20 36 33 2e 34 37 37 33 20 31 30 2e 32 33 38 37 20 36 31 2e 34 34 38 39 20 31 30 2e 32 33 38 37 43 35 36 2e 37 31 35 39 20 31 30 2e 32 33 38 37 20 35 32 2e 38 39 37 38 20 31 34 2e 31 30 32 37 20 35 32 2e 38 39 37 38 20 31 38 2e 38 39 32 34 43 35 32 2e 38 39 37 38 20 32 33 2e 36 38 32 31 20 35 36 2e 37 31 35 39 20 32 37 2e 35 34 36 31 20 36 31 2e 34 34 38 39 20 32 37 2e 35 34 36 31 43 Data Ascii: 1L0 31V36H29.3285Z" fill="#048AFF"/><path fill-rule="evenodd" clip-rule="evenodd" d="M66.8182 5.85149V12.1707C65.3466 10.9632 63.4773 10.2387 61.4489 10.2387C56.7159 10.2387 52.8978 14.1027 52.8978 18.8924C52.8978 23.6821 56.7159 27.5461 61.4489 27.5461C
2024-05-24 06:27:06 UTC	404	IN	Data Raw: 20 32 37 2e 35 34 38 31 20 33 35 2e 39 39 33 38 20 32 37 2e 35 34 38 31 43 33 31 2e 32 36 30 39 20 32 37 2e 35 34 38 31 20 32 37 2e 34 34 32 37 20 32 33 2e 36 38 34 31 20 32 37 2e 34 34 32 37 20 31 38 2e 38 39 34 34 43 32 37 2e 34 34 32 37 20 31 34 2e 31 30 34 37 20 33 31 2e 32 36 30 39 20 31 30 2e 32 34 30 37 20 33 35 2e 39 39 33 38 20 31 30 2e 32 34 30 37 43 33 38 2e 30 32 32 32 20 31 30 2e 32 34 30 37 20 33 39 2e 38 39 31 35 20 31 30 2e 39 36 35 32 20 34 31 2e 33 36 33 31 20 31 32 2e 31 37 32 37 5a 4d 33 30 2e 36 32 34 35 20 31 38 2e 38 39 34 34 43 33 30 2e 36 32 34 35 20 32 31 2e 39 31 33 31 20 33 33 2e 30 31 30 38 20 32 34 2e 33 32 38 31 20 33 35 2e 39 39 33 38 20 32 34 2e 33 32 38 31 43 33 38 2e 39 37 36 37 20 32 34 2e 33 32 38 31 20 34 31 2e 33 36 Data Ascii: 27.5481 35.9938 27.5481C31.2609 27.5481 27.4427 23.6841 27.4427 18.8944C27.4427 14.1047 31.2609 10.2407 35.9938 10.2407C38.0222 10.2407 39.8915 10.9652 41.3631 12.1727ZM30.6245 18.8944C30.6245 21.9131 33.0108 24.3281 35.9938 24.3281C38.9767 24.3281 41.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49927	104.16.203.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	1905	OUT	GET /mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ftp9dKTijyUY1DoM0PXjOb7V8-PAm5K2yYFfRrH8tmMpVo-oX3bhntyeY00SFTAlPNOY8KxP [TRUNCATED] Host: engine.4dsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:06 UTC	1341	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:06 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: Accept-Encoding Cache-Control: private, no-transform P3P: CP="CAO PSA OUR IND" Access-Control-Allow-Origin: * Set-Cookie: IKSR={}; path=/; SameSite=None; secure Set-Cookie: INF_DFL8=false; path=/; SameSite=None; secure Set-Cookie: IUID=6e36baa3-fdf6-4bad-8e71-83f6a6ceab69; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure Set-Cookie: ISSH=73827F; path=/; SameSite=None; secure Set-Cookie: VMI=; path=/; SameSite=None; secure Set-Cookie: IPLH=#{}; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: IPLH_Q=#[]; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: CHN=#[]; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSSH=#{}; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSRH=#{}; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: ILP=null; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure
2024-05-24 06:27:06 UTC	1332	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 4c 55 3d 23 31 2f 31 2f 30 30 30 31 20 31 32 3a 30 30 3a 30 30 20 41 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 36 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 45 41 4c 43 3d 23 31 2f 31 2f 30 30 30 31 20 31 32 3a 30 30 3a 30 30 20 41 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 36 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 Data Ascii: Set-Cookie: ILPLU=#1/1/0001 12:00:00 AM; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: ILEALC=#1/1/0001 12:00:00 AM; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie:
2024-05-24 06:27:06 UTC	1132	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4d 43 48 3d 23 7b 7d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 36 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4d 43 48 5f 51 3d 23 5b 5d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 30 36 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4d 48 3d 23 7b 7d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a Data Ascii: Set-Cookie: IMCH=#{}; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: IMCH_Q=#[]; expires=Wed, 24-May-2034 06:27:06 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: IMH=#{}; expires=Wed, 24-May-2034 06:
2024-05-24 06:27:06 UTC	1369	IN	Data Raw: 36 32 64 0d 0a 7b 22 43 6c 69 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 67 69 6e 65 2e 34 64 73 70 6c 79 2e 63 6f 6d 2f 63 6c 69 63 6b 74 61 67 2e 65 6e 67 69 6e 65 3f 4d 65 64 69 61 49 64 3d 31 32 39 33 33 31 26 50 49 64 3d 31 31 31 39 39 32 26 53 69 74 65 49 64 3d 32 32 36 39 36 26 72 61 6e 64 3d 30 2e 33 36 30 39 37 32 32 35 34 32 33 39 34 37 35 26 5a 6f 6e 65 49 64 3d 38 34 33 39 36 26 76 3d 39 45 70 2d 73 4c 61 2d 5f 46 45 6b 58 35 46 36 47 54 70 65 33 58 67 32 64 37 37 53 65 78 4f 35 72 7a 4c 4f 64 5a 66 4c 6c 6a 72 78 44 33 43 38 69 37 30 5f 70 31 54 6e 49 67 73 4b 59 6f 69 6c 39 66 63 76 4b 6c 79 77 51 68 49 76 65 79 49 4d 6f 5f 74 41 30 66 6f 67 4a 68 57 59 5f 45 70 6a 50 6e 49 38 58 33 64 4b 4a 37 34 34 45 51 41 4a 6f 6a 5a 78 6b 46 Data Ascii: 62d{"ClickUrl":"https://engine.4dsply.com/clicktag.engine?MediaId=129331&PId=111992&SiteId=22696&rand=0.360972254239475&ZoneId=84396&v=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkF
2024-05-24 06:27:06 UTC	219	IN	Data Raw: 77 3d 22 2c 22 49 6d 61 67 65 46 69 6c 65 55 72 6c 22 3a 22 2f 2f 64 69 67 69 61 64 73 70 6c 79 2e 63 6f 6d 2f 6d 31 32 39 33 33 31 2e 6a 70 67 22 2c 22 49 63 6f 6e 46 69 6c 65 55 72 6c 22 3a 22 22 2c 22 43 61 6c 6c 54 6f 41 63 74 69 6f 6e 42 75 74 74 6f 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 61 6c 6c 54 6f 41 63 74 69 6f 6e 42 75 74 74 6f 6e 54 65 78 74 22 3a 6e 75 6c 6c 2c 22 48 65 61 64 65 72 54 65 78 74 22 3a 22 4e 6f 20 4f 6e 65 20 45 78 70 65 63 74 65 64 20 54 68 69 73 21 22 2c 22 54 69 74 6c 65 54 65 78 74 22 3a 22 45 6c 6f 6e 20 4d 75 73 6b 20 43 6f 6e 66 69 72 6d 73 20 55 6e 66 6f 72 74 75 6e 61 74 65 20 4e 65 77 73 22 7d 0d 0a Data Ascii: w=","ImageFileUrl":"//digiadsply.com/m129331.jpg","IconFileUrl":"","CallToActionButtonEnabled":true,"CallToActionButtonText":null,"HeaderText":"No One Expected This!","TitleText":"Elon Musk Confirms Unfortunate News"}
2024-05-24 06:27:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49922	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	779	OUT	GET /connectmyusers.php?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D HTTP/1.1 Host: cdn.connectad.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:06 UTC	354	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: max-age=3600 CF-Cache-Status: HIT Age: 2791 Last-Modified: Fri, 24 May 2024 05:40:35 GMT Server: cloudflare CF-RAY: 888b37cf082b43d6-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:06 UTC	1015	IN	Data Raw: 34 39 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 25 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 25 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 25 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 25 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 65 75 2e 63 6f 6e 6e 65 63 74 61 64 2e 69 6f 2f 73 79 6e 63 65 72 2f 31 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 5d 2c 65 3d 22 63 6f 6e 6e 65 63 74 61 64 73 79 6e 63 22 2c 6e 3d 31 30 30 30 2c 6f 3d 22 63 61 64 73 79 6e 63 22 2c 69 3d 5b 5d Data Ascii: 49b<html><body style="margin-left: 0%; margin-right: 0%; margin-top: 0%; margin-bottom: 0%"><script type="text/javascript">var ss=function(){var t=["https://sync-eu.connectad.io/syncer/1"+window.location.search],e="connectadsync",n=1000,o="cadsync",i=[]
2024-05-24 06:27:06 UTC	171	IN	Data Raw: 6f 77 5b 65 5d 26 26 77 69 6e 64 6f 77 5b 65 5d 28 29 7d 2c 77 61 69 74 46 6f 72 44 4f 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 3d 74 2e 74 61 72 67 65 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 73 73 28 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 77 61 69 74 46 6f 72 44 4f 4d 2c 21 31 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ow[e]&&window[e]()},waitForDOM=function(t){"interactive"===t.target.readyState&&ss()};document.addEventListener("readystatechange",waitForDOM,!1);</script></body></html>
2024-05-24 06:27:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49935	35.244.174.68	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	612	OUT	GET /712107.gif?partner_uid=o4n2DX9tTBrn& HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:06 UTC	270	IN	HTTP/1.1 451 Unavailable For Legal Reasons Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:27:06 GMT Content-Length: 44 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:06 UTC	44	IN	Data Raw: 6d 75 73 74 20 62 65 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 27 63 74 27 20 61 6e 64 20 27 63 76 27 20 70 61 72 61 6d 65 74 65 72 0a Data Ascii: must be exactly one 'ct' and 'cv' parameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49924	35.212.212.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	680	OUT	GET /sync?ssp=mgid HTTP/1.1 Host: rtb-usw.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532025; tuuid_lu=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9
2024-05-24 06:27:06 UTC	439	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 24 May 2024 06:27:06 GMT Location: //cm.mgid.com/m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 Set-Cookie: ssh=!mgid=1716532026; path=/; expires=Sat, 24-May-2025 06:27:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49919	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	865	OUT	GET /ps/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:06 UTC	657	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:06 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP007 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X content-length: 0 date: Fri, 24 May 2024 06:27:06 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49920	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	759	OUT	GET /usync/?pubId=7cd9d7c7c13ff36&sync_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:06 UTC	219	IN	HTTP/1.1 200 OK content-type: text/html cache-control: no-transform, no-cache content-length: 2162 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:06 UTC	1343	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 79 6e 63 20 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 76 61 72 20 73 79 6e 63 50 69 78 65 6c 73 20 3d 20 22 22 3b 0a 20 20 20 20 76 61 72 20 73 79 6e 63 49 66 72 61 6d 65 73 20 3d 20 22 22 3b 0a 0a 20 20 20 20 76 61 72 20 47 44 50 52 5f 41 50 50 4c 49 45 53 20 3d 20 22 67 64 70 72 3d 22 3b 0a 20 20 20 20 76 61 72 20 47 44 50 52 20 3d 20 22 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3b 0a 20 20 20 20 76 61 72 20 55 53 5f 50 52 49 56 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Sync Pixels</title></head><body><script> var syncPixels = ""; var syncIframes = ""; var GDPR_APPLIES = "gdpr="; var GDPR = "gdpr_consent="; var US_PRIV
2024-05-24 06:27:06 UTC	819	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 2e 72 65 70 6c 61 63 65 28 22 24 7b 55 53 5f 50 52 49 56 41 43 59 7d 22 2c 20 75 73 50 72 69 76 61 63 79 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 20 3d 20 75 72 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 79 6e 63 49 66 72 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 79 6e 63 46 20 3d 20 73 79 6e 63 49 66 72 61 6d 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 79 6e 63 46 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 79 6e 63 46 2e Data Ascii: ); url = url.replace("${US_PRIVACY}", usPrivacy); new Image().src = url; }); } } if (syncIframes) { var syncF = syncIframes.split(","); if (syncF != null) { syncF.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49926	185.89.210.141	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:06 UTC	619	OUT	GET /getuid?https://cm.mgid.com/m?cdsp=834104&c=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:06 UTC	1469	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D834104%26c%3D%24UID AN-X-Request-Uuid: 1b641489-c5ec-4d61-9b34-442c88d155de Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:06 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:06 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49931	63.33.74.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:07 UTC	734	OUT	GET /map/ct=y/c=3722/tp=ADSP/tpid=604bb3aba77046f19190d795b2aaca34 HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGPL3%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARq1E%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2ZIABRgaGWQuBNAAcEAJf"
2024-05-24 06:27:07 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:07 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.5.197 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:07 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49941	35.244.174.68	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:07 UTC	583	OUT	GET /712056.gif? HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:07 UTC	270	IN	HTTP/1.1 451 Unavailable For Legal Reasons Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:27:07 GMT Content-Length: 44 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:07 UTC	44	IN	Data Raw: 6d 75 73 74 20 62 65 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 27 63 74 27 20 61 6e 64 20 27 63 76 27 20 70 61 72 61 6d 65 74 65 72 0a Data Ascii: must be exactly one 'ct' and 'cv' parameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49936	8.2.110.134	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:07 UTC	681	OUT	GET /e4e1f5fe20753b6b614cda48b7e3c9f7.gif?redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D827026%26c%3D%5BUID%5D HTTP/1.1 Host: cs.krushmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:07 UTC	543	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:07 GMT Content-Length: 0 Connection: close Set-Cookie: krm_usr=6cc08fb7-b307-5fe5-8438-f3b954a6a4a3; path=/; domain=.krushmedia.com; expires=Fri, 07 Jun 2024 06:27:07 GMT;SameSite=None;Secure Set-Cookie: krm_r=574; path=/; domain=.krushmedia.com; expires=Fri, 07 Jun 2024 06:27:07 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://cm.mgid.com/m?cdsp=827026&c=6cc08fb7-b307-5fe5-8438-f3b954a6a4a3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49938	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:07 UTC	625	OUT	GET /cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:07 UTC	773	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:07 GMT vary: Accept-Encoding set-cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493;Path=/;Domain=.creativecdn.com;Expires=Sat, 24-May-2025 06:27:07 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1716532027;Path=/;Domain=.creativecdn.com;Expires=Sat, 24-May-2025 06:27:07 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 24 May 2024 06:27:07 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49940	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:07 UTC	691	OUT	GET /cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
2024-05-24 06:27:07 UTC	424	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:07 GMT vary: Accept-Encoding location: https://cm.mgid.com/m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 24 May 2024 06:27:07 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49942	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:07 UTC	961	OUT	GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
2024-05-24 06:27:08 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:08 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532028,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:08 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37d70b42c354-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49948	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	1028	OUT	GET /google?muidn=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&google_ula={guid},5&google_gid=CAESEGgG85p4mYXYSAnb9PGD50k&google_cver=1 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
2024-05-24 06:27:08 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:08 GMT Content-Type: text/plain Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37d89c0e7d0e-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49949	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	961	OUT	GET /m?cdsp=827026&c=6cc08fb7-b307-5fe5-8438-f3b954a6a4a3 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
2024-05-24 06:27:08 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:08 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:08 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37d8991732fa-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49943	185.89.210.141	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	836	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D834104%26c%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625
2024-05-24 06:27:08 UTC	1420	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://cm.mgid.com/m?cdsp=834104&c=4426393169609033625 AN-X-Request-Uuid: 048b00d2-7d0a-492b-bea3-09c0ee8730c9 Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:08 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:08 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:08 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49945	67.202.105.32	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	857	OUT	GET /deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:08 UTC	721	IN	HTTP/1.1 307 location: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=3nL6n2ZQMzyqTujYGQDkRw==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Fri, 24 May 2024 06:27:07 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49944	18.239.69.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	683	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:08 UTC	1033	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 06:27:08 GMT Set-Cookie: intentIQ=7c0kCriUA6; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:08 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9&ckls=true&ci=7c0kCriUA6&nc=false&trid=-1958837753 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:08 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 16397fa9e7894d6fa7dfb0bf81a0d05a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3snPFi9_UTostGRkldzHlgNrNE18ZLp4k_uQH5Kk-v7U74hmMacnTw==
2024-05-24 06:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49950	104.22.54.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	789	OUT	GET /syncer/1?us_privacy=&gdpr_consent=&cb=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D817115%26c%3D HTTP/1.1 Host: sync-eu.connectad.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cdn.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cadsync
2024-05-24 06:27:08 UTC	1158	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding set-cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; expires=Sun, 23 Jun 2024 16:27:08 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None set-cookie: id=eyJpdiI6IlIyK1FYcVgwL2xKUDZzVlR4REVzWUE9PSIsInZhbHVlIjoiWDlxMXBSeGNvY1JlN04rTCtFcWQ2WThPRjZGSVNCcHQ3VHJEWkZKQjlnL0ZaNUtvRVJuQkJ2cExIZXIrSTZ5NHk4Njc0Z0E1MHYvTGE1Wk9WbHA5UXRxcWxiK2dNSUlDTjRiSnhOYnZ6eGdaWnBSTnBpY2lpYnVYdHBRZ2E4aVkrQnA1NXRybFcwcUltczhpMXZ6U013PT0iLCJtYWMiOiJhZGU2NjZhMDRlODMwMTE5NjI0NjM3N2ZmNDU1NWFkNWMzZDBkYWVkZmY0YmJmOTM2ZmE4OGQ0MzE4M2I3MmYyIiwidGFnIjoiIn0%3D; expires=Sun, 23 Jun 2024 16:27:08 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private access-control-allow-origin: * access-control-allow-credentials: true p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37d8ae1fc427-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:08 UTC	211	IN	Data Raw: 31 30 64 65 0d 0a 3c 69 6e 73 20 69 64 3d 22 37 65 34 33 61 32 61 63 2d 33 64 31 64 2d 34 31 66 30 2d 61 37 38 35 2d 63 33 34 34 61 62 66 65 64 35 38 32 22 3e 3c 2f 69 6e 73 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 76 61 72 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 49 46 52 41 4d 45 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 20 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 70 72 65 62 69 64 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d Data Ascii: 10de<ins id="7e43a2ac-3d1d-41f0-a785-c344abfed582"></ins><script type="text/javascript"> (function(){ var i = document.createElement("IFRAME"); i.setAttribute("src", "https://ib.adnxs.com/prebid/setuid?bidder=
2024-05-24 06:27:08 UTC	1369	IN	Data Raw: 63 6f 6e 6e 65 63 74 61 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 66 3d 69 26 75 69 64 3d 37 65 34 33 61 32 61 63 2d 33 64 31 64 2d 34 31 66 30 2d 61 37 38 35 2d 63 33 34 34 61 62 66 65 64 35 38 32 22 29 3b 20 69 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 22 30 22 3b 20 69 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 22 30 22 3b 20 69 2e 6d 61 72 67 69 6e 57 69 64 74 68 20 3d 20 22 30 22 3b 20 69 2e 6d 61 72 67 69 6e 48 65 69 67 68 74 20 3d 20 22 30 22 3b 20 69 2e 62 6f 72 64 65 72 20 3d 20 22 30 70 78 22 3b 20 69 2e 68 73 70 61 63 65 20 3d 20 22 30 22 3b 20 69 2e 76 73 70 61 63 65 20 3d 20 22 30 22 3b 20 69 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 20 3d 20 22 30 22 3b 20 69 2e 73 63 72 6f 6c 6c 69 6e 67 20 3d 20 22 6e 6f 22 Data Ascii: connectad&gdpr=0&gdpr_consent=&f=i&uid=7e43a2ac-3d1d-41f0-a785-c344abfed582"); i.style.width = "0"; i.style.height = "0"; i.marginWidth = "0"; i.marginHeight = "0"; i.border = "0px"; i.hspace = "0"; i.vspace = "0"; i.style.border = "0"; i.scrolling = "no"
2024-05-24 06:27:08 UTC	1369	IN	Data Raw: 32 61 63 2d 33 64 31 64 2d 34 31 66 30 2d 61 37 38 35 2d 63 33 34 34 61 62 66 65 64 35 38 32 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 3b 20 7d 28 29 29 3b 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 76 61 72 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 49 46 52 41 4d 45 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 20 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 6d 67 69 64 2e 63 6f 6d 2f 6d 3f 63 64 73 70 3d 38 31 37 31 31 35 26 63 3d 37 65 34 33 61 32 61 63 2d 33 64 31 64 2d 34 31 66 30 2d 61 37 38 35 2d 63 33 34 34 61 62 66 65 64 35 38 32 22 29 3b 20 69 2e 73 74 Data Ascii: 2ac-3d1d-41f0-a785-c344abfed582").appendChild(i); }()); </script><script type="text/javascript"> (function(){ var i = document.createElement("IFRAME"); i.setAttribute("src", "https://cm.mgid.com/m?cdsp=817115&c=7e43a2ac-3d1d-41f0-a785-c344abfed582"); i.st
2024-05-24 06:27:08 UTC	1369	IN	Data Raw: 20 22 30 22 3b 20 69 2e 6d 61 72 67 69 6e 57 69 64 74 68 20 3d 20 22 30 22 3b 20 69 2e 6d 61 72 67 69 6e 48 65 69 67 68 74 20 3d 20 22 30 22 3b 20 69 2e 62 6f 72 64 65 72 20 3d 20 22 30 70 78 22 3b 20 69 2e 68 73 70 61 63 65 20 3d 20 22 30 22 3b 20 69 2e 76 73 70 61 63 65 20 3d 20 22 30 22 3b 20 69 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 20 3d 20 22 30 22 3b 20 69 2e 73 63 72 6f 6c 6c 69 6e 67 20 3d 20 22 6e 6f 22 3b 20 69 2e 66 72 61 6d 65 62 6f 72 64 65 72 20 3d 20 22 30 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 37 65 34 33 61 32 61 63 2d 33 64 31 64 2d 34 31 66 30 2d 61 37 38 35 2d 63 33 34 34 61 62 66 65 64 35 38 32 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 3b 20 7d 28 29 29 3b 20 3c 2f 73 63 72 69 70 Data Ascii: "0"; i.marginWidth = "0"; i.marginHeight = "0"; i.border = "0px"; i.hspace = "0"; i.vspace = "0"; i.style.border = "0"; i.scrolling = "no"; i.frameborder = "0"; document.getElementById("7e43a2ac-3d1d-41f0-a785-c344abfed582").appendChild(i); }()); </scrip
2024-05-24 06:27:08 UTC	8	IN	Data Raw: 63 72 69 70 74 3e 0d 0a Data Ascii: cript>
2024-05-24 06:27:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49946	34.255.174.236	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	663	OUT	GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D709070%26c%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:08 UTC	586	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 24 May 2024 06:27:08 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Location: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D709070%26c%3D%24UID&sovrn_retry=true Set-Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49951	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	666	OUT	GET /cchain/0?gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A//cm.mgid.com/m%3Fcdsp%3D779131%26c%3D HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:08 UTC	1023	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate content-length: 0 date: Fri, 24 May 2024 06:27:08 GMT location: https://id.a-mx.com/u?&gdpr=0&us_privacy=1---&cb=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F7%2F17902%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D0%26gpp_sid%3D%26us_privacy%3D%26A%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Damx_com%26cbx%3DaHR0cHM6Ly9jbS5tZ2lkLmNvbS9tP2Nkc3A9Nzc5MTMxJmM9%26uid%3D server: envoy vary: accept-encoding set-cookie: _sv3_14=1; path=/; domain=prebid.a-mo.net; expires=Sat, 25 May 2024 06:27:08 GMT; max-age=86400; secure; HttpOnly; SameSite=None set-cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; path=/; domain=a-mo.net; expires=Sat, 24 May 2025 06:27:08 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; path=/; domain=prebid.a-mo.net; expires=Sat, 24 May 2025 06:27:08 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49958	34.36.216.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	924	OUT	GET /dmp/pixelSync?nid=136&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:08 UTC	635	IN	HTTP/1.1 302 Found set-cookie: ssi=532c50a4-cd6b-40c9-b238-9f975626694b#1716532028798; Domain=.sitescout.com; Expires=Sat, 24-May-2025 06:27:08 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=136&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D%7BuserId%7D Content-Length: 0 date: Fri, 24 May 2024 06:27:07 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49960	34.98.64.218	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	878	OUT	GET /w/1.0/cm?id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:08 UTC	660	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; Version=1; Expires=Sat, 24-May-2025 06:27:08 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://u.openx.net/w/1.0/cm?cc=1&id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D Date: Fri, 24 May 2024 06:27:08 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49954	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	1014	OUT	GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
2024-05-24 06:27:08 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:08 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"501037":1716532028,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:08 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37dc297ec3ee-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49959	172.240.45.70	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	1667	OUT	POST /api/adserver/s2s?auc_id=244578ccbebd41e3744959cc05d9b210&wpm=&ssrtb=&pbjs=&tms=&AV_C_USER_ID=1716532025945-172031150014-000201-002-004790&AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=6532026389&wfc=1&tgt=0&&AV_VI=0&AV_VID=489.359375&d4=1&d5=3&AV_PLCMT=2&AV_PLACEMENT=3&AV_PLAYBACKMETHOD=6&AV_IRISID=&AV_IRISIDCTX=&ms2s=1 HT [TRUNCATED] Host: s2s.aniview.com Connection: keep-alive Content-Length: 354 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790
2024-05-24 06:27:08 UTC	354	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 74 69 74 6c 65 22 3a 22 42 75 79 20 50 61 74 72 69 6f 74 20 47 65 61 72 20 48 65 72 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 31 2e 61 76 70 6c 61 79 65 72 2e 63 6f 6d 2f 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 2f 76 69 64 65 6f 73 2f 36 35 Data Ascii: {"site":{"page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","domain":"pjnewsletter.com","content":{"title":"Buy Patriot Gear Here","url":"https://content1.avplayer.com/64db4ddc8904509d8303ce64/videos/65

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49953	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	742	OUT	GET /usync/?pubId=57e618150c70d90&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	219	IN	HTTP/1.1 200 OK content-type: text/html cache-control: no-transform, no-cache content-length: 2162 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:09 UTC	2162	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 79 6e 63 20 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 76 61 72 20 73 79 6e 63 50 69 78 65 6c 73 20 3d 20 22 22 3b 0a 20 20 20 20 76 61 72 20 73 79 6e 63 49 66 72 61 6d 65 73 20 3d 20 22 22 3b 0a 0a 20 20 20 20 76 61 72 20 47 44 50 52 5f 41 50 50 4c 49 45 53 20 3d 20 22 67 64 70 72 3d 22 3b 0a 20 20 20 20 76 61 72 20 47 44 50 52 20 3d 20 22 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3b 0a 20 20 20 20 76 61 72 20 55 53 5f 50 52 49 56 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Sync Pixels</title></head><body><script> var syncPixels = ""; var syncIframes = ""; var GDPR_APPLIES = "gdpr="; var GDPR = "gdpr_consent="; var US_PRIV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49965	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	961	OUT	GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
2024-05-24 06:27:09 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:08 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532028,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:08 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37dd1a0119db-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49966	188.114.97.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	697	OUT	GET /mgid?c=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy=&cd=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D556372%26c%3D%24%7BUSER%7D HTTP/1.1 Host: cm.rtbsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	1194	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 24 May 2024 06:27:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: ut-0=23fe11c4-ed15-5d1a-95bd-f620677ba1a0; Expires=Sat, 24-May-25 06:27:09 GMT; Domain=rtbsystem.com; Path=/; Secure; SameSite=None Set-Cookie: ut-28=7046260897954; Expires=Sat, 24-May-25 06:27:09 GMT; Domain=rtbsystem.com; Path=/; Secure; SameSite=None Set-Cookie: ut-15=F8725DF612BDF79EED7E33A607DA5D960C89E9D2EDA4C12BA828388C47E7F823; Expires=Sat, 24-May-25 06:27:09 GMT; Domain=rtbsystem.com; Path=/; Secure; SameSite=None Location: https://cm.mgid.com/m?cdsp=556372&c=23fe11c4-ed15-5d1a-95bd-f620677ba1a0 Strict-Transport-Security: max-age=15768000; includeSubdomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=36CKnYhrLfAENvBezCctwCex2ebTWz3YEJyCiagTZCu2TiKLB9Io%2FAcV5Bvh%2BUPQT81MZtyXFUSgGO8wEIcvg2dbfJmSJ9NZD2qYwZ0FnlafuZ0bUZu0MVivfbsFiGaq1N0R"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888b37dd09f542f1-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 b9 d6 8a 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49961	3.94.218.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	849	OUT	GET /redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D52%26key%3DBUYERUID HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	780	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:09 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://sync.adkernel.com/user-sync?zone=176971&t=image&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D27%26buyeruid%3D%7BUID%7D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEqlwFodHRwczovL3N5bmMuYW5pdmlldy5jb20vY29va2llc3luY2VuZHBvaW50P2F1aWQ9MTcxNjUzMjAyNTk0NS0xNzIwMzExNTAwMTQtMDAwMjAxLTAwMi0wMDQ3OTAmYmlkZGVybmFtZT01MiZrZXk9dWEtZDNhNWE1NjctODlkZC0zM2VkLWJlMjAtNDBjYmIzMDg3MDgxMgIbITgB set-cookie: zeta-ssp-user-id=ua-d3a5a567-89dd-33ed-be20-40cbb3087081; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:09 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49968	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	964	OUT	GET /m?cdsp=834104&c=4426393169609033625 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834124":1716532024}
2024-05-24 06:27:09 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:09 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:09 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37ddbadc0f95-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49973	104.18.140.15	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:08 UTC	633	OUT	GET /i.gif?muidf=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: cm.idealmedia.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	737	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 24 May 2024 06:27:09 GMT Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Location: https://cm.mgid.com/i.gif?muidf=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:09 GMT; domain=.idealmedia.io; path=/; secure; SameSite=None Set-Cookie: mg_sync={"433147":1716532029}; expires=Sun, 23 Jun 2024 06:27:09 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37dd9957438e-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49967	67.202.105.32	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	900	OUT	GET /deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 HTTP/1.1 Host: hde.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3nL6n2ZQMzyqTujYGQDkRw==
2024-05-24 06:27:09 UTC	1033	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1716532029111%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1716532029111%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1716532029111%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1716532029111%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1716532029111%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1716532029111%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1761 date: Fri, 24 May 2024 06:27:08 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-05-24 06:27:09 UTC	1761	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 5f 3d 31 37 31 36 35 33 32 30 32 39 31 31 31 2e 26 72 69 3d 30 30 31 33 33 30 30 30 30 31 68 53 50 68 68 41 41 47 26 67 64 70 72 5f 35 38 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 72 75 3d 68 74 74 70 73 25 33 41 2f 2f 63 6d 2e 6d 67 69 64 2e 63 6f 6d 2f 6d 25 33 46 63 64 73 70 25 33 44 37 39 36 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ssc-cms.33across.com/ps/?_=1716532029111.&ri=0013300001hSPhhAAG&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49962	37.252.171.53	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	1011	OUT	GET /getuid?https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D55%26key%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625
2024-05-24 06:27:09 UTC	1497	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.aniview.com/cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=55&key=4426393169609033625 AN-X-Request-Uuid: bb683492-c678-4c6c-acc2-ea3237e4dfc6 Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49964	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	886	OUT	GET /usersync2/rmpssp?sub=aniview&gdpr=0&gdpr_pd=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	968	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:09 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.29%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D%22%7D; path=/; expires=Sat, 24 May 2025 06:27:09 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmpssp?sub=aniview&zcc=1&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D&cb=1716532029220 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49963	116.202.167.133	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	919	OUT	GET /adxcm.aspx?ssp=B81743F7-B474-4C19-8479-8697021ABDD2&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D31%26key%3D%24%24visitor_cookie%24%24 HTTP/1.1 Host: inv-nets.admixer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	548	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:09 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Xss-Protection: 0 P3p: CP="NID DSP ALL COR" Location: https://sync.aniview.com/cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=31&key=c3f2dced77d84f53905889bf42173c38 Set-Cookie: am-uid=c3f2dced77d84f53905889bf42173c38; expires=Thu, 22 Aug 2024 06:27:09 GMT; domain=.admixer.net; secure; SameSite=None Keep-Alive: timeout=25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49971	34.255.174.236	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	725	OUT	GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D709070%26c%3D%24UID&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf
2024-05-24 06:27:09 UTC	517	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 24 May 2024 06:27:09 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Location: https://cm.mgid.com/m?cdsp=709070&c=ItUjALZH-23s9-wqRaSHYOyf Set-Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49972	108.128.49.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	708	OUT	GET /server_match?partner_id=1944&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%7BPUB_USER_ID%7D HTTP/1.1 Host: ad.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	683	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:09 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=f102e783-2700-4bb9-aa0d-8e4779f6d278; Expires=Thu, 22 Aug 2024 06:27:09 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1716532029; Expires=Thu, 22 Aug 2024 06:27:09 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://ad.360yield.com/ul_cb/server_match?partner_id=1944&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%7BPUB_USER_ID%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49975	79.127.227.46	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	845	OUT	GET /u?&gdpr=0&us_privacy=1---&cb=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F7%2F17902%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D0%26gpp_sid%3D%26us_privacy%3D%26A%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Damx_com%26cbx%3DaHR0cHM6Ly9jbS5tZ2lkLmNvbS9tP2Nkc3A9Nzc5MTMxJmM9%26uid%3D HTTP/1.1 Host: id.a-mx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	666	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:08 GMT location: https://prebid.a-mo.net/cchain/7/17902?gpp=&gdpr_consent=&gdpr=0&gpp_sid=&us_privacy=&A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=amx_com&cbx=aHR0cHM6Ly9jbS5tZ2lkLmNvbS9tP2Nkc3A9Nzc5MTMxJmM9&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 connection: close content-length: 0 set-cookie: amdt_t=p::1716532029513; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:09 GMT; Path=/; Domain=a-mx.com; Secure; HTTPOnly; SameSite=None set-cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:09 GMT; Path=/; Domain=a-mx.com; Secure; HTTPOnly; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49978	34.36.216.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	998	OUT	GET /dmp/pixelSync?cookieQ=1&nid=136&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=532c50a4-cd6b-40c9-b238-9f975626694b#1716532028798
2024-05-24 06:27:09 UTC	1233	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=532c50a4-cd6b-40c9-b238-9f975626694b#1716532028798; Domain=.sitescout.com; Expires=Sat, 24-May-2025 06:27:09 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIzOSI6MTcxNjUzMjAyOTQyMywiNyI6MTcxNjUzMjAyOTQyM30; Domain=.sitescout.com; Expires=Sun, 23-Jun-2024 06:27:09 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553%26partner_url%3Dhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fbiddername%253D215%2526auid%253D1716532025945-172031150014-000201-002-004790%2526gdpr%253D0%2526gdpr_consent%253D%2526ccpa%253D1---%2526key%253D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 Content-Length: 0 date: Fri, 24 May 2024 06:27:09 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49979	34.98.64.218	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	942	OUT	GET /w/1.0/cm?cc=1&id=ec4c2ec9-18b8-454e-98be-3ee1e6bfea65&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D23%26key%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028
2024-05-24 06:27:09 UTC	635	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; Version=1; Expires=Sat, 24-May-2025 06:27:09 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://sync.aniview.com/cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=23&key=99e92fd7-7df6-414d-ad83-81abe903bf95 Date: Fri, 24 May 2024 06:27:09 GMT Content-Type: text/html Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49974	18.239.69.109	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	774	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9&ckls=true&ci=7c0kCriUA6&nc=false&trid=-1958837753 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=7c0kCriUA6; IQver=1.9
2024-05-24 06:27:09 UTC	1468	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 06:27:09 GMT Set-Cookie: IQMID=137264047#1716532029761; Domain=.intentiq.com; Expires=Sun, 23 Jun 2024 06:27:09 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: IQPData=137264047#1716532029745#0#1716532029745; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:09 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:09 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1716532029753; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:09 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=7c0kCriUA6; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:09 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUzNThfMCZVRGZkU3Ex; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:09 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:09 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 6fe2d3277e4f5f1aafe45d46bdc36cf0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VLKHYKjvNams6hf8Fpn1dxz5iImzVEmPkM8D5fVHAfJE3ZLQdz00zw==
2024-05-24 06:27:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49976	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	548	OUT	GET /bounce HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	589	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:09 GMT vary: Accept-Encoding access-control-allow-origin: https://pjnewsletter.com vary: Origin access-control-allow-credentials: true p3p: CP="CAO PSA OUR" set-cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#1; Path=/; Domain=id5-sync.com; Expires=Thu, 22 Aug 2024 06:27:09 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT content-type: text/plain;charset=utf-8 transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:09 UTC	35	IN	Data Raw: 31 44 0d 0a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 7d 0d 0a Data Ascii: 1D{"bounce":{"setCookie":true}}
2024-05-24 06:27:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49977	162.19.138.120	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	555	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	378	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://pjnewsletter.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:09 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:09 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 66 6f 34 79 65 72 4e 69 76 45 76 68 68 78 79 73 75 65 66 78 4a 41 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"fo4yerNivEvhhxysuefxJA=="}
2024-05-24 06:27:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49980	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	802	OUT	GET /AdServer/ImgSync?p=161673&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:09 UTC	478	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: /AdServer/ImgSync?p=161673&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID&rdf=1 Set-Cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:08 GMT Content-Length: 269 Connection: close
2024-05-24 06:27:09 UTC	269	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 36 31 36 37 33 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 53 50 75 67 25 33 46 70 61 72 74 6e 65 72 49 44 25 33 44 31 36 31 36 37 33 25 32 36 70 6d 63 25 33 44 50 4d 5f 50 4d 43 25 32 36 70 72 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 63 6d 2e 6d 67 69 64 2e 63 6f 6d 25 32 35 32 46 6d 25 32 35 33 46 63 64 73 70 25 32 35 33 44 37 31 32 38 30 37 25 32 35 32 36 63 25 32 35 33 44 25 32 35 32 33 50 4d 55 49 44 26 61 6d 70 3b 72 64 66 3d 31 Data Ascii: <a href="/AdServer/ImgSync?p=161673&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID&rdf=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49987	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	986	OUT	GET /i.gif?muidf=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532028,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}
2024-05-24 06:27:09 UTC	869	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 24 May 2024 06:27:09 GMT Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Location: https://creativecdn.com/cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:09 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532028,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:09 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37e24e408c4d-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49989	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	1001	OUT	GET /m?cdsp=556372&c=23fe11c4-ed15-5d1a-95bd-f620677ba1a0 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:09 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:09 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"556372":1716532029,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:09 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37e2b8dd440d-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49981	37.252.173.215	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	962	OUT	GET /prebid/setuid?bidder=connectad&gdpr=0&gdpr_consent=&f=i&uid=7e43a2ac-3d1d-41f0-a785-c344abfed582 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625
2024-05-24 06:27:10 UTC	1841	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 960f40b5-a7bd-4673-a256-8c15d47252bc Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:10 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJWq_RLbP/X+GY1Qw3[OK_!<; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:10 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:10 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:10 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:10 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-24 06:27:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49991	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	848	OUT	GET /cookiesyncendpoint?biddername=9&key=73e2d52bb252aa355f5ddbe59e41688&gpp_sid=&gpp=&_fw_gdpr=0&_fw_gdpr_consent= HTTP/1.1 Host: sync.aniview.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790
2024-05-24 06:27:09 UTC	356	IN	HTTP/1.1 200 OK set-cookie: 1_C_9=73e2d52bb252aa355f5ddbe59e41688; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:09 GMT; Secure; SameSite=None set-cookie: 1_C_9=73e2d52bb252aa355f5ddbe59e41688; Path=/; Expires=Mon, 03 Jun 2024 06:27:09 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:09 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49983	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	766	OUT	GET /sync?ssp=rtaplus&user_id=7e43a2ac-3d1d-41f0-a785-c344abfed582&gdpr=0&us_privacy=1YNY HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	815	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=rtaplus&user_id=7e43a2ac-3d1d-41f0-a785-c344abfed582&gdpr=0&us_privacy=1YNY Set-Cookie: tuuid=a9b9419f-523a-42c9-8786-88279e65c003; path=/; expires=Sat, 24-May-2025 06:27:09 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716532029; path=/; expires=Sat, 24-May-2025 06:27:09 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716532029; path=/; expires=Sat, 24-May-2025 06:27:09 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716532029; path=/; expires=Sat, 24-May-2025 06:27:09 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49993	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	857	OUT	GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=31&key=c3f2dced77d84f53905889bf42173c38 HTTP/1.1 Host: sync.aniview.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790
2024-05-24 06:27:09 UTC	360	IN	HTTP/1.1 200 OK set-cookie: 1_C_31=c3f2dced77d84f53905889bf42173c38; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:09 GMT; Secure; SameSite=None set-cookie: 1_C_31=c3f2dced77d84f53905889bf42173c38; Path=/; Expires=Mon, 03 Jun 2024 06:27:09 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:09 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49994	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	844	OUT	GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=55&key=4426393169609033625 HTTP/1.1 Host: sync.aniview.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790
2024-05-24 06:27:10 UTC	334	IN	HTTP/1.1 200 OK set-cookie: 1_C_55=4426393169609033625; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:09 GMT; Secure; SameSite=None set-cookie: 1_C_55=4426393169609033625; Path=/; Expires=Mon, 03 Jun 2024 06:27:09 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:09 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49995	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	1108	OUT	GET /m?cdsp=817115&c=7e43a2ac-3d1d-41f0-a785-c344abfed582 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:10 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:10 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"817115":1716532030,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:10 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37e3dc7d43bf-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49996	34.98.64.218	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:09 UTC	936	OUT	GET /w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&us_privacy=1YNY&r=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fdataid%3Ddata5%26uuid%3D%7BOPENX_ID%7D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028
2024-05-24 06:27:10 UTC	622	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; Version=1; Expires=Sat, 24-May-2025 06:27:10 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1716532030\|vMgavPkWgyiK; Version=1; Expires=Sat, 08-Jun-2024 06:27:10 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Fri, 24 May 2024 06:27:10 GMT Content-Type: text/html Content-Length: 981 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:10 UTC	981	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 6f 6e 6e 65 63 74 61 64 2e 69 6f 2f 75 6d 61 74 63 68 2f 31 3f 64 61 74 61 69 64 3d 64 61 74 61 35 26 75 75 69 64 3d 66 63 62 35 33 38 62 32 2d 63 63 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://sync.connectad.io/umatch/1?dataid=data5&uuid=fcb538b2-cc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49997	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	861	OUT	GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=23&key=99e92fd7-7df6-414d-ad83-81abe903bf95 HTTP/1.1 Host: sync.aniview.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790
2024-05-24 06:27:10 UTC	368	IN	HTTP/1.1 200 OK set-cookie: 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:10 GMT; Secure; SameSite=None set-cookie: 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; Path=/; Expires=Mon, 03 Jun 2024 06:27:10 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:10 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49988	82.145.213.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	628	OUT	GET /pub/sync?pub6103523253312&gdpr=0&consent=&us_privacy= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	622	IN	HTTP/1.1 400 Bad Request Server: Tengine Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Set-Cookie: UID=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49985	77.245.57.72	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	1093	OUT	GET /user-sync?zone=176971&t=image&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D27%26buyeruid%3D%7BUID%7D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEqlwFodHRwczovL3N5bmMuYW5pdmlldy5jb20vY29va2llc3luY2VuZHBvaW50P2F1aWQ9MTcxNjUzMjAyNTk0NS0xNzIwMzExNTAwMTQtMDAwMjAxLTAwMi0wMDQ3OTAmYmlkZGVybmFtZT01MiZrZXk9dWEtZDNhNWE1NjctODlkZC0zM2VkLWJlMjAtNDBjYmIzMDg3MDgxMgIbITgB HTTP/1.1 Host: sync.adkernel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	1053	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close Location: //prebid.a-mo.net/cchain/0?&cb=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D176971%26dsp%3D343983%26t%3Dimage%26uid%3D Cache-Control: no-store Set-Cookie: SSPR_71=aHR0cHM6Ly9zc3AuZGlzcXVzLmNvbS9tYXRjaD9iaWRkZXI9MjcmYnV5ZXJ1aWQ9QTM5MzE1MjY0MDY4MTI1NTk3JnI9Q2lkMVlTMWtNMkUxWVRVMk55MDRPV1JrTFRNelpXUXRZbVV5TUMwME1HTmlZak13T0Rjd09ERXFsd0ZvZEhSd2N6b3ZMM041Ym1NdVlXNXBkbWxsZHk1amIyMHZZMjl2YTJsbGMzbHVZMlZ1WkhCdmFXNTBQMkYxYVdROU1UY3hOalV6TWpBeU5UazBOUzB4TnpJd016RXhOVEF3TVRRdE1EQXdNakF4TFRBd01pMHdNRFEzT1RBbVltbGtaR1Z5Ym1GdFpUMDFNaVpyWlhrOWRXRXRaRE5oTldFMU5qY3RPRGxrWkMwek0yVmtMV0psTWpBdE5EQmpZbUl6TURnM01EZ3hNZ0liSVRnQg==; Domain=.adkernel.com; Secure; SameSite=None Set-Cookie: SSPZ=176971; Domain=.adkernel.com; Secure; SameSite=None Set-Cookie: DSP2F_71=343983; Domain=.adkernel.com; Secure; SameSite=None Set-Cookie: ADKUID=A39315264068125597; Expires=Sun, 23 Jun 2024 06:27:10 GMT; Domain=.adkernel.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49998	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	989	OUT	GET /m?cdsp=709070&c=ItUjALZH-23s9-wqRaSHYOyf HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:10 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:10 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:10 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37e45a9143ab-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49986	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	644	OUT	GET /sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	800	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: tuuid=327352f8-d01a-4565-9f98-77efcc2259b7; path=/; expires=Sat, 24-May-2025 06:27:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716532030; path=/; expires=Sat, 24-May-2025 06:27:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716532030; path=/; expires=Sat, 24-May-2025 06:27:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716532030; path=/; expires=Sat, 24-May-2025 06:27:10 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49992	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	1168	OUT	GET /usersync2/rmpssp?sub=aniview&zcc=1&redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D&cb=1716532029220 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.29%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D%22%7D
2024-05-24 06:27:10 UTC	792	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:10 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.29%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D%22%7D; path=/; expires=Sat, 24 May 2025 06:27:10 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=6685445702 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50001	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	765	OUT	GET /cm-notify?pi=connectad HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
2024-05-24 06:27:10 UTC	424	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:10 GMT vary: Accept-Encoding location: https://sync.connectad.io/umatch/1?bidder=rtbhouse&dataid=data6&uuid=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=connectad cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 24 May 2024 06:27:10 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50004	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	896	OUT	GET /cchain/7/17902?gpp=&gdpr_consent=&gdpr=0&gpp_sid=&us_privacy=&A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=amx_com&cbx=aHR0cHM6Ly9jbS5tZ2lkLmNvbS9tP2Nkc3A9Nzc5MTMxJmM9&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:10 UTC	312	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate content-length: 0 date: Fri, 24 May 2024 06:27:10 GMT location: https://cm.mgid.com/m?cdsp=779131&c=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=0 server: envoy vary: accept-encoding x-envoy-upstream-service-time: 1 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49999	108.128.49.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	787	OUT	GET /ul_cb/server_match?partner_id=1944&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%7BPUB_USER_ID%7D HTTP/1.1 Host: ad.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f102e783-2700-4bb9-aa0d-8e4779f6d278; tuuid_lu=1716532029
2024-05-24 06:27:10 UTC	319	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://cm.mgid.com/m?cdsp=665953&c=f102e783-2700-4bb9-aa0d-8e4779f6d278

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50007	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	1201	OUT	GET /ps/?us_privacy=&ts=1716532029111.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:10 UTC	727	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:10 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP010 location: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D content-length: 0 date: Fri, 24 May 2024 06:27:09 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50006	52.17.205.185	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	847	OUT	GET /pixel?redir=https%3A%2F%2Fsync.connectad.io%2Fumatch%2F1%3Fbidder%3Dsovrn%26dataid%3Ddata12%26uuid%3D%24UID&us_privacy=1YNY HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf
2024-05-24 06:27:10 UTC	548	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Location: https://sync.connectad.io/umatch/1?bidder=sovrn&dataid=data12&uuid=ItUjALZH-23s9-wqRaSHYOyf Set-Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50011	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	918	OUT	GET /ps/?_=1716532029111.&ri=0013300001hSPhhAAG&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:10 UTC	585	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:10 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000A server: 33XP004 location: https://cm.mgid.com/m?cdsp=796887&c=212620189715653 content-length: 0 date: Fri, 24 May 2024 06:27:10 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50000	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	1530	OUT	GET /qmap?c=1389&tp=STSC&tpid=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553%26partner_url%3Dhttps%253A%252F%252Fsync.aniview.com%252Fcookiesyncendpoint%253Fbiddername%253D215%2526auid%253D1716532025945-172031150014-000201-002-004790%2526gdpr%253D0%2526gdpr_consent%253D%2526ccpa%253D1---%2526key%253D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGPL3%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARq1E%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2ZIABRgaGWQuBNAAcEAJf"
2024-05-24 06:27:10 UTC	633	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.28.30 Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50008	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	833	OUT	GET /AdServer/ImgSync?p=161673&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID&rdf=1 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES
2024-05-24 06:27:10 UTC	1115	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=N0Y1NDI3NDUtMkQ2MC00MUVCLTlBOTYtNTJCOTBDODJERjM0&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1717718400%3A220; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=161673^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=161673:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 169 Connection: close
2024-05-24 06:27:10 UTC	169	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 75 62 6d 61 74 69 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 4e 30 59 31 4e 44 49 33 4e 44 55 74 4d 6b 51 32 4d 43 30 30 4d 55 56 43 4c 54 6c 42 4f 54 59 74 4e 54 4a 43 4f 54 42 44 4f 44 4a 45 52 6a 4d 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=N0Y1NDI3NDUtMkQ2MC00MUVCLTlBOTYtNTJCOTBDODJERjM0&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50014	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	1015	OUT	GET /ps/?us_privacy=&ts=1716532029111.6&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:10 UTC	677	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:10 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP016 location: https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID content-length: 0 date: Fri, 24 May 2024 06:27:10 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50009	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	686	OUT	GET /cm-notify?pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
2024-05-24 06:27:10 UTC	419	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:10 GMT vary: Accept-Encoding location: https://cm.mgid.com/m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 24 May 2024 06:27:10 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50018	80.77.87.166	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	708	OUT	GET /e4e1f5fe20753b6b614cda48b7e3c9f7.gif?gdpr=0&gdpr_consent=&ccpa=&redir=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D675043%26c%3D%5BUID%5D HTTP/1.1 Host: cs.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	541	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close Set-Cookie: admtr=0ff1c4a5-e08d-421b-badf-e6142feb667b; path=/; domain=.admanmedia.com; expires=Fri, 07 Jun 2024 06:03:37 GMT;SameSite=None;Secure Set-Cookie: ac_r=CS77; path=/; domain=.admanmedia.com; expires=Fri, 07 Jun 2024 06:03:37 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://cm.mgid.com/m?cdsp=675043&c=0ff1c4a5-e08d-421b-badf-e6142feb667b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50013	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	662	OUT	POST /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 1142 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#1
2024-05-24 06:27:10 UTC	1142	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 30 36 63 66 35 33 65 39 2d 30 63 39 64 2d 34 35 30 66 2d 38 35 36 36 2d 36 65 30 31 36 36 63 61 34 36 33 61 22 2c 22 72 65 71 75 65 73 74 43 6f 75 6e 74 22 3a 31 2c 22 72 6f 6c 65 22 3a 22 6c 65 61 64 65 72 22 2c 22 63 61 63 68 65 49 64 22 3a 22 34 32 31 37 30 38 34 39 35 35 39 31 31 39 30 31 22 2c 22 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 73 6f 75 72 63 65 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 36 35 22 2c 22 70 61 72 74 6e 65 72 22 3a 32 33 31 2c 22 76 22 3a 22 31 2e 30 2e 36 35 22 2c 22 6f 22 3a 22 61 70 69 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 Data Ascii: {"requests":[{"requestId":"06cf53e9-0c9d-450f-8566-6e0166ca463a","requestCount":1,"role":"leader","cacheId":"4217084955911901","refresh":true,"sourceVersion":"1.0.65","partner":231,"v":"1.0.65","o":"api","tml":"https://pjnewsletter.com/jewish-americans-se
2024-05-24 06:27:10 UTC	581	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:10 GMT vary: Accept-Encoding p3p: CP="CAO PSA OUR" set-cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#2; Path=/; Domain=id5-sync.com; Expires=Thu, 22 Aug 2024 06:27:10 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://pjnewsletter.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:10 UTC	658	IN	Data Raw: 32 38 36 0d 0a 7b 22 67 65 6e 65 72 69 63 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 72 59 69 5a 51 70 75 4f 48 68 35 50 53 4b 6c 2d 65 34 6c 46 43 42 70 75 61 67 4e 46 2d 78 32 36 42 57 56 51 4a 37 65 5a 68 5f 50 64 65 78 67 70 76 46 2d 5f 42 6b 4e 7a 67 6d 55 36 4a 37 78 64 6f 5a 43 56 4e 64 49 43 47 73 57 71 77 76 51 49 52 58 64 51 7a 37 5f 2d 46 57 42 68 38 79 46 6a 35 46 4b 6d 49 79 63 6d 76 6e 45 55 76 69 2d 4a 4e 4e 35 57 6b 35 45 32 69 4d 71 45 74 30 4a 62 4c 64 6e 76 4d 73 6d 74 69 71 55 67 45 70 78 6a 4e 4d 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 34 54 30 36 3a 32 37 3a 30 39 2e 37 30 38 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 Data Ascii: 286{"generic":{"signature":"ID5_ArYiZQpuOHh5PSKl-e4lFCBpuagNF-x26BWVQJ7eZh_PdexgpvF-_BkNzgmU6J7xdoZCVNdICGsWqwvQIRXdQz7_-FWBh8yFj5FKmIycmvnEUvi-JNN5Wk5E2iMqEt0JbLdnvMsmtiqUgEpxjNM","created_at":"2024-05-24T06:27:09.708Z","id5_consent":true,"original_uid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50016	76.223.111.18	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	809	OUT	GET /getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	729	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3671706280332458943464; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 06:27:10 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3671706280332458943464; Max-Age=7776000; Expires=Thu, 22 Aug 2024 06:27:10 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50015	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	722	OUT	GET /ups/58350/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	553	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58350/sync?redir=true&verify=true Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBD4zUGYCELJAFvC_17AscA26pytyXQoFEgEBAQGEUWZaZtwr0iMA_eMAAA&S=AQAAAr0R_l4KJV9yn-8d-jhudxw; Expires=Sat, 24 May 2025 12:27:10 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50022	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	1212	OUT	GET /umatch/1?bidder=rtbhouse&dataid=data6&uuid=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=connectad HTTP/1.1 Host: sync.connectad.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlIyK1FYcVgwL2xKUDZzVlR4REVzWUE9PSIsInZhbHVlIjoiWDlxMXBSeGNvY1JlN04rTCtFcWQ2WThPRjZGSVNCcHQ3VHJEWkZKQjlnL0ZaNUtvRVJuQkJ2cExIZXIrSTZ5NHk4Njc0Z0E1MHYvTGE1Wk9WbHA5UXRxcWxiK2dNSUlDTjRiSnhOYnZ6eGdaWnBSTnBpY2lpYnVYdHBRZ2E4aVkrQnA1NXRybFcwcUltczhpMXZ6U013PT0iLCJtYWMiOiJhZGU2NjZhMDRlODMwMTE5NjI0NjM3N2ZmNDU1NWFkNWMzZDBkYWVkZmY0YmJmOTM2ZmE4OGQ0MzE4M2I3MmYyIiwidGFnIjoiIn0%3D
2024-05-24 06:27:10 UTC	889	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:10 GMT Connection: close set-cookie: id=eyJpdiI6Ik9QSkZySnMzTzBlT2lLb1k2VUlyUkE9PSIsInZhbHVlIjoibFhxUzQ5OW05MUN2akN4NmhYK0hSMFpnTko0REVXK2l1NUNWTlZNdk9kcUZZd1hUY0Vva1NFUzN2emVERmFubG1EanNEM3pNQVpLaG5CZHREbHRWWHJFNGlUeTFGMFpmR2hWanExeUdtL3cvK3dmUXlGWEt2VWRINUdDeFZrdU9nQVNWTVhON0Z3eU9GY3dHS3Nod1grQVIwblVpN0pEWW9uYy96WnphTzdleG5aY3ZnS1hEK2RhS3I2MzlvR0pucHVzTGZiSnU2ZmtWNld4Y1NzVzZuUlpyL2dxVkRQV1hlazNYb0JjMnhaVT0iLCJtYWMiOiJhNTcwZWE1OGIxOTg0MjIzMmI2NWQyOWZmNDk1OTQ1ODc1MDk1YTcyZTgzYmJiMDVlNWI2NDg3NTIzMTllNDNiIiwidGFnIjoiIn0%3D; expires=Sun, 23 Jun 2024 16:27:10 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37e809420f97-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50010	54.171.20.81	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	809	OUT	GET /match?external_user_id=o4n2DX9tTBrn&publisher_dsp_id=490&dsp_callback=1&&gdpr=0&gdpr-consent=&r=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D665953%26c%3D%834124%7D HTTP/1.1 Host: match.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f102e783-2700-4bb9-aa0d-8e4779f6d278; tuuid_lu=1716532029
2024-05-24 06:27:10 UTC	580	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: um=!490,tXuZIVw39tcQO1WZwtciZFqjqyfcA8Dgckg,1724308030; Expires=Thu, 22 Aug 2024 06:27:10 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!490,0,1778740030,-1; Expires=Thu, 22 Aug 2024 06:27:10 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://cm.mgid.com/m?cdsp=665953&c=4124}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50024	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	660	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	783	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close x-amz-rid: M149F49R4RH2Z3569D0R Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50012	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	859	OUT	GET /ul_cb/sync?ssp=rtaplus&user_id=7e43a2ac-3d1d-41f0-a785-c344abfed582&gdpr=0&us_privacy=1YNY HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=a9b9419f-523a-42c9-8786-88279e65c003; c=1716532029; tuuid_lu=1716532029
2024-05-24 06:27:10 UTC	675	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=rtaplus&bsw_param=a9b9419f-523a-42c9-8786-88279e65c003&google_hm=YTliOTQxOWYtNTIzYS00MmM5LTg3ODYtODgyNzllNjVjMDAz&gdpr_consent=&gdpr=0 Set-Cookie: tuuid=a9b9419f-523a-42c9-8786-88279e65c003; path=/; expires=Sat, 24-May-2025 06:27:10 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716532030; path=/; expires=Sat, 24-May-2025 06:27:10 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50023	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	635	OUT	GET /track/cmf/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:10 UTC	500	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:10 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0 set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI6sie5Kjx_TwQBTgB; expires=Sat, 24 May 2025 06:27:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:10 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 6f 70 65 6e 78 3f 6f 78 69 64 3d 63 35 36 62 62 37 37 64 2d 37 35 63 37 2d 37 35 35 31 2d 66 38 65 30 2d 33 34 62 36 36 64 35 35 39 36 61 37 26 67 64 70 72 3d 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 6f 70 65 6e 78 3f 6f 78 69 64 3d 63 35 36 62 62 37 37 64 2d 37 35 63 37 2d 37 35 35 31 2d 66 38 65 30 2d 33 34 62 36 36 64 35 35 39 36 61 37 26 67 64 70 72 3d 30 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0">https://match.adsrvr.org/track/cmb/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50019	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	721	OUT	GET /sync?ssp=the33across&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:11 UTC	763	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=the33across&us_privacy= Set-Cookie: tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; path=/; expires=Sat, 24-May-2025 06:27:11 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716532031; path=/; expires=Sat, 24-May-2025 06:27:11 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716532031; path=/; expires=Sat, 24-May-2025 06:27:11 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716532031; path=/; expires=Sat, 24-May-2025 06:27:11 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50029	109.206.161.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:10 UTC	667	OUT	GET /34b9aae5baa016b251b9fc488f4a97cd.gif?puid=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&ccpa_consent= HTTP/1.1 Host: sync.e-volution.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:11 UTC	586	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:11 GMT Content-Length: 0 Connection: close Set-Cookie: v_usr=dea6b5ce-8eb0-4fbd-a447-2f5d230e440b; path=/; domain=.e-volution.ai; expires=Fri, 07 Jun 2024 06:27:11 GMT;SameSite=None;Secure Set-Cookie: v_red=4; path=/; domain=.e-volution.ai; expires=Fri, 07 Jun 2024 06:27:11 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://srv.aso1.net/sync?p=evol&redir=https%3A%2F%2Fsync.e-volution.ai%2F40425ffe10103241a433b21c10aa797b.gif?puid={uid}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50031	147.75.84.158	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	890	OUT	GET /cchain/0?&cb=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D176971%26dsp%3D343983%26t%3Dimage%26uid%3D HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:11 UTC	278	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2079 content-type: text/html; charset=utf-8 date: Fri, 24 May 2024 06:27:10 GMT server: envoy vary: accept-encoding, Accept-Encoding x-envoy-upstream-service-time: 1 connection: close
2024-05-24 06:27:11 UTC	2079	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 62 66 66 64 36 39 66 33 2d 66 32 34 64 2d 34 39 63 37 2d 38 61 66 66 2d 62 33 30 62 62 31 65 34 66 35 35 39 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50034	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1178	OUT	GET /umatch/1?bidder=sovrn&dataid=data12&uuid=ItUjALZH-23s9-wqRaSHYOyf HTTP/1.1 Host: sync.connectad.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlIyK1FYcVgwL2xKUDZzVlR4REVzWUE9PSIsInZhbHVlIjoiWDlxMXBSeGNvY1JlN04rTCtFcWQ2WThPRjZGSVNCcHQ3VHJEWkZKQjlnL0ZaNUtvRVJuQkJ2cExIZXIrSTZ5NHk4Njc0Z0E1MHYvTGE1Wk9WbHA5UXRxcWxiK2dNSUlDTjRiSnhOYnZ6eGdaWnBSTnBpY2lpYnVYdHBRZ2E4aVkrQnA1NXRybFcwcUltczhpMXZ6U013PT0iLCJtYWMiOiJhZGU2NjZhMDRlODMwMTE5NjI0NjM3N2ZmNDU1NWFkNWMzZDBkYWVkZmY0YmJmOTM2ZmE4OGQ0MzE4M2I3MmYyIiwidGFnIjoiIn0%3D
2024-05-24 06:27:11 UTC	859	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:11 GMT Connection: close set-cookie: id=eyJpdiI6Ikl3TzUyZUlYTmxTakNLcSt6UWFVMHc9PSIsInZhbHVlIjoiTUZUd1Q3VGlLYWJPNkYxUU8wUmNwditXME1HV1haWURWNDZxTjJsS0VEYm84VG9GdEt6cXppSUwxQWpmMmN3ZTdBZ08rN0kyMmI2U2ovUHVkTytaRDlQb1N1K0RQYmZZZ2hRZVEwRGI4bWN5c3dkZkRSdXVoV1ZPamtvUGx6UXhMdytETnh5VTlhL3IvNnY3WDU2QlFRMmxuSi9oV05DMDVFYVVGRGhjdS9NZkJHS2lyT2Z0czdYQXFFUXRtcnpKU2J6YmxjN0piS2NsazJmWFZabEpCQT09IiwibWFjIjoiNGNmNTFiZTlkYWI0YWRhZWJjZmVlMTY5NjI5MmZjNWM2M2FmYTcwNjQzYWIzYjM1YzZmZjRjMmU2ZDEzZWE0MCIsInRhZyI6IiJ9; expires=Sun, 23 Jun 2024 16:27:11 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eabdff8cb4-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50035	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1021	OUT	GET /m?cdsp=665953&c=f102e783-2700-4bb9-aa0d-8e4779f6d278 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"665953":1716532031,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eacd177293-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50037	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1114	OUT	GET /m?cdsp=796887&c=212620189715653 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"796887":1716532031,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eaffd517bd-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50036	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1028	OUT	GET /m?cdsp=779131&c=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=0 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"779131":1716532031,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eaf984433e-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50021	54.195.158.29	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	628	OUT	GET /sync/openx/51acd139-e56b-e718-c937-224392025bee?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:11 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50030	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	737	OUT	GET /ul_cb/sync?dsp_id=303&user_id=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=327352f8-d01a-4565-9f98-77efcc2259b7; c=1716532030; tuuid_lu=1716532030
2024-05-24 06:27:11 UTC	582	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //contextual.media.net/cksync.php?cs=1&type=bs&ovsid=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd= Set-Cookie: tuuid=327352f8-d01a-4565-9f98-77efcc2259b7; path=/; expires=Sat, 24-May-2025 06:27:11 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716532031; path=/; expires=Sat, 24-May-2025 06:27:11 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50028	52.57.150.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	628	OUT	GET /match?bid=dn2m51u&uid=o4n2DX9tTBrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:11 UTC	731	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=18fa9482f7f-2a630000010f544c; Domain=eyeota.net; Path=/; Expires=Sat, 24 May 2025 06:27:11 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:11 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /match/bounce/?bid=dn2m51u&uid=o4n2DX9tTBrn&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 24 May 2024 06:27:11 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50041	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	850	OUT	GET /g/19574287/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwczovL2ltZ2hvc3RzLmNvbS90LzIwMjQtMDUvODI1Mjk4LzBlMzNmNTcyZjI2NzU3MWQ3ZWVhNjJkMjhlYzlkYmZiLnBuZw.webp?v=1716532022-QkteOGqeVaRcUJ02RxM5pJXViDpBNmbZFN-ozX0Ytaw HTTP/1.1 Host: s-img.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:11 UTC	535	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/webp Content-Length: 27036 Connection: close X-Mg-Request-UUID: f92e0b1f-ffe1-4184-bbb7-bab8020e9670 Access-Control-Allow-Origin: * Last-Modified: Thu, 23 May 2024 06:13:32 GMT Cache-Control: immutable, max-age=31536000 CF-Cache-Status: HIT Age: 86061 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Robots-Tag: noindex Server: cloudflare CF-RAY: 888b37eb2e5f0f98-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	834	IN	Data Raw: 52 49 46 46 94 69 00 00 57 45 42 50 56 50 38 20 88 69 00 00 d0 56 01 9d 01 2a ec 01 15 01 3e 91 38 97 48 25 a3 22 23 ad 78 0d b0 b0 12 09 62 6d eb c8 93 4a e4 ec 06 90 5c ae f3 fa e3 e9 37 d2 f3 cc e4 3f 0e 7e 5b e5 1f 6c 9e 0b 77 07 9d 47 54 f9 cd ff 9f ff 2f db d7 f7 2f 51 9f 1e 2f 5f 9f bb be a6 ff 65 7f 62 bd d8 7f ef fe e4 7b e1 fe b3 ea 1b fd 0b fc ff 5c 47 f8 ff 52 0e 98 ef ed 1f f6 fd 2b bf ff e6 bd 7a 46 f2 e3 f4 df 95 1e 75 f9 4b f7 17 ef 7f e6 bf e2 7a fe e6 2f ae 5f a9 bf 66 7d ce fe 7b f8 43 f6 5f e1 ff 77 bf 34 3e ec 7f 5d ff 83 fd 27 90 7f 30 7f d8 f5 11 f6 b7 fb bf 18 dd c0 9b ef fb bf 40 ef 7b fe d9 ff 5b fc c7 a9 57 d3 ff d2 ff 49 ea af eb 3f e5 7f ec 7b 80 ff 34 fe bb ff 37 d6 ef fa 9e 24 bf 74 ff a3 fb 59 f0 0b fd 03 fb ff fe 4f f2 fe Data Ascii: RIFFiWEBPVP8 iV*>8H%"#xbmJ\7?~[lwGT//Q/_eb{\GR+zFuKz/_f}{C_w4>]'0@{[WI?{47$tYO
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: cc de ed ca fc e1 84 a5 88 1b ba ae 5e 2a 44 e7 93 70 80 fb f1 d0 83 4e d5 34 45 0a ee 4b ba 08 28 22 b8 55 8e 69 75 5f 8a 20 6e c2 31 02 40 6f 31 eb 79 61 d2 81 95 2c 67 19 f1 d9 03 7d 20 6f bf 26 1e a6 71 ad 13 fe fa 42 51 86 b8 6b 73 97 03 ca 7e 93 be ad 90 29 e6 0d 9a 6d 68 fc b9 20 41 81 5a aa 34 5c 84 b7 0f 80 1d 88 82 a1 6b 8e 04 6e 23 02 aa 58 4e 9c 26 c0 e0 eb 3f 58 7b c1 8a e1 3c e5 57 ec d2 12 1b 9d a1 21 48 72 80 14 9a a7 a7 f7 13 87 02 be 1b ce ac c3 d5 26 ce bb 86 61 14 84 43 d4 3a 02 d0 62 4d a2 dd e3 ed 39 2a 36 f2 47 cc 1c 4d ae 1d 0d 5c 7b 02 7c 78 b9 87 3a 74 51 5c 45 1f c1 fa e8 52 58 0e 51 e5 bc d5 9e 14 fd 14 8c 25 e5 41 c6 27 95 bb a6 fa f0 0b 67 6e c7 b1 87 51 6a 31 73 a3 d4 20 db 39 80 60 eb b3 7b 0a 72 a4 11 52 98 71 87 b3 5d ef Data Ascii: ^DpN4EK("Uiu_ n1@o1ya,g} o&qBQks~)mh AZ4\kn#XN&?X{<W!Hr&aC:bM96GM\{\|x:tQ\ERXQ%A'gnQj1s 9`{rRq]
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 91 e8 fa 38 96 87 82 9f 7b 06 c5 1b ce a8 ab 72 fa ea 26 99 a4 9e 1e 49 41 66 eb ec d6 79 53 c4 1e d7 17 d3 2e 84 a9 a8 75 b3 6c 21 0f 04 b3 1e 70 59 b2 37 2b 5b 0f e1 46 34 0b 3c 52 a5 66 fd b9 ff 68 a3 1e cd 0e 8b ff dd bd 7f 8a 03 1b a0 b3 eb f9 be fd f5 c4 f3 06 f4 6b dd 97 e1 f0 e8 bc db 60 aa 8d bd ea db fa 71 46 eb 90 38 09 2b 1a 97 e1 91 6f a9 85 d3 62 7b e2 b4 38 7f 0f 34 5b 16 6d 4f 43 a8 d4 eb af 1c ac f2 eb 72 0c de ba fa a4 ab 02 ba 3a 25 85 45 03 6c 23 91 db 02 30 8a 3e ac 41 45 47 70 75 fe ae 6e 16 dd f3 ed 4a c2 02 ea 58 b3 e1 a8 df 23 02 d3 9b 76 23 cf e7 86 ec 7d 86 70 0d a5 c6 be a1 31 3d 0b 57 61 3a b7 97 dc 72 b0 a0 0e 6a 86 12 c7 b4 5e 84 13 bd d3 e6 1f 39 f0 83 ad 10 00 3a cf e9 9a b5 72 af be ac 63 03 93 f8 08 31 35 32 a1 a9 ff 3a Data Ascii: 8{r&IAfyS.ul!pY7+[F4<Rfhk`qF8+ob{84[mOCr:%El#0>AEGpunJX#v#}p1=Wa:rj^9:rc152:
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 21 dc 81 64 eb a0 e0 f8 d1 78 b1 fc af aa 0f 4d f5 dc c0 3e 8c 2e d9 5e 4d 7b 87 3b a0 63 ce e3 26 05 2b a2 c2 0b 64 cd a5 08 54 93 31 17 c1 33 9c 77 0c c8 9e e5 33 c0 97 c9 d8 70 9f 87 92 3f 03 73 72 fc b4 58 ab d0 59 65 60 ee 38 7f f1 b0 19 65 94 b0 d5 d2 08 82 e4 07 01 47 83 76 57 ff 7e 59 14 73 64 6e 04 7e 18 70 dd 89 c8 98 f2 34 cb 6e 0f 64 c5 ec c1 f6 ad 5c 76 5b 1e 09 eb 45 8b 7b 93 7f 1d 23 e4 e2 db fd c0 88 17 d2 6b b6 97 94 ed fc c8 70 46 25 2d be 45 4d 1d 5b 14 c0 39 58 47 b3 e1 4b ee ae b9 98 ba 98 ed 12 85 c6 76 06 b1 98 0a 46 30 26 80 8f c2 f1 78 36 e1 a6 3a a8 cd 8f d1 c7 7f cd c3 80 f7 17 13 29 51 2c 1b 76 36 1f 15 0d e7 33 ff 46 32 f4 90 b0 ad 0e 1d 8d 8c 90 3f b4 7c 20 66 f7 3b 99 7a bb 53 7e 4d 41 7f 26 de ce 90 79 95 66 fe 42 38 11 47 Data Ascii: !dxM>.^M{;c&+dT13w3p?srXYe`8eGvW~Ysdn~p4nd\v[E{#kpF%-EM[9XGKvF0&x6:)Q,v63F2?\| f;zS~MA&yfB8G
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 28 52 8f 11 df d2 50 a2 84 4f d4 fa 2d 3a b2 46 ff 1d 72 c8 eb fa 01 df 6d 8f a7 d9 b2 f4 11 66 53 cc 4b 24 07 95 45 fe 77 d7 43 8e 27 f4 8e 3f e6 95 c4 f6 28 14 7f da 8e 11 65 86 b5 d5 91 d2 69 eb 33 87 66 92 ba fa 14 76 f9 67 1e f7 4c c8 fa 73 43 4a dc c8 45 35 f9 97 15 aa 4d 7a 43 8d 74 44 be be 82 ec 9d 95 7c 8f 36 8e 56 1a 2a b3 c6 ec 33 43 15 4e 22 0d cb 4f bc b8 8f 05 8f 76 91 9d 5c cf dd dd 6f 28 4d cf 6f d7 f1 d1 1b fa ef 41 51 7b 9c 42 f4 8f f3 59 9c 3f 7f 09 27 25 3b dc 8d f4 f9 66 5e 2e 33 20 15 f6 e4 bf fe 1e 6a f9 8c 7b 9c b1 66 33 17 ce ad 0a f2 7b 0b 7a 8b 19 27 cb 12 a1 d5 95 02 59 cb 19 24 a4 0e 91 43 9a 2b 55 8c c8 0d f2 cb cf 14 e2 15 9e f5 b2 cf 86 b3 1f 86 49 c1 e1 f7 13 22 14 e6 ef 0b 4c b2 66 1c de 55 02 b5 ab 88 f8 aa 1b 91 fd 0c Data Ascii: (RPO-:FrmfSK$EwC'?(ei3fvgLsCJE5MzCtD\|6V*3CN"Ov\o(MoAQ{BY?'%;f^.3 j{f3{z'Y$C+UI"LfU
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 96 09 e8 17 68 0e 29 e0 c8 fb fa f2 57 5c 7f b3 51 04 a0 e5 3b 64 03 73 db 3e 60 81 c5 f0 cd ab 42 c0 9a eb 74 8c 85 bb 5a f1 2b c6 f8 4f fa bd c7 6a a1 a4 ed 72 cf 17 84 f4 2e 43 d8 e6 81 02 a5 79 46 7c 38 2e 76 4a 46 1c 8f 58 11 3a e1 cc 52 22 b7 dd 24 c6 53 cd 01 f1 fb 7f 85 63 62 ec 41 c5 1c c1 6b 4b e3 45 04 58 bd 7c 71 66 81 dd c2 e2 48 4b 04 43 2e 95 e1 66 0d 11 80 d2 5e 10 32 7b 83 29 26 80 a5 00 ad b6 4f 8f c0 92 58 49 fd 96 56 25 a7 80 4f 29 f7 bb 1a f4 02 9b 8b 73 c2 58 17 2e de 74 1e 58 b7 b9 26 ab ee 35 28 dd cf 33 89 47 ce 3c 27 8b 00 a7 ea 18 e6 e8 52 10 e9 70 f8 6b e2 49 7d 87 db 75 b4 25 5b f5 ea 1e ec 9f 67 af 47 12 a7 44 a8 5a 3a 20 ef c1 d3 83 a1 90 f0 a0 ae 1c e8 7c 97 9b 3b f8 9e 4a 2f 03 5c e6 52 67 dc 95 ee 1b 5c e3 b7 b0 0d c4 6f Data Ascii: h)W\Q;ds>`BtZ+Ojr.CyF\|8.vJFX:R"$ScbAkKEX\|qfHKC.f^2{)&OXIV%O)sX.tX&5(3G<'RpkI}u%[gGDZ: \|;J/\Rg\o
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: b0 45 d3 27 0f 3d fe f0 27 1a 0c 57 7f c7 4a 97 87 e1 e2 06 24 d4 42 4e fb 38 c6 b3 b6 a1 fe 77 aa a8 87 e1 7b bb d7 c0 ca 4c 82 ed 17 b5 cc c0 99 3b 60 93 96 d9 38 fa fa 2f 62 0f df 3c 6f f2 dc 2b 83 3b dc 73 0a ea 13 ce ac 2d a5 26 89 89 2e ae 71 07 63 f9 8b 92 13 99 cc b5 73 24 73 db 06 bf d8 77 b0 15 a3 96 4c 66 2e e8 3a 51 6d 78 db 58 1c f1 82 b8 d5 09 95 80 5e c3 3e c9 da 43 43 0a 87 5b 1d 24 89 d8 b1 a0 23 92 87 43 e9 c8 f8 84 84 97 24 1c 6d a6 ab 08 c6 f8 8b e8 ca 3e ec 09 40 ad 78 85 d6 fb ae 47 cf e8 d5 96 2c 2f c4 8c b1 8a da 01 fa 01 d4 af 4e fb be 0b 37 fa 1c fb 58 e3 7e 88 4e ef f7 b6 9f 11 70 4d 31 72 d7 ef 96 a3 1c 6b d6 e9 c6 e9 b9 0d 02 4b 74 93 ce e8 3e 30 97 57 92 ed a1 8f ef 1c 29 d9 24 d3 8a 98 35 46 c0 b6 cd 0a dc 77 38 28 dd 49 44 Data Ascii: E'='WJ$BN8w{L;`8/b<o+;s-&.qcs$swLf.:QmxX^>CC[$#C$m>@xG,/N7X~NpM1rkKt>0W)$5Fw8(ID
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: a0 f6 82 45 cd ac 9f c5 54 48 da c8 74 21 91 77 c9 71 50 8a 52 38 fd 97 1a 52 cd 9a c2 5e 57 9e fd 8a 44 39 3e eb 70 3c d3 31 dc f5 1d f3 cc d0 22 ce 9e 31 a8 c0 b5 17 6f 20 72 29 40 9b c5 97 13 8a e2 92 ab 54 4a 28 e2 ec f5 06 09 fe e2 a3 44 77 24 19 d1 bc 9d dd f8 b8 f4 1e 17 f4 72 6a e0 62 c8 6c 52 09 c9 a1 b1 45 65 9d 52 d2 2a 41 0a 4d ee 1c 75 ef bd bb f7 b9 50 24 d8 e7 28 da 15 c9 42 ce 23 c1 5c 32 62 4b 17 b4 94 63 14 83 21 71 e0 28 ec 4b 88 68 52 7f 12 79 b4 fd 5a ef 69 2a 63 81 a0 d9 ed f5 dd 28 91 9f 51 50 73 cb 8b 05 51 49 8f 19 a8 49 99 0b 5f ae dd 6f d2 a2 a9 b5 06 99 79 4e b6 30 44 9c f1 d6 de 54 a3 84 36 a2 4a ed d3 c8 bf bf b7 d1 14 a7 00 59 52 09 7a eb d9 63 b3 77 c0 80 e8 9a c1 c0 f5 60 84 eb 50 2d a0 25 97 54 2e f6 ae 13 a3 92 cf 3c f1 Data Ascii: ETHt!wqPR8R^WD9>p<1"1o r)@TJ(Dw$rjblREeRAMuP$(B#\2bKc!q(KhRyZic(QPsQII_oyN0DT6JYRzcw`P-%T.<
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 91 7b 80 62 de 88 4e 24 8d af 56 69 f3 ab cd ce 69 19 07 00 1a b8 79 37 9c b5 3a b9 ec 63 2b 82 3d 22 63 76 43 98 60 fa 2c b7 a3 8a a3 8c bf 9d 4d 6d d1 a9 5f 25 f1 f3 26 e1 c7 e4 8d f8 95 08 52 5e 0b 42 d2 88 ee 41 e2 02 c1 ae 8c 8e 66 75 f1 09 cd b9 f9 74 23 06 a7 22 7b 3b 5f 90 b6 de 81 9a bc c9 8f 19 f7 1a fa 56 65 64 2b 93 8f 13 24 64 99 04 dc 39 5a eb 0f e5 f1 2f bc 9a 3b 23 bf d5 84 0f 58 bc b2 73 5f e3 e3 60 14 18 e2 51 55 4c ba a6 b6 68 3b 49 1a e5 0e 77 91 47 5f cc a2 8f 8c 70 38 b7 67 fe 46 43 29 d5 79 93 0b eb 5e bf 13 de 2b 11 a0 77 73 ea df 27 12 37 45 92 68 a5 89 0b 4f 9f 3a e1 e5 09 02 85 31 99 ba 81 6b 1c 76 e6 49 3b 3c 4e 69 57 98 ce 7c c1 99 0b 98 20 2a 6d 13 8c 58 63 04 f8 ec d9 7b cf f2 fc 46 85 71 16 2c 6f 4c 18 67 1a aa bd 30 73 93 Data Ascii: {bN$Viiy7:c+="cvC`,Mm_%&R^BAfut#"{;_Ved+$d9Z/;#Xs_`QULh;IwG_p8gFC)y^+ws'7EhO:1kvI;<NiW\| *mXc{Fq,oLg0s
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: bd eb ed 08 11 c8 e3 ba f5 98 92 8e 47 c7 98 a4 81 f5 ad 5c 6e 19 34 ca 68 82 50 5c 6a e3 69 86 bb e8 79 57 4b 92 ae 65 b7 42 58 2b 55 3e 2e 1f c9 f3 fe 1f 3c 04 58 e2 4b ba 41 7a 0d d9 3d 48 c7 85 b3 0f f3 b6 75 67 66 33 e1 a3 83 6c 09 5f d0 10 61 97 ff 87 af d1 e7 0e c6 49 24 53 8a bc 9d c0 05 c4 da 77 d8 03 78 a5 36 9a 47 f7 f9 12 d2 52 42 ac b3 43 3e 90 36 1c ed 3f e3 c9 52 d1 aa af 50 d8 21 6c e5 c8 a6 20 4b cd 85 4a 51 4d 2f 11 b4 4c 2e 6d 9e dc a3 9a d0 2c bf d9 47 a1 ef 19 ec f4 26 f6 60 d4 3e 1b 35 bc 72 91 5e cd 55 8f 1d af 77 ee 1e 04 95 e8 cb e3 1c 13 14 d2 74 3f ee ab 76 72 3e 11 03 3c 83 f2 01 44 b7 b3 9e 33 f2 5a 0b 28 fe 8c 36 2e fb fa 00 87 16 2a b5 68 75 7f 39 ff fe 1d 6d fd 9e a2 3f db dd 85 e5 d6 b8 84 c1 05 7f 2c 3b 16 3e f1 f9 27 31 Data Ascii: G\n4hP\jiyWKeBX+U>.<XKAz=Hugf3l_aI$Swx6GRBC>6?RP!l KJQM/L.m,G&`>5r^Uwt?vr><D3Z(6.*hu9m?,;>'1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50040	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	848	OUT	GET /g/19586376/492x277/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzE2OjksY19maWxsLGVfc2hhcnBlbjoxMDAsZl9qcGcsZ19mYWNlczphdXRvLHFfYXV0bzpnb29kLHdfMTAyMC9odHRwOi8vaW1naG9zdHMuY29tL3QvMjAyNC0wNS83ODMzODUvNmYyMDQyNjAxZTQ4ZmE3NmRkNmRiOTZiNDg2OTc5ZDEuanBn.webp?v=1716532022-rlwLC0T0ZIliwQjwfcwCAKIGvNrQ4ESjT1wePK-FokQ HTTP/1.1 Host: s-img.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:11 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/webp Content-Length: 6894 Connection: close X-Mg-Request-UUID: 530a370a-943e-40f3-a38c-7f1fdf5e3b1c Access-Control-Allow-Origin: * Last-Modified: Fri, 24 May 2024 06:11:04 GMT Cache-Control: immutable, max-age=31536000 CF-Cache-Status: HIT Age: 966 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Robots-Tag: noindex Server: cloudflare CF-RAY: 888b37eb48eb431f-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	837	IN	Data Raw: 52 49 46 46 e6 1a 00 00 57 45 42 50 56 50 38 20 da 1a 00 00 d0 cb 00 9d 01 2a ec 01 15 01 3e 91 46 9d 4a 25 a4 22 ad a8 74 09 41 b0 12 09 67 6c 56 eb 26 cd c0 c4 d2 54 b2 86 d0 bf d8 72 87 4f d5 94 b2 83 47 1f 34 6a 5e a3 b0 2a 3c ad fc f4 51 72 c9 1c 4d bf f7 3e 76 66 60 11 10 e0 40 79 f4 d1 8d cd db ba e5 d2 27 55 d1 a3 63 da 61 e2 37 c6 b7 02 a7 7b a5 5f 99 b8 86 dc b4 84 dc 2f ad 08 63 9e 9e b5 14 9d 58 a8 5f 5c 59 ad d8 3e 2c 51 8a b0 26 0e 3a f6 29 57 8e ac c8 25 9f fd 4f 43 ee 0e 36 af 54 40 e2 15 f7 34 b1 2e 00 b3 fe 8d 00 08 93 a9 03 16 6b 19 9c 32 6c c2 12 ca 5d 00 57 b5 05 e9 f3 b5 ec 16 bd 87 01 7e 37 a7 eb e0 e9 b9 c3 2c 43 7a 1d 88 35 a3 a0 a1 80 e3 39 14 f6 17 14 f1 f6 af f8 61 05 5a e2 d3 bc 9f 41 a5 8b 9f b6 c0 d0 70 3a ca b0 e1 45 39 50 Data Ascii: RIFFWEBPVP8 >FJ%"tAglV&TrOG4j^<QrM>vf`@y'Uca7{_/cX_\Y>,Q&:)W%OC6T@4.k2l]W~7,Cz59aZAp:E9P
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 44 81 79 41 0d ef d4 62 ba 58 39 c0 5c 51 74 47 cb b8 df eb 5a 2e 32 30 15 2d e0 51 b4 ad 4e 22 b9 06 3f c5 64 46 8c 83 ae be 24 82 7b f3 5b 80 5a a1 a0 ca 01 7a a5 f4 6e 82 70 7a 68 5d 93 ed 2d 6b 00 88 3a ab e3 38 90 aa 6b fd 72 44 83 ee f7 64 f2 a4 38 ab 7c eb 96 f9 62 fe 7a 21 47 83 72 80 6f 05 44 83 56 38 ee 84 13 aa 83 3d eb 20 e1 f2 90 0c fd de d0 e0 0d 66 3e e8 5e 94 27 07 00 77 b9 ba 1e f9 e6 da fb 7b f8 aa 94 02 dd de b1 da 8a 65 8f 42 4f 02 03 5c 8f e6 04 97 f2 0c 61 44 fa 02 b6 17 4b 41 fa 95 2a dc ae 47 ff 2e 51 13 ad 4f 8d 9e bb 36 c5 f7 4b 95 a0 0b ba ea aa 03 08 ab c9 5e 83 19 4e a2 07 51 70 8e 8e df 9e 2e 09 f1 66 68 33 2f 00 de 1d b7 20 5f 80 50 13 0c 33 9d 54 51 16 41 a7 1d b7 91 2b b4 ea 0a a9 a3 b0 53 79 4f eb 35 57 86 6f 80 b1 ac c1 Data Ascii: DyAbX9\QtGZ.20-QN"?dF${[Zznpzh]-k:8krDd8\|bz!GroDV8= f>^'w{eBO\aDKA*G.QO6K^NQp.fh3/ _P3TQA+SyO5Wo
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: a6 b3 88 c3 be ac e0 44 82 2d b5 48 8d d4 4e ed 50 45 2f 2f 46 90 70 1d d7 76 88 66 24 62 29 71 69 01 25 95 e9 aa e1 85 6f eb 91 7e 2b 50 55 71 35 ec e1 c4 7e 91 57 21 e5 7f 7a 07 9b 9e f9 b6 97 7f ae e1 fd 19 0f 22 bb 10 2e 51 64 2c 9b 0c 89 a0 75 e1 75 42 74 45 6b b8 90 8f 27 5f 0a 6e bc bb 14 a2 42 63 d5 fd e4 da fd 7d 94 2b f1 95 12 95 5c fc 27 30 1a b5 1f 63 57 49 8c f3 44 1e 5b 74 d8 bf 80 14 39 e5 4a 81 3f f1 dc a0 cc 87 0f 9f 7f c3 0a 4d 75 ca c9 5a 46 23 76 d2 92 c3 e8 ff 0c bf d5 fd d4 67 44 0e 0f d6 89 a3 e8 58 49 4a e2 e4 68 4f 68 57 95 09 66 43 b8 9a 7c 30 89 56 31 de 58 b9 e7 e2 3f 3a df a9 2d 93 5f dd 8c 2a d6 99 a6 87 bd 0c 38 4e 3f 58 5a 2e b4 10 20 cf 50 b4 ad af 3d ec 1e 7b 01 15 c7 e2 30 30 e7 77 d6 c9 8f d5 6e 71 60 76 b7 24 d9 06 c0 Data Ascii: D-HNPE//Fpvf$b)qi%o~+PUq5~W!z".Qd,uuBtEk'_nBc}+\'0cWID[t9J?MuZF#vgDXIJhOhWfC\|0V1X?:-_*8N?XZ. P={00wnq`v$
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 4b cb 1f b6 54 34 87 f0 be a7 4f 47 d6 dc 1b 32 96 d5 52 b9 17 77 73 fb fd ee 87 62 a4 41 6c 84 02 b8 a7 e5 fb 24 8b fd f2 e3 d9 5b 0f 71 6d ee cb 7f f6 6c 1d 25 b3 84 17 ea c9 76 af c1 12 df 3b f3 30 7e 6a 8e 77 12 ba b8 82 83 ff be 6c 11 a2 a6 ea 6e ba cc 8c b9 83 10 48 a4 77 46 92 69 21 f3 e7 a6 8f 1b b4 7b 18 7f aa 72 31 24 20 25 3e e6 2b 99 a6 84 34 07 c1 9a 75 26 c8 65 21 34 c8 bd ea 2f 85 4d 3f 3c 5a 9d 62 62 e1 70 6a c3 ef 0c 75 54 7b cb 24 7e 2c 99 a6 aa 20 67 44 1f a0 6a ef c8 37 95 79 be 40 2f 8f b3 8d b2 8f 7e a7 08 9d 48 40 2f 4c 05 47 b6 c9 28 81 d3 ba a1 90 b1 f2 b4 95 88 39 c3 a9 43 26 7d 40 23 87 43 7a 0a 00 05 95 57 69 c8 60 bc 2d 5f ef c8 97 9a f3 18 ba 3f cc 24 24 21 92 da c6 52 55 ff bc 0f f0 9f 16 0f 00 33 14 5b 18 1d 64 0a 5e b6 2f Data Ascii: KT4OG2RwsbAl$[qml%v;0~jwlnHwFi!{r1$ %>+4u&e!4/M?<ZbbpjuT{$~, gDj7y@/~H@/LG(9C&}@#CzWi`-_?$$!RU3[d^/
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 51 d3 a0 6b 6a b2 47 63 c0 b7 73 e5 1a a0 94 e5 c3 91 ec ba a7 2a f3 05 a2 7d ae 4c e8 8e a1 40 18 20 b9 3a 80 a0 7c 4c e2 e4 ba 74 6c be 0e ba 88 61 dd 15 3e 44 19 0b cd 89 fc a7 c9 51 31 44 fe 8c 8e 94 04 d7 6b 34 f9 e8 ca df 59 10 49 18 7d 39 52 89 1a 3b 16 f0 dc 5b 01 26 97 53 ef 12 3b cc 90 46 8b d9 9c 30 d5 73 1c 8d e7 c4 47 44 db 5c 0b 9e 00 17 f2 ae 08 27 c1 89 a6 2d 01 45 d1 6e 6d 78 41 dd aa fc 2c 8a 99 1f c1 50 b6 1e 6f c1 aa f8 69 ca 8b 45 08 86 3c 34 02 a4 ae 46 c0 c6 76 58 49 0b 4e 91 5e e8 29 68 bc 8a 12 2b 9e e4 49 49 d8 ee 90 d3 7e f7 82 1f 40 4b a9 b8 4d d8 0e 18 00 f1 41 b6 46 ee 50 cc c1 62 fd 4e 93 84 a8 22 4c ca c9 53 4f de e4 2b eb 71 d9 d8 a6 e2 0e d7 57 c8 fd 0c 3c fa f4 62 5f 83 6e e2 6b 5c 69 cb 5b 1d 0e b4 7f 44 f8 93 95 d4 a8 Data Ascii: QkjGcs*}L@ :\|Ltla>DQ1Dk4YI}9R;[&S;F0sGD\'-EnmxA,PoiE<4FvXIN^)h+II~@KMAFPbN"LSO+qW<b_nk\i[D
2024-05-24 06:27:11 UTC	581	IN	Data Raw: 79 3a 97 ef d8 de 21 04 ff 00 4b 54 e7 4f fc b2 c7 40 f8 c8 0c 19 9c b6 a7 fc 3d e0 69 45 6c a7 be 37 fd d7 34 ef de 23 70 71 46 bf 2b 61 94 81 18 c3 61 ec 05 8c 2d ac 09 4a 49 44 b2 4a 68 fb 97 46 63 64 a4 78 bb 24 a0 29 4a 79 55 cb 19 ac 6b 49 74 4f f3 77 8c cb 09 49 5c 81 98 cd 84 6b 6a 95 74 48 fe 6a e6 0c 9a 1f ec cf d9 df d5 53 c9 0b 3b ca 4f c4 01 64 db b2 a5 59 98 16 1c f7 38 2c 21 81 55 62 70 8e 4f 8d 07 f0 02 cf c8 58 00 e0 b9 3e f6 ad 80 ae d8 b6 2c a3 4f eb 6b dc 0b f4 1e 7a ee 3c 2a 6b d5 97 63 a7 58 07 ce 78 fd 02 dc 17 cf 89 31 46 6a 26 fd c7 2f 9e ee 95 2a ac 86 5e c9 98 02 d5 a1 bd ca 2c 53 35 62 b7 12 4c 92 6a f0 e6 b2 06 24 59 00 35 8e 5a e4 cd a6 66 46 f7 31 96 3c d0 fc ab fb ba 20 26 b3 8b 2e ca c7 b8 fa 53 91 80 db bc 50 04 73 77 03 Data Ascii: y:!KTO@=iEl74#pqF+aa-JIDJhFcdx$)JyUkItOwI\kjtHjS;OdY8,!UbpOX>,Okz<kcXx1Fj&/^,S5bLj$Y5ZfF1< &.SPsw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50052	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	785	OUT	GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb48a415c3-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50044	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1030	OUT	GET /c?v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX7BdqtHS_fssCcly64flLgDMMhJM-_N3sSmDR4P6wyYzYhmwnRFTU4GOhSVcCXGjw7uJOs&v=297\|236\|8\|iAUJyjdg8QPC2MmwcJn76bFDl5xvVQU4rWzN5S_2tbuwqvfipqPw01I0PbiW_12CM-_N3sSmDR4P6wyYzYhmwh-vYa_Zsq_IqIeVGeEg4GM&fw=1&f=1&cid=1604063&cbuster=1716532023447415882264&pageImp=1&pvid=18fa947eb118598204d&pv=3&h2=xwIziUS4wo_UT2mUEzXCZklPy4QuSSyCe0IRufF7k-luw5uy2WImwGwvmvL0y0Gz&rid=a1c9a944-1996-11ef-9b76-c84bd68370c0&tt=Referral&ts=actengage&iv=11&completion=2,3&muidn=o4n2DX9tTBrn HTTP/1.1 Host: c.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:11 UTC	389	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Mg-Request-UUID: 6af305f1-b9db-461f-b883-26d4f64de897 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb2b5c43f2-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50050	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	785	OUT	GET /m?cdsp=827026&c=6cc08fb7-b307-5fe5-8438-f3b954a6a4a3 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb4dc543d7-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50051	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	852	OUT	GET /google?muidn=o4n2DX9tTBrn&gdpr=0&gdpr_consent=&google_ula={guid},5&google_gid=CAESEGgG85p4mYXYSAnb9PGD50k&google_cver=1 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: text/plain Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb4c684231-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50053	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	2141	OUT	GET /mediahosting.engine?MediaId=129331&AId=12674&CId=56235&PId=111992&SiteId=22696&ZoneId=84396&vm=9Ep-sLa-_FEkX5F6GTpe3Xg2d77SexO5rzLOdZfLljrxD3C8i70_p1TnIgsKYoil9fcvKlywQhIveyIMo_tA0fogJhWY_EpjPnI8X3dKJ744EQAJojZxkFwsXTv77282NGuhp1Fd4V58zRTEV4PTOEekXdMf-v56Bt_Vs3eVBU86-zDX08-3ZpQRaKjFUEzOQCnWIaZfxiumDCKH_p2qs2oowBy_8J2uCmaACVqkRWcadyABdEApSssiXqkIL6QtXdT67OkWpc5_byRyO25OUHhTO1zJ9EooekyPxYlHCgqA_f2Cy0Tw3wh_4JNAHEh4ITNmovSIAeFoZoiOksZrhmSpZsA78bOG-WnOYFC1-BylhOpcqe-fu7hsH0CjB4q7V43oFSLwN1mRGOj_bgdA-S2z6Wgxd4lO49vxt47lHi_QSaECi4dMt5cCV3xwpzTvZWB9aydcrGjOStB5573yM1DyKcYxpNWz6WsdhCTooiISfMvs0HtZjkEQV0XEHzfKhxsa9hIcrqXRgAopE42G1Rk5rrFSAUzvVsyZgPXZ-BgyZbAK-tFqK_PgKAXUx9DNXLJ6dT5iGQ_0n2X6oR--8q6KGwe8eRRRG-ljQIsHz5WNi88NiCnrjkfqtiWKme5FkTi2lDoiYi9DLUaF67Fqu-gcOM8oYmuIqDatKKgrCwGxF-6lSE0uHXHlTSGowhnjcJobDiJ895oeR0l-_aGGbhiN-UG1QoAdHdPYhvgzGPhCehugS7O3DMcdPBPTW9QgK0OUu__B0XWrl-HYnRk1qdtjY_z-sKi1NZJzH1DAd4Dr8g7D1lLo01rBXBO3yAEak-G9uT33X3SIUMMEtxA-Ftp9dKTijyUY1DoM0PXjOb7V8-PAm5K2yYFfRrH8tmMpVo-oX3bhntyeY00SFTAlPNOY8KxP [TRUNCATED] Host: engine.4dsply.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IKSR={}; INF_DFL8=false; IUID=604bb3ab-a770-46f1-9190-d795b2aaca34; ISSH=73827E; VMI=; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2024-05-24T06:26:55.6674781Z"}; ILPLU=#5/24/2024 6:26:55 AM; ILEALC=#5/24/2024 6:26:55 AM; ILMPF=#True; IPMPLU=#1/1/0001 12:00:00 AM; IPMUID=#; BSWUID=#; IBL=#[]; IOPT=#[]; ISH=#{"22696":[{"SId":"73827E","D":"24/5/23T23:26:56"}]}; ISH_Q=#[22696]
2024-05-24 06:27:11 UTC	1242	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: Accept-Encoding Cache-Control: private, no-transform P3P: CP="CAO PSA OUR IND" Access-Control-Allow-Origin: * Set-Cookie: IKSR={}; path=/; SameSite=None; secure Set-Cookie: INF_DFL8=false; path=/; SameSite=None; secure Set-Cookie: IUID=604bb3ab-a770-46f1-9190-d795b2aaca34; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure Set-Cookie: ISSH=73827E; path=/; SameSite=None; secure Set-Cookie: VMI=; path=/; SameSite=None; secure Set-Cookie: IPLH=#{}; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: IPLH_Q=#[]; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: CHN=#[]; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSSH=#{}; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSRH=#{}; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure; HttpOnly
2024-05-24 06:27:11 UTC	1426	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 3d 7b 22 50 72 6f 66 69 6c 65 22 3a 7b 22 41 75 64 69 65 6e 63 65 73 22 3a 7b 22 41 75 64 69 65 6e 63 65 22 3a 5b 5d 2c 22 54 68 69 72 64 50 61 72 74 79 41 75 64 69 65 6e 63 65 22 3a 5b 5d 7d 7d 2c 22 43 72 65 61 74 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 34 54 30 36 3a 32 36 3a 35 35 2e 36 36 37 34 37 38 31 5a 22 7d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 31 31 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 4c 55 3d 23 35 2f 32 34 2f 32 30 32 34 20 36 3a 32 36 3a 35 35 20 41 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d Data Ascii: Set-Cookie: ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2024-05-24T06:26:55.6674781Z"}; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secureSet-Cookie: ILPLU=#5/24/2024 6:26:55 AM; expires=Wed, 24-
2024-05-24 06:27:11 UTC	1289	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 5a 48 5f 51 3d 23 5b 5d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 31 31 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4d 43 48 3d 23 7b 7d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 36 3a 32 37 3a 31 31 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4d 43 48 5f 51 3d 23 5b 5d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 34 2d 4d 61 79 2d 32 30 33 34 20 30 Data Ascii: Set-Cookie: IZH_Q=#[]; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: IMCH=#{}; expires=Wed, 24-May-2034 06:27:11 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: IMCH_Q=#[]; expires=Wed, 24-May-2034 0
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 33 63 39 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 27 3e 0d 0a 09 3c 73 74 79 6c 65 3e 0d 0a 09 09 68 74 6d 6c 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 62 6f 64 79 20 7b Data Ascii: 3c9b<!DOCTYPE html><html><head><meta charset='utf-8'><meta name='viewport' content='width=device-width, initial-scale=1'><style>html {font-family: 'Helvetica Neue', Arial, Helvetica, Sans-serif;height: 100%;}body {
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 3b 0d 0a 09 09 09 70 61 64 64 69 6e 67 3a 20 33 25 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 69 6d 61 67 65 2d 77 69 74 68 2d 74 65 78 74 2e 74 65 6d 70 6c 61 74 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 74 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 09 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 09 09 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 09 09 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 09 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 09 09 77 69 64 74 68 3a 20 33 34 25 3b 0d 0a 09 09 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 09 09 70 61 64 64 69 6e 67 3a 20 31 25 20 33 25 3b 0d Data Ascii: ;padding: 3%;}.template-image-with-text.template-horizontal .image-container .title-container {display: flex;flex-direction: column;justify-content: center;height: 100%;width: 34%;right: 0;padding: 1% 3%;
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 09 09 66 6c 65 78 3a 20 31 20 31 20 36 35 25 3b 0d 0a 09 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 74 65 6d 70 6c 61 74 65 2d 6c 61 72 67 65 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 74 65 6d 70 6c 61 74 65 2d 6d 65 64 69 75 6d 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 09 09 66 6c 65 78 3a 20 31 20 31 20 35 30 25 3b 0d 0a 09 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 77 36 30 30 2e 68 32 30 30 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 Data Ascii: flex: 1 1 65%;width: 100%;}.template-horizontal.template-large .image-container,.template-horizontal.template-medium .image-container {flex: 1 1 50%;width: 100%;}.template-horizontal.w600.h200 .image-container {
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 09 09 2f 2a 20 74 69 74 6c 65 20 2a 2f 0d 0a 09 09 2e 74 69 74 6c 65 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 2e 38 70 78 3b 0d 0a 09 09 09 2f 2a 0d 0a 09 09 09 09 09 54 65 6d 70 6f 72 61 72 79 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 74 68 65 20 63 68 72 6f 6d 65 20 39 36 20 65 6d 6f 6a 69 20 72 65 6e 64 65 72 69 6e 67 20 69 73 73 75 65 0d 0a 09 09 09 09 09 09 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 63 68 72 6f 6d 69 75 6d 2e 6f 72 67 2f 70 2f 63 68 72 6f 6d 69 75 6d 2f 69 73 73 75 65 73 2f 64 65 74 61 69 6c 3f 69 64 3d 31 32 36 36 30 32 32 0d 0a 0d 0a 09 09 09 09 09 4f 72 69 67 69 6e 61 6c 20 76 61 6c 75 65 3a 0d 0a 09 09 09 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 0d 0a 09 09 09 09 Data Ascii: /* title /.title {font-size: 14.8px;/Temporary modification because the chrome 96 emoji rendering issuehttps://bugs.chromium.org/p/chromium/issues/detail?id=1266022Original value:font-weight: 600
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 20 30 3b 0d 0a 09 09 09 6d 61 72 67 69 6e 3a 20 32 76 68 20 30 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 77 33 30 30 2e 68 31 30 30 20 2e 62 72 61 6e 64 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2f 2a 20 63 74 61 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0d 0a 09 09 2e 63 74 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 63 74 61 20 2e 63 74 61 2d 63 6f 6e 74 61 69 6e 65 72 2c 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 63 74 61 20 2e 63 74 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 Data Ascii: 0;margin: 2vh 0;}.w300.h100 .brand {font-size: 12px;}/* cta container */.cta-container {display: none;}.template-cta .cta-container,.template-cta .cta-container {display: block;padding-left:
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2f 2a 20 6d 75 6c 74 69 70 61 6e 65 20 2a 2f 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 3a 6e 6f 74 28 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 2d 31 78 31 29 3a 6e 6f 74 28 2e 74 65 6d 70 6c 61 74 65 2d 69 6d 61 67 65 2d 77 69 74 68 2d 74 65 78 74 29 2e 74 65 6d 70 6c 61 74 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 09 09 77 69 64 74 68 3a 20 34 30 25 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 3a 6e 6f 74 28 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 2d 31 78 31 29 2e 74 65 6d 70 6c 61 74 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c Data Ascii: splay: none;}/* multipane */.template-multipane:not(.template-multipane-1x1):not(.template-image-with-text).template-horizontal .image-container {width: 40%;}.template-multipane:not(.template-multipane-1x1).template-horizontal
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 2e 74 65 6d 70 6c 61 74 65 2d 6d 65 64 69 75 6d 20 2e 74 69 74 6c 65 20 7b 0d 0a 09 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 6d 61 78 28 31 30 70 78 20 2b 20 32 76 68 2c 20 31 32 70 78 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2f 2a 20 66 6f 6e 74 20 73 69 7a 65 20 66 69 78 20 66 6f 72 20 53 61 66 61 72 69 20 2a 2f 0d 0a 09 09 40 6d 65 64 69 61 20 6e 6f 74 20 61 6c 6c 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 2e 30 30 31 64 70 63 6d 29 20 7b 0d 0a 09 09 09 40 73 75 70 70 6f 72 74 73 20 28 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 29 20 7b 0d 0a 09 09 09 09 2f 2a 20 74 69 74 6c 65 20 2a 2f 0d 0a 09 09 09 09 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 Data Ascii: ate-multipane.template-medium .title {font-size: max(10px + 2vh, 12px);}}/* font size fix for Safari /@media not all and (min-resolution:.001dpcm) {@supports (-webkit-appearance:none) {/ title */.template-multip
2024-05-24 06:27:11 UTC	1369	IN	Data Raw: 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 2e 74 65 6d 70 6c 61 74 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 62 72 61 6e 64 2c 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 2e 74 65 6d 70 6c 61 74 65 2d 76 65 72 74 69 63 61 6c 20 2e 62 72 61 6e 64 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 6d 69 6e 28 39 70 78 20 2b 20 31 76 68 2c 20 31 34 70 78 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 6d 75 6c 74 69 70 61 6e 65 2e 77 33 30 30 2e 68 31 30 30 20 2e 62 72 61 6e 64 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 6d 69 6e 28 39 70 78 20 2b 20 31 76 68 2c 20 31 32 70 78 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 74 65 6d 70 6c 61 74 65 2d 75 6e 64 65 72 6c 69 Data Ascii: }.template-multipane.template-horizontal .brand,.template-multipane.template-vertical .brand {font-size: min(9px + 1vh, 14px);}.template-multipane.w300.h100 .brand {font-size: min(9px + 1vh, 12px);}.template-underli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50039	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	957	OUT	GET /track?r=pjnewsletter.com&sn=&ic=0&tgt=0&app=&wi=540&he=303&test=5&d36=6.2.212&apppkg=&fv=3&proto=https&d65=Control&d66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&e=inventory&vi=0&plt=2&cb=1716532023413 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
2024-05-24 06:27:11 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:11 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50048	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	629	OUT	GET /1x1.gif?id=783385&type=c&tg=f8602a8c26ce5bee805634dcb1adaca2&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=0bc4c HTTP/1.1 Host: a.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:11 UTC	452	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb6dab43cd-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50047	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	629	OUT	GET /1x1.gif?id=825298&type=c&tg=d67dc17da8918b77c2d9121386e379a0&gdpr=0&gdpr_consent=&us_privacy=&mgbuster=006f8 HTTP/1.1 Host: a.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:11 UTC	452	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb7c0a43a1-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50055	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	838	OUT	GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy=&tc=1 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"501037":1716532031,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb78630c95-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50054	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1021	OUT	GET /m?cdsp=675043&c=0ff1c4a5-e08d-421b-badf-e6142feb667b HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"675043":1716532031,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eb98226a52-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50058	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1064	OUT	GET /umatch/1?dataid=data5&uuid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a HTTP/1.1 Host: sync.connectad.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlIyK1FYcVgwL2xKUDZzVlR4REVzWUE9PSIsInZhbHVlIjoiWDlxMXBSeGNvY1JlN04rTCtFcWQ2WThPRjZGSVNCcHQ3VHJEWkZKQjlnL0ZaNUtvRVJuQkJ2cExIZXIrSTZ5NHk4Njc0Z0E1MHYvTGE1Wk9WbHA5UXRxcWxiK2dNSUlDTjRiSnhOYnZ6eGdaWnBSTnBpY2lpYnVYdHBRZ2E4aVkrQnA1NXRybFcwcUltczhpMXZ6U013PT0iLCJtYWMiOiJhZGU2NjZhMDRlODMwMTE5NjI0NjM3N2ZmNDU1NWFkNWMzZDBkYWVkZmY0YmJmOTM2ZmE4OGQ0MzE4M2I3MmYyIiwidGFnIjoiIn0%3D
2024-05-24 06:27:11 UTC	889	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:11 GMT Connection: close set-cookie: id=eyJpdiI6IlkrNmpleFlWRWFxZ3RUd1MyYStDa3c9PSIsInZhbHVlIjoiUEVGRS83UzR3MS9tbXBLdHlmWWpHOVNqMGx3U1BaL1p2ZlFLRW1sakhYM2JQSGhzS3VHeE1KbVBXZlFzazFYeTI3cHhONnZubEsvK2xxT0FBNUZva05qQ1BSaVF3NFY3Qm5QNEdoNzUrN2taVGFEOWE2WmhDUUF3N2Z1dnh3elZhQjhld0h5dmhlRXBSREw2OXhOS2g4enZPc0pnNGc5YTduWlF1VTAvOW9XTUtpV0FRZ2JvLzlnLzQyU2pUWFV5RGFuUm9ld200REtBY1l1bXhzUE50dmZaWlp1TytWY3gzY29DOGNDR0lRQT0iLCJtYWMiOiJiNmVlYjNlYjI4ZDFmN2ExNjFkZTNjMDExYWFiMTgzNjJmMzJhOTM5MDBjMGFlMGYzNzZhYThjNDEwYmQ1ZTY1IiwidGFnIjoiIn0%3D; expires=Sun, 23 Jun 2024 16:27:11 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eba8c142e4-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50056	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	768	OUT	GET /m?cdsp=834104&c=4426393169609033625 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eba8b88cc3-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50049	173.0.146.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1330	OUT	GET /api/adserver/tag/5/?AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=1716532023417&wfc=1 HTTP/1.1 Host: go1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
2024-05-24 06:27:11 UTC	1071	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:11 GMT content-type: application/json transfer-encoding: chunked vary: Accept-Encoding set-cookie: aniC=1716532025945-172031150014-000201-002-004790; Expires=Thu, 13-Jun-24 06:27:11 GMT; Max-Age=1728000; Domain=aniview.com; Path=/; Secure; HttpOnly; SameSite=None access-control-allow-credentials: true access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, INDEX access-control-allow-headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With access-control-max-age: 1728000 x-bamboo-c-s: BYPASS x-bamboo-c-skfe: 1 x-bamboo-c-skst: 1 expires: Sun, 12 May 2024 16:40:31 GMT cache-control: no-cache accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 critical-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 connection: close
2024-05-24 06:27:11 UTC	323	IN	Data Raw: 31 33 43 0d 0a 7b 22 64 61 74 61 22 3a 20 7b 22 74 72 61 63 6b 65 72 73 22 3a 20 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 75 74 69 6c 73 2f 78 61 70 69 2f 6d 75 6c 74 69 2d 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 61 6e 69 76 69 65 77 26 65 6e 64 70 6f 69 6e 74 3d 75 73 2d 65 61 73 74 22 2c 20 22 65 22 3a 20 22 73 79 6e 63 22 2c 20 22 70 72 22 3a 20 22 35 22 2c 20 22 74 22 3a 33 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 6d 61 74 63 68 69 6e 67 3f 69 64 3d 33 36 35 35 26 5f 66 77 5f 67 64 70 72 3d 30 26 5f 66 77 5f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d Data Ascii: 13C{"data": {"trackers": [{"url":"https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=aniview&endpoint=us-east", "e": "sync", "pr": "5", "t":3},{"url":"https://ads.stickyadstv.com/user-matching?id=3655&_fw_gdpr=0&_fw_gdpr_consent=&gpp=
2024-05-24 06:27:11 UTC	6998	IN	Data Raw: 31 42 34 45 0d 0a 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 61 75 74 6f 2d 75 73 65 72 2d 73 79 6e 63 3f 70 78 3d 31 39 35 33 26 5f 66 77 5f 67 64 70 72 3d 30 26 5f 66 77 5f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 20 22 65 22 3a 20 22 73 79 6e 63 22 2c 20 22 70 72 22 3a 20 22 39 22 2c 20 22 74 22 3a 33 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 73 70 2e 64 69 73 71 75 73 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 75 73 65 72 2f 3f 70 61 72 74 6e 65 72 3d 61 6e 69 76 69 65 77 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 61 6e 69 76 69 65 77 2e 63 6f 6d 25 32 46 63 6f 6f 6b 69 65 73 79 6e 63 65 6e 64 70 6f 69 6e 74 25 33 46 61 75 69 64 25 33 44 31 37 31 36 35 33 32 30 32 35 39 34 35 2d 31 37 32 30 33 31 31 35 30 30 31 34 2d Data Ascii: 1B4Eckyadstv.com/auto-user-sync?px=1953&_fw_gdpr=0&_fw_gdpr_consent=", "e": "sync", "pr": "9", "t":3},{"url":"https://ssp.disqus.com/redirectuser/?partner=aniview&r=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-
2024-05-24 06:27:11 UTC	5600	IN	Data Raw: 31 35 44 38 0d 0a 66 38 39 63 31 35 37 66 39 30 31 66 38 33 39 38 34 65 30 64 65 35 35 35 61 32 36 38 34 26 64 39 3d 30 30 30 30 26 61 64 3d 5b 41 56 5f 41 44 44 55 52 41 54 49 4f 4e 5d 26 76 69 3d 5b 41 56 5f 56 49 45 57 41 42 49 4c 49 54 59 5d 26 64 37 31 3d 5b 41 56 43 5f 41 44 49 44 5d 26 64 37 33 3d 5b 41 56 43 5f 44 54 5d 26 6f 66 70 72 3d 5b 41 56 43 5f 46 4c 4f 4f 52 5d 26 69 6d 69 64 3d 61 31 38 39 63 34 37 66 30 34 63 64 36 63 38 35 65 35 32 31 62 64 64 61 32 62 65 36 63 63 64 35 5f 61 64 73 73 65 72 76 6e 67 6c 61 79 65 72 36 62 34 36 38 66 34 64 34 63 6b 6e 68 73 64 5f 31 33 35 34 32 31 34 30 31 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 22 2c 20 22 74 79 70 65 22 3a 22 70 6c 22 2c 20 22 70 6c 61 74 66 6f 72 6d 22 3a 31 31 30 2c 20 22 70 72 6f Data Ascii: 15D8f89c157f901f83984e0de555a2684&d9=0000&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&ofpr=[AVC_FLOOR]&imid=a189c47f04cd6c85e521bdda2be6ccd5_adsservnglayer6b468f4d4cknhsd_135421401_[AVC_WFCYCLE]", "type":"pl", "platform":110, "pro
2024-05-24 06:27:11 UTC	1405	IN	Data Raw: 35 37 36 0d 0a 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 68 3d 37 38 63 32 33 64 66 36 39 30 62 66 38 39 63 31 35 37 66 39 30 31 66 38 33 39 38 34 65 30 64 65 35 35 35 61 32 36 38 34 26 64 39 3d 30 30 30 30 26 61 64 3d 5b 41 56 5f 41 44 44 55 52 41 54 49 4f 4e 5d 26 76 69 3d 5b 41 56 5f 56 49 45 57 41 42 49 4c 49 54 59 5d 26 64 37 31 3d 5b 41 56 43 5f 41 44 49 44 5d 26 64 37 33 3d 5b 41 56 43 5f 44 54 5d 26 69 6d 69 64 3d 61 31 38 39 63 34 37 66 30 34 63 64 36 63 38 35 65 35 32 31 62 64 64 61 32 62 65 36 63 63 64 35 5f 61 64 73 73 65 72 76 6e 67 6c 61 79 65 72 36 62 34 36 38 66 34 64 34 63 6b 6e 68 73 64 5f 31 33 35 34 32 31 34 30 34 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 22 2c 20 22 74 79 70 65 22 3a 22 70 6c 22 2c 20 22 70 6c 61 74 66 6f 72 6d Data Ascii: 5760829a4d45051144&h=78c23df690bf89c157f901f83984e0de555a2684&d9=0000&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&imid=a189c47f04cd6c85e521bdda2be6ccd5_adsservnglayer6b468f4d4cknhsd_135421404_[AVC_WFCYCLE]", "type":"pl", "platform
2024-05-24 06:27:11 UTC	6998	IN	Data Raw: 31 42 34 45 0d 0a 2c 20 22 70 72 69 63 65 22 3a 30 2e 34 30 30 30 30 2c 20 22 72 22 3a 30 2e 34 30 30 30 30 2c 20 22 61 63 22 3a 20 7b 22 76 22 3a 30 2e 37 2c 22 66 70 22 3a 31 2c 22 63 22 3a 31 2c 22 74 22 3a 32 7d 2c 20 22 73 63 68 61 69 6e 22 3a 20 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 61 6e 69 76 69 65 77 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 22 2c 22 68 70 22 3a 31 7d 5d 7d 2c 20 22 6f 70 74 22 3a 20 7b 22 69 74 22 3a 33 2c 22 73 22 3a 31 2c 22 6d 22 3a 31 2c 22 6c 22 3a 31 2c 22 76 22 3a 30 2e 31 35 2c 22 68 63 22 3a 31 2e 38 31 32 37 35 39 2c 22 69 6d 70 22 3a 31 2c 22 68 22 3a 33 2e 31 Data Ascii: 1B4E, "price":0.40000, "r":0.40000, "ac": {"v":0.7,"fp":1,"c":1,"t":2}, "schain": {"complete":1,"ver":"1.0","nodes":[{"asi":"aniview.com","sid":"64db4ddc8904509d8303ce64","hp":1}]}, "opt": {"it":3,"s":1,"m":1,"l":1,"v":0.15,"hc":1.812759,"imp":1,"h":3.1
2024-05-24 06:27:11 UTC	5475	IN	Data Raw: 31 35 35 36 0d 0a 20 22 63 72 65 61 74 69 76 65 54 79 70 65 22 3a 20 31 2c 20 22 76 70 70 22 3a 31 2c 20 22 66 70 22 3a 30 2c 20 22 73 63 22 3a 30 2e 38 37 35 2c 20 22 70 72 69 63 65 22 3a 30 2e 30 30 30 30 30 2c 20 22 72 22 3a 30 2e 30 30 30 30 30 2c 20 22 61 63 22 3a 20 7b 22 76 22 3a 30 2e 37 2c 22 66 70 22 3a 31 2e 32 35 2c 22 63 22 3a 31 2e 32 35 2c 22 74 22 3a 32 7d 2c 20 22 73 63 68 61 69 6e 22 3a 20 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 61 6e 69 76 69 65 77 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 22 2c 22 68 70 22 3a 31 7d 5d 7d 2c 20 22 6f 70 74 22 3a 20 7b 22 69 74 22 3a 33 2c 22 73 22 Data Ascii: 1556 "creativeType": 1, "vpp":1, "fp":0, "sc":0.875, "price":0.00000, "r":0.00000, "ac": {"v":0.7,"fp":1.25,"c":1.25,"t":2}, "schain": {"complete":1,"ver":"1.0","nodes":[{"asi":"aniview.com","sid":"64db4ddc8904509d8303ce64","hp":1}]}, "opt": {"it":3,"s"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50038	63.33.74.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	749	OUT	GET /5/c=3722/ctax=Campaigns%5EExpose%5EViewers%5EPlacement%20111992%20-%20Viewer HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGPL3%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARq1E%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2ZIABRgaGWQuBNAAcEAJf"
2024-05-24 06:27:11 UTC	978	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.14.2 Set-Cookie: _cc_id=72aac350df2b4a40201cac1fd18dfe1f;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:11 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50059	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	408	OUT	GET /bounce HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#1
2024-05-24 06:27:11 UTC	239	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:11 GMT vary: Accept-Encoding content-type: text/plain;charset=utf-8 transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:11 UTC	41	IN	Data Raw: 31 45 0d 0a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1E{"bounce":{"setCookie":false}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50060	141.95.33.120	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	349	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:11 UTC	309	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:10 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:11 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 54 66 69 54 5a 77 47 56 56 75 5a 34 45 39 61 59 6b 6e 39 55 78 51 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"TfiTZwGVVuZ4E9aYkn9UxQ=="}
2024-05-24 06:27:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50046	65.9.7.204	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	389	OUT	GET /16afc0b29e2a47c4091aea1e77b64c9d.webp HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:11 UTC	655	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 57686 Connection: close Date: Thu, 23 May 2024 08:00:49 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Mon, 08 Apr 2024 12:03:10 GMT ETag: "3480490b1b9dafa252b83a425006a20d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 43c19aee1cbb38bf37ea4d5265ba1f54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: P--QPoVNDQfytqrVQSXix3Fc5ssJcOjEFm6mv8VkF_wqWuxF2tLo4g== Age: 80783
2024-05-24 06:27:11 UTC	16384	IN	Data Raw: 52 49 46 46 4e e1 00 00 57 45 42 50 56 50 38 20 42 e1 00 00 30 ca 05 9d 01 2a b0 04 73 02 3e 6d 32 94 47 a4 23 26 a9 27 d3 eb 71 20 0d 89 67 6e 29 1d 18 75 49 12 49 8c 8b 76 55 8f 2b 4c 6a 77 e4 5f db b7 7b 7b 0f b0 3f 40 0f 02 7e 6b 73 db ff 49 e8 8f f5 97 4f af f4 bc 9b 7d 7b 83 a9 d2 38 6e ec d2 fb eb af f4 ff 81 e7 fb ce 8f 70 ed b7 cb e7 99 7f fe fd 5b 7d 7b 7f ec de f1 8e ad 7a 7b 31 1f 2c fe f7 ff 87 fb df 23 7f 3b f7 c9 fe a3 93 ac 51 fe b1 fc c3 fe be b0 ff ea f2 47 ec 3c 7d ba 9d 3f d3 ca 53 29 bf f6 f4 ff ef 3f b1 3f 20 27 f0 bd 29 fd 1c bf f4 ef e2 2d e6 c9 68 3a 7d 15 67 ce f1 ba 12 5d 48 67 13 b8 ed e8 63 2a 9b 81 b7 bd d2 a3 5f 70 17 30 5b 52 5a f4 80 fb 2c db a7 0b 7d 8e 59 56 75 2e d1 77 7f 9d 4f 91 af c5 9c 8d 1d f7 b7 c0 13 65 d6 17 75 Data Ascii: RIFFNWEBPVP8 B0s>m2G#&'q gn)uIIvU+Ljw_{{?@~ksIO}{8np[}{z{1,#;QG<}?S)?? ')-h:}g]Hgc_p0[RZ,}YVu.wOeu
2024-05-24 06:27:11 UTC	16384	IN	Data Raw: 87 fa 73 ea d8 ff 50 81 fb 5f 9c 87 a1 e4 6e 4e 45 5c 63 cf 32 df 6a 14 91 4d 47 6d 03 6d 5d cf bb 22 67 72 ac b1 a6 93 4c 9e db f4 94 27 71 e9 e4 dc 7c 1f 75 e1 86 3c 40 10 80 00 0b 7d 60 05 ec 00 0f d4 5d 0d 23 7e 84 ee ea 4f 9a ae e5 aa c3 0b 94 4b 31 10 3a 10 21 4f e8 6f 27 2a 0c 8e 77 33 fe 69 33 e6 5c 52 d2 21 95 d6 a6 a4 37 1f 4b 50 8b 17 b4 d5 38 f9 bf 71 89 67 c2 42 36 ea d2 8d 89 df 84 d1 7b ed 96 3b e9 73 c7 a5 68 1a 23 d0 b7 b4 00 6c 75 30 17 64 3a a8 78 f3 86 3a 46 c5 ee ff 93 45 c7 c2 4d 56 73 88 d5 98 b0 0f 70 eb 6f 90 af bd f8 96 00 cc ea bf 5c c2 02 5f df 6b 9b 74 b8 60 f0 31 f8 b3 d9 6e 23 f2 e8 ac 60 d0 fe d7 5f 93 39 fb 19 d4 e7 be 3c c0 55 95 4f 9e 53 4a 2c 4c 92 9f 7e 7e 85 fb f5 73 2e e7 13 e2 a9 64 ec 77 b4 42 f2 d5 d3 09 82 ad 5d Data Ascii: sP_nNE\c2jMGmm]"grL'q\|u<@}`]#~OK1:!Oo'*w3i3\R!7KP8qgB6{;sh#lu0d:x:FEMVspo\_kt`1n#`_9<UOSJ,L~~s.dwB]
2024-05-24 06:27:11 UTC	16384	IN	Data Raw: c4 0d 0e ff c8 a1 fe de 47 fd 04 36 ad 14 20 67 28 0f a9 0d bf 09 07 76 6a f1 11 21 da cf fd 7d 0c ad 90 24 2b 1f d0 e1 8d ed d0 82 f5 a9 9b b4 a5 f8 7d f4 51 07 f1 bd f5 ca bf e6 87 84 60 70 9a 74 24 07 4f c7 dc 37 db 81 89 f5 bc bc 2e 11 86 d6 de bb c6 10 3e 3e 15 79 7c 4e 6d f5 de 3a fc 1e 7a 56 e9 df 6b de c3 af 11 b7 65 02 15 e8 20 d3 6b 7c 77 22 4a 08 b9 31 82 7c fb 25 1e dc e1 78 1a 21 9d c5 28 a0 43 99 42 17 f1 ba 29 56 7b 65 d1 70 45 73 fa da 64 12 f0 45 3f d2 ac b1 cf 97 c8 cc 80 7a d5 39 2c d5 ed 68 f6 91 96 8c f2 97 28 9c 4c f0 a6 3a 63 3a 61 c2 eb f4 c2 a4 a7 5e 5f 48 e1 c6 81 72 25 76 c5 c5 57 46 28 aa 7e 50 bf f7 4e 38 c7 96 e9 dc 65 6c 3b 84 e2 c5 dd ac 36 34 d6 85 e0 90 f1 eb 81 6f 3c cb 68 0b 95 c3 23 57 38 f0 0d 83 96 16 bf 10 d4 6a e3 Data Ascii: G6 g(vj!}$+}Q`pt$O7.>>y\|Nm:zVke k\|w"J1\|%x!(CB)V{epEsdE?z9,h(L:c:a^_Hr%vWF(~PN8el;64o<h#W8j
2024-05-24 06:27:11 UTC	8534	IN	Data Raw: 2d 95 f4 01 c9 b6 4d fe ab a6 6b e5 f8 11 bc 7e 7b 5e 30 ca a5 ae 63 4a 1c 0a 98 66 a2 86 71 ab a7 9f cf ed bc 7a 3d f8 ba c1 54 19 20 c3 a0 50 f9 40 46 80 b3 f4 84 4b d4 91 45 db 13 00 a5 83 72 b7 52 20 f9 a1 8f 1e 46 1b 37 13 51 12 a9 e3 1a e4 57 1e 45 a5 1d 6d 47 ca 9b 66 29 78 8a ea d9 ab 6f 7a 94 f6 2c cd 44 3f 9c 67 9d 7f 00 f2 a8 c5 5b 25 a4 e3 fe 38 43 4a d3 11 08 78 a2 dd c8 69 bc c2 ed f8 cb 2b 7e 69 14 99 48 02 00 d9 e9 82 e6 e3 d6 21 75 ad 8f f4 08 72 fe 8f 45 27 00 18 e2 7b 5b a3 55 99 36 0f a9 cb 70 e7 76 a9 3a 0e 9d 17 d3 3d ea 8f ff 87 4d 2e 9a 36 bf d4 1c 9f bc cc 07 96 6a c9 b0 83 99 86 34 d6 fb 9d 43 11 cf 6a 59 99 c2 93 30 54 9e 80 82 75 76 7c f5 f9 b1 d7 79 b1 b9 e2 67 6b 68 11 07 8f f1 e4 4b f4 dd ca 5a 47 e2 5d c7 69 e8 08 0a 90 bf Data Ascii: -Mk~{^0cJfqz=T P@FKErR F7QWEmGf)xoz,D?g[%8CJxi+~iH!urE'{[U6pv:=M.6j4CjY0Tuv\|ygkhKZG]i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50061	18.239.69.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	686	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=f2c9834a-eb80-459e-8abc-438c425949b9&ckls=true&ci=7c0kCriUA6&nc=false&trid=-1958837753 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=7c0kCriUA6; IQver=1.9; IQMID=137264047#1716532029761; IQPData=137264047#1716532029745#0#1716532029745; intentIQCDate=1716532029753; CSDT=UEQ6MTUzNThfMCZVRGZkU3Ex; ASDT=0
2024-05-24 06:27:11 UTC	675	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 06:27:11 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:11 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 4a58d1025db7d55387fe7325daf4435e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7Ntn1M6dUFO6o-8FhCkvSmWWyv4phxgmzETCgeXl7QjoWWjv2OLM9w==
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50064	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1069	OUT	GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"501037":1716532031,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37ee2bae4352-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50068	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1016	OUT	GET /idsync/ex/push?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:11 UTC	1337	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:11 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716532031795;Expires=Tue, 23 Jul 2024 06:27:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd;Expires=Tue, 23 Jul 2024 06:27:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/push/check?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50069	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	993	OUT	GET /m?cdsp=665953&c=%FD4124} HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eeb9370c74-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50079	104.21.234.154	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	672	OUT	GET /sync?p=evol&redir=https%3A%2F%2Fsync.e-volution.ai%2F40425ffe10103241a433b21c10aa797b.gif?puid={uid} HTTP/1.1 Host: srv.aso1.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:12 UTC	693	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: aso_uid=294d291ba37f68ed6dd1b4c9c13fe6848854ff17; expires=Sat, 24-May-2025 06:27:11 GMT; Max-Age=31536000; path=/; domain=.aso1.net; secure; SameSite=None Cache-Control: no-store, max-age=0 Expires: Sun, 27 May 1979 00:00:00 GMT Pragma: no-cache Location: https://sync.e-volution.ai/40425ffe10103241a433b21c10aa797b.gif?puid=390d70214744565173549ca7ef99c13d6d3019f2 X-Robots-Tag: noindex, nofollow, noarchive, noimageindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37eecc267292-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50074	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	707	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak\|t
2024-05-24 06:27:11 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 11VH9MVS0GN6T2YW4E2E Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 06:27:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50085	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1921	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532026400&plt=2&asid=64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C650c2ceaf96af061180a223b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C64e4aab4c5 [TRUNCATED] Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
2024-05-24 06:27:11 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:11 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50084	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	726	OUT	GET /w/1.0/sd?id=537072991&val=CAESEKxcbJCz5zyxgFEK_iiZGYg&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
2024-05-24 06:27:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50080	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	683	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak\|t
2024-05-24 06:27:11 UTC	895	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 24 May 2024 06:27:11 GMT Content-Length: 0 Connection: close x-amz-rid: Q4X7FMFWMS5S5TE10T9T Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 06:27:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=YAm-fjTBRB2GxG2EiqWDgw&rk=usync-na&gdpr=0 Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50083	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	785	OUT	GET /m?cdsp=556372&c=23fe11c4-ed15-5d1a-95bd-f620677ba1a0 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"556372":1716532031,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37ef383342fc-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50091	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	773	OUT	GET /m?cdsp=709070&c=ItUjALZH-23s9-wqRaSHYOyf HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37ef6e60333c-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50090	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	785	OUT	GET /m?cdsp=287839&c=f2c9834a-eb80-459e-8abc-438c425949b9 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:11 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:11 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37ef9baa0f41-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50071	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	722	OUT	GET /track/cmb/openx?oxid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSgCMgsI6sie5Kjx_TwQBTgB
2024-05-24 06:27:11 UTC	567	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:11 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0&gdpr_consent= set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjqyJ7kqPH9PBAFOAE.; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:11 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 74 74 64 5f 70 75 69 64 3d 63 35 36 62 62 37 37 64 2d 37 35 63 37 2d 37 35 35 31 2d 66 38 65 30 2d 33 34 62 36 36 64 35 35 39 36 61 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50082	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	693	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSgCMgsI6sie5Kjx_TwQBTgB
2024-05-24 06:27:11 UTC	576	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:11 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCKL5lsGS8f08EAUYBSABKAIyCwjqyJ7kqPH9PBAFOAE.; expires=Sat, 24 May 2025 06:27:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:11 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=264441c2-0e4b-4098-920f-1c8a6b45a578&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50076	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	690	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak\|t
2024-05-24 06:27:12 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DWYNEE11EZGZM4ZG9RP7 Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 06:27:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50087	76.223.111.18	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	883	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3671706280332458943464; tluid=3671706280332458943464
2024-05-24 06:27:12 UTC	677	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:12 GMT Content-Length: 0 Connection: close Location: https://ssc-cms.33across.com/ps/?us_privacy=&xi=33&xu=3671706280332458943464 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3671706280332458943464; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 06:27:12 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3671706280332458943464; Max-Age=7776000; Expires=Thu, 22 Aug 2024 06:27:12 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50093	104.18.38.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	585	OUT	GET /m129331.jpg HTTP/1.1 Host: digiadsply.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:12 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:11 GMT Content-Type: image/jpeg Content-Length: 65475 Connection: close CF-Ray: 888b37efcfe4182d-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 995138 Cache-Control: max-age=2592000 ETag: "40b1e7a3b7e6385c8cec8c5ecc198023" Expires: Mon, 24 Jun 2024 06:27:11 GMT Last-Modified: Tue, 16 May 2023 18:04:36 GMT Via: 1.1 4e3df844337032b56b8434990b0f76ca.cloudfront.net (CloudFront) Cf-Bgj: h2pri X-Amz-Cf-Id: zHJu7LWFlDd4-8mVVbOCAWUe_CWREdAwoKPOGUPQ29EOT1xD37ijcQ== X-Amz-Cf-Pop: EWR53-C2 x-amz-server-side-encryption: AES256 x-amz-storage-class: REDUCED_REDUNDANCY X-Cache: RefreshHit from cloudfront Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:12 UTC	651	IN	Data Raw: ff d8 ff e1 11 fb 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 26 00 00 01 01 00 03 00 00 00 01 01 40 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 35 3a 31 36 20 32 30 3a 34 36 3a 35 30 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*&@(12i ''Adobe Photoshop CS6 (Windows)2023:05:16 20:46:500
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 Data Ascii: 3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: af d3 54 ba 8e 10 c5 c0 65 1e a3 ac 0f b1 a0 17 b8 b9 c1 ac fd 29 6b 9e ef f8 46 2b d8 58 b9 18 74 56 db 6f f5 c3 5a 00 d0 06 81 f9 fb 4c 95 4b a9 3c d8 f6 b4 99 68 92 df 0f dd fe 08 0d e9 39 28 46 fa ec e2 e4 37 42 ae d7 4f da 3a 5e c6 e9 a4 21 1a 3d 67 fa 60 ea 55 bc 2c 3c bc 53 1b f7 56 7f 36 14 a1 ae e7 74 9c 3c 8c 63 69 b4 6d 6f 65 a3 f5 7e 1f eb 6d e3 71 fc aa 5d 47 d4 18 ee d9 a6 8a 1f 55 58 e0 db 03 b5 32 53 81 df c9 4e a1 66 a5 5b ae 86 9a c1 84 07 08 71 f8 ad 3a 18 0d 0d 50 73 27 d3 1f 36 5c 3b 97 36 da 00 ec a9 ba 91 ea b7 4e eb 6a da 74 54 6c a8 0b 41 f3 55 41 66 21 ff d2 e7 32 7d d8 4f 1f 72 c5 e9 86 32 d9 e6 e5 b6 e0 5d 8e f6 f9 4a c2 c3 96 e5 37 c9 f0 98 7a 25 e8 3a c8 27 19 ff 00 d4 59 b8 ba f4 e6 f9 58 16 a7 54 f7 62 93 3f 98 b2 f0 75 e9 Data Ascii: Te)kF+XtVoZLK<h9(F7BO:^!=g`U,<SV6t<cimoe~mq]GUX2SNf[q:Ps'6\;6NjtTlAUAf!2}Or2]J7z%:'YXTb?u
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: ab 61 da e6 9f 46 d6 80 68 c8 71 22 a2 58 5b 5b 99 75 61 ae fd 1d 9e ff 00 d3 37 df 5a c5 c9 a6 ec 6b ec a6 f6 1a ed a9 c6 bb ea 3c b5 c0 c7 6f e5 21 69 20 80 09 ea 8e 43 8b a7 83 db e1 c3 7f ce 5d 9f 4c cd 6d bd 36 8b 6d 7f bd ad f4 ed 24 c9 dc cf 64 bb fa cd da e5 c6 32 74 3d fb ab 58 d7 6d 1b 5c 4f a6 4c 90 38 90 8d d2 83 d7 9c cc 78 d1 e3 e4 53 b7 32 b2 3d a4 15 ca 5d 95 46 c1 e9 be 0f c5 57 19 56 0d 59 69 1f 05 1c cf 10 aa 5f 11 45 ec dd 92 ef 05 56 db ad 24 40 d5 73 1f 6f c9 68 d2 d3 f0 5a 3d 27 2a dc 8d e2 c7 6e 23 85 1f 01 5e 4d 3f ff d5 e6 f0 fd cd 23 b1 31 f7 e8 b9 12 d2 c7 96 9f a4 c2 47 dc ba ac 5b 08 6b a3 80 57 3d d4 59 e9 e7 5d fb be ab fe e9 dd ff 00 7f 4d 1b a4 b1 77 b9 a7 cc a1 b4 47 6d 3c 54 99 2e 63 5a dd 5c 74 00 6a 56 96 37 41 ce c8 Data Ascii: aFhq"X[[ua7Zk<o!i C]Lm6m$d2t=Xm\OL8xS2=]FWVYi_EV$@sohZ='*n#^M?#1G[kW=Y]MwGm<T.cZ\tjV7A
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 72 6f 6f 66 53 65 74 75 70 4f 62 6a 63 00 00 00 0c 00 50 00 72 00 6f 00 6f 00 66 00 20 00 53 00 65 00 74 00 75 00 70 00 00 00 00 00 0a 70 72 6f 6f 66 53 65 74 75 70 00 00 00 01 00 00 00 00 42 6c 74 6e 65 6e 75 6d 00 00 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 Data Ascii: InteenumInteClrmprintSixteenBitboolprinterNameTEXTprintProofSetupObjcProof SetupproofSetupBltnenumbuiltinProofproofCMYK8BIM;-printOutputOptionsCptnboolC
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 03 00 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 00 00 00 00 06 73 6c 69 63 65 73 56 6c 4c 73 00 00 00 01 4f 62 6a 63 00 00 00 01 00 00 00 00 00 05 73 6c 69 63 65 00 00 00 12 00 00 00 07 73 6c 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 Data Ascii: nullboundsObjcRct1Top longLeftlongBtomlongRghtlongslicesVlLsObjcslicesliceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTy
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: a4 f6 4d 81 fd 2d 9f d5 46 eb 83 f4 55 1e e1 d0 81 81 fd 26 af 18 40 fc ca e8 cf ab b7 6e 57 c9 55 3c d6 55 fe b4 d2 2e 61 77 24 2a 07 e8 b7 e2 84 b7 29 1b 06 cf 4f fe 75 df 14 3e a8 0c 8f eb 15 3c 01 19 2f 1f eb c2 bb 6b f1 71 a9 37 dd 16 3d ee 1f a1 22 74 69 0e 1a 8f a1 5b dd fc ee f7 33 d9 fa 34 ba 2b ab 4a a6 96 63 1f 53 da e9 10 c3 c9 9f fa 9f 6a 1d 79 62 ab b7 d6 c2 4f 67 02 3f d7 fb 29 9c cc ae a1 61 b5 c4 31 b6 b8 9d a3 86 f7 76 d5 7b 1f ea d3 de d3 b6 ed 5d d8 8d 0a 5b 6e aa 27 66 78 dd 56 b2 e0 d7 92 d3 a4 ee 1e d2 4f f2 be 93 10 ee 2c b1 e5 ec 3b 9a 51 2d fa b9 d5 a9 61 75 3b 6e 69 1c 4e bf 8a cd f5 af a2 d3 55 cc 2d b0 18 b1 a4 41 01 1e 22 7c 55 c3 5d 12 ec 73 dd b1 a2 49 ec a7 6d 18 f8 0c f5 6d 87 dc ef a2 15 dc 1a 5a 2e df c8 7b 77 37 ef 88 Data Ascii: M-FU&@nWU<U.aw$*)Ou></kq7="ti[34+JcSjybOg?)a1v{][n'fxVO,;Q-au;niNU-A"\|U]sImmZ.{w7
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: c8 c6 6b 04 bd e5 ad 63 64 09 73 88 6b 5b ee f6 fd 22 a7 f5 80 86 d9 53 58 45 9b 19 25 cd e0 99 76 fd 9f bc cf a2 b0 ec c8 be cb 7d 52 f3 bc 11 b7 ca 35 6c 2b e3 24 e4 b1 af ef 5e 84 78 4f 64 aa 95 6d ce 8b 90 d1 90 06 e1 16 56 e6 6d 3f bd f9 b1 3f bc af d7 d2 4b e4 ba 8a ec 6d 90 44 43 1e 3f 7b dc d6 fb bf b4 b0 6c c6 73 48 b2 99 1a cc 0d 35 fe 49 5a 38 3d 53 aa 07 36 a6 34 5c e3 01 9b e5 b0 7c f6 fb 53 48 ec be 32 a7 6e 8c 36 60 36 6a 16 31 ae 71 dd 8c d7 17 30 97 0f cd 6b f7 6d 76 ef a6 e6 29 dd 8a f7 c7 88 1a f8 4f 92 cc fa c3 6f 55 c6 a3 0e e7 64 96 39 ef b1 ae 6d 3e d6 b5 cc 6d 6f d1 e7 de ff 00 e7 5d bf 72 cf ab eb 2f 54 af 4b 1c cb bf ae d8 31 fd 6a f6 27 c0 0d ca dc 92 24 d3 b7 4f 4e b5 99 22 c3 f4 55 ff 00 48 ae 7e bf ad 76 48 f5 71 84 78 d7 61 Data Ascii: kcdsk["SXE%v}R5l+$^xOdmVm??KmDC?{lsH5IZ8=S64\\|SH2n6`6j1q0kmv)OoUd9m>mo]r/TK1j'$ON"UH~vHqxa
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: 17 b0 8b 2a fe 4c d9 5f f3 7b bf e1 7d 34 81 0a a3 d9 cc 0e 9d 7e 03 f8 a9 87 19 d0 c7 84 21 30 eb f0 26 11 99 b6 41 78 f6 c4 9f 3f b9 15 32 04 81 f4 8c 9d 46 a7 ef 4f bd d1 cf 23 f0 48 c7 63 33 ae a0 a5 b1 c1 92 e8 6b 89 86 8e 09 3f 72 48 62 22 60 2d cf ab ff 00 56 ec ea c5 b6 e4 5a 68 c3 2e da 08 13 65 80 7f 39 e9 6e f6 57 5f e6 7d a1 ff 00 e1 3f 9b 65 9e 9b d4 fa 27 46 37 6c ca ea 15 ed c5 69 dc da 9f ed 36 9f 07 b5 b0 e6 e2 fe ff 00 fa 7f a1 5f fa 45 d4 37 32 ca 9f 0d ac 01 00 03 a0 00 0f 6b 58 d6 b3 f9 b6 31 bf 45 a9 b2 95 68 17 c2 37 a9 6b 7d 65 c8 a3 a2 74 f6 e1 e1 c3 32 72 00 65 14 b6 48 65 0c fe 72 c8 fe 57 f3 3f f0 9f f5 b5 5b 0b a9 fd 5e eb 4c 65 7d 7a aa 1b 97 58 0c 0f b5 ce a9 c5 a3 e8 b5 b9 0c 35 fa 8c d7 e8 ba e5 77 a8 61 f4 ce b4 d6 33 2c Data Ascii: *L_{}4~!0&Ax?2FO#Hc3k?rHb"`-VZh.e9nW_}?e'F7li6_E72kX1Eh7k}et2reHerW?[^Le}zX5wa3,
2024-05-24 06:27:12 UTC	1369	IN	Data Raw: 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 35 43 39 31 42 38 32 32 32 30 35 30 31 39 41 32 31 30 36 44 30 39 39 31 42 45 39 35 37 41 46 37 22 20 78 Data Ascii: xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="5C91B822205019A2106D0991BE957AF7" x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50088	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	841	OUT	GET /ups/58350/sync?redir=true&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD4zUGYCELJAFvC_17AscA26pytyXQoFEgEBAQGEUWZaZtwr0iMA_eMAAA&S=AQAAAr0R_l4KJV9yn-8d-jhudxw
2024-05-24 06:27:12 UTC	725	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:12 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=190u~2ili;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 24-May-2025 06:27:12 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ssc-cms.33across.com/ps/?xi=99&us_privacy=&xu=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBD4zUGYCELJAFvC_17AscA26pytyXQoFEgEBAQGEUWZaZtwr0iMA_eMAAA&S=AQAAAr0R_l4KJV9yn-8d-jhudxw; Expires=Sat, 24 May 2025 12:27:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50086	37.252.173.215	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:11 UTC	1317	OUT	GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJW*q_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:12 UTC	1470	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=90&external_user_id=4426393169609033625 AN-X-Request-Uuid: 32bb1845-fd0f-43da-9bc1-09ad39be798b Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:12 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:12 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50092	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	676	OUT	GET /cksync.php?cs=1&type=bs&ovsid=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:12 UTC	867	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: visitor-id=3595336326404779000V10; Expires=Sat, 24 May 2025 06:27:12 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1;Expires=Fri, 23 May 2025 06:27:12 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:12 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:12 GMT Connection: close
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:12 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50096	54.195.158.29	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	740	OUT	GET /sync/rubicon/JQJVgZiOg-5TSAw2pZLVBw?csrc=&gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
2024-05-24 06:27:12 UTC	873	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:12 GMT Content-Length: 0 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-1BmBoUhE2oJPAcGkjgPJZ1Tqxnu2G9zZ6Hnkuw--~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50089	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	913	OUT	GET /sync?dsp_id=16&user_id=CAESEEMff3yn0Jz7yUW5T8EZNUE&google_cver=1&ssp=rtaplus&bsw_param=a9b9419f-523a-42c9-8786-88279e65c003&gdpr_consent=&gdpr=0 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid_lu=1716532031; tuuid=327352f8-d01a-4565-9f98-77efcc2259b7
2024-05-24 06:27:12 UTC	515	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:12 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sync-eu.connectad.io/pixel/1?dataid=data3&uuid=327352f8-d01a-4565-9f98-77efcc2259b7 Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50097	52.57.150.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	702	OUT	GET /match/bounce/?bid=dn2m51u&uid=o4n2DX9tTBrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:12 UTC	599	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:12 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MkJJSE13ZU01LXVyWl9oT0hlSEZmaV9SR3hGV2FQc3FOMWRnOFJfV2dPU1k&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=dn2m51u& Content-Length: 0 Date: Fri, 24 May 2024 06:27:12 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50098	198.47.127.19	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	983	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=49087993&p=156077&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNY HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SyncRTB3=1717718400%3A220; ipc=161673^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID^1^0; pi=161673:2; KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; chkChromeAb67Sec=1
2024-05-24 06:27:12 UTC	989	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156077:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1717718400%3A245_241_227_201; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:11 GMT Transfer-Encoding: chunked Connection: close
2024-05-24 06:27:12 UTC	5258	IN	Data Raw: 31 34 37 64 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 66 31 51 6e 52 53 31 67 51 65 75 61 6c 6c 4b 35 44 49 4c 66 4e 41 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 71 6d 61 70 3f 63 3d 32 34 30 26 74 70 3d 50 55 42 4d 26 74 70 69 64 3d 37 46 35 34 32 37 34 35 2d 32 44 36 30 Data Ascii: 147dPubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=f1QnRS1gQeuallK5DILfNA%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=7F542745-2D60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50095	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	1038	OUT	GET /usersync/turn/8792414088104974232?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.29%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3D%5BRX_UUID%5D%22%7D
2024-05-24 06:27:12 UTC	769	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:12 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D; path=/; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 connection: close
2024-05-24 06:27:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50104	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	1102	OUT	GET /idsync/ex/push/check?partner_id=2499&partner_device_id=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&partner_url=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fbiddername%3D215%26auid%3D1716532025945-172031150014-000201-002-004790%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D1---%26key%3D532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716532031795; TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd
2024-05-24 06:27:12 UTC	1278	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:12 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716532031795;Expires=Tue, 23 Jul 2024 06:27:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd;Expires=Tue, 23 Jul 2024 06:27:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 23 Jul 2024 06:27:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://sync.aniview.com/cookiesyncendpoint?biddername=215&auid=1716532025945-172031150014-000201-002-004790&gdpr=0&gdpr_consent=&ccpa=1---&key=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50109	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	724	OUT	GET /w/1.0/sd?id=537148856&val=ZlAzPgAAKneghQAZ&_test=ZlAzPgAAKneghQAZ HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
2024-05-24 06:27:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50111	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	788	OUT	GET /w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
2024-05-24 06:27:12 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755; Version=1; Expires=Sat, 08-Jun-2024 06:27:12 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50103	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	969	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SyncRTB3=1717718400%3A220; ipc=161673^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID^1^0; pi=161673:2; KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; chkChromeAb67Sec=1
2024-05-24 06:27:12 UTC	410	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:12 GMT Transfer-Encoding: chunked Connection: close Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50112	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	1213	OUT	GET /cookiesyncendpoint?biddername=215&auid=1716532025945-172031150014-000201-002-004790&gdpr=0&gdpr_consent=&ccpa=1---&key=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553 HTTP/1.1 Host: sync.aniview.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
2024-05-24 06:27:12 UTC	398	IN	HTTP/1.1 200 OK set-cookie: 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:12 GMT; Secure; SameSite=None set-cookie: 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; Path=/; Expires=Mon, 03 Jun 2024 06:27:12 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:12 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50115	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	819	OUT	GET /ps/?us_privacy=&xi=33&xu=3671706280332458943464 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:12 UTC	678	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:12 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP016 location: https://events-ssc.33across.com/match?bidder_id=33&external_user_id=3671706280332458943464&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Fri, 24 May 2024 06:27:12 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50113	109.206.161.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	721	OUT	GET /40425ffe10103241a433b21c10aa797b.gif?puid=390d70214744565173549ca7ef99c13d6d3019f2 HTTP/1.1 Host: sync.e-volution.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_usr=dea6b5ce-8eb0-4fbd-a447-2f5d230e440b; v_red=4
2024-05-24 06:27:12 UTC	665	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:12 GMT Content-Length: 0 Connection: close Set-Cookie: v_usr=dea6b5ce-8eb0-4fbd-a447-2f5d230e440b; path=/; domain=.e-volution.ai; expires=Fri, 07 Jun 2024 06:27:12 GMT;SameSite=None;Secure Set-Cookie: v_red=4\|38; path=/; domain=.e-volution.ai; expires=Fri, 07 Jun 2024 06:27:12 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.e-volution.ai%2F3b2daa038df3c30052752dd6f56bb9f0.gif%3Fpuid%3D%24UID%26gdpr%3D[GDPR]%26gdpr_consent%3D[GDPR_CONSENT]%26us_privacy%3D[CCPA_CONSENT]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50124	104.22.54.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	1290	OUT	GET /pixel/1?dataid=data3&uuid=327352f8-d01a-4565-9f98-77efcc2259b7 HTTP/1.1 Host: sync-eu.connectad.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sync-eu.connectad.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6IlkrNmpleFlWRWFxZ3RUd1MyYStDa3c9PSIsInZhbHVlIjoiUEVGRS83UzR3MS9tbXBLdHlmWWpHOVNqMGx3U1BaL1p2ZlFLRW1sakhYM2JQSGhzS3VHeE1KbVBXZlFzazFYeTI3cHhONnZubEsvK2xxT0FBNUZva05qQ1BSaVF3NFY3Qm5QNEdoNzUrN2taVGFEOWE2WmhDUUF3N2Z1dnh3elZhQjhld0h5dmhlRXBSREw2OXhOS2g4enZPc0pnNGc5YTduWlF1VTAvOW9XTUtpV0FRZ2JvLzlnLzQyU2pUWFV5RGFuUm9ld200REtBY1l1bXhzUE50dmZaWlp1TytWY3gzY29DOGNDR0lRQT0iLCJtYWMiOiJiNmVlYjNlYjI4ZDFmN2ExNjFkZTNjMDExYWFiMTgzNjJmMzJhOTM5MDBjMGFlMGYzNzZhYThjNDEwYmQ1ZTY1IiwidGFnIjoiIn0%3D
2024-05-24 06:27:13 UTC	971	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:12 GMT Connection: close set-cookie: id=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; expires=Sun, 23 Jun 2024 16:27:12 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f57a964393-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50127	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	1032	OUT	GET /m?cdsp=43070&c=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:12 UTC	872	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"43070":1716532032,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:12 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f579418c41-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50128	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	805	OUT	GET /m?cdsp=665953&c=f102e783-2700-4bb9-aa0d-8e4779f6d278 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:12 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"665953":1716532032,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:12 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f58d6e0f98-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50126	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	784	OUT	GET /m?cdsp=796887&c=212620189715653 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:12 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"796887":1716532032,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:12 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f59ac8439a-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50125	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	848	OUT	GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=4426393169609033625 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:12 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:12 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50131	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	812	OUT	GET /m?cdsp=779131&c=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=0 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:12 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"779131":1716532032,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:12 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f59e17c404-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50130	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	805	OUT	GET /m?cdsp=675043&c=0ff1c4a5-e08d-421b-badf-e6142feb667b HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:13 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"675043":1716532032,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:12 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f5ac9e8c72-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50132	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	853	OUT	GET /m?cdsp=501037&c=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=mgid&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:12 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"501037":1716532032,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:12 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f588560ca4-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50118	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	833	OUT	GET /ps/?xi=99&us_privacy=&xu=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD~A HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:12 UTC	694	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:12 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP004 location: https://events-ssc.33across.com/match?bidder_id=99&external_user_id=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD%7EA&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Fri, 24 May 2024 06:27:12 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50134	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	777	OUT	GET /m?cdsp=665953&c=%FD4124} HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:13 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:12 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:12 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b37f5c9be32ca-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50114	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid_lu=1716532031; tuuid=327352f8-d01a-4565-9f98-77efcc2259b7
2024-05-24 06:27:13 UTC	369	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:13 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sonata-notifications.taptapnetworks.com/web/cookie/bidswitch/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50138	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	495	OUT	GET /w/1.0/sd?id=537072991&val=CAESEKxcbJCz5zyxgFEK_iiZGYg&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK
2024-05-24 06:27:13 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50120	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	407	OUT	GET /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#2
2024-05-24 06:27:13 UTC	240	IN	HTTP/1.1 400 Bad Request date: Fri, 24 May 2024 06:27:13 GMT vary: Accept-Encoding content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:13 UTC	409	IN	Data Raw: 31 39 32 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 22 72 65 71 75 65 73 74 5f 66 6f 72 6d 61 74 5f 69 6e 76 61 6c 69 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 32 43 6f 6e 74 72 6f 6c 6c 65 72 2e 6d 75 6c 74 69 70 6c 65 78 46 65 74 63 68 56 33 28 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 77 65 62 2e 6d 75 6c 74 69 Data Ascii: 192{"error":{"code":"request_format_invalid","message":"Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.multiplexFetchV3(io.id5.fetch.request.web.multi
2024-05-24 06:27:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50137	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	1744	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532026400&plt=2&asid=64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C650c2ceaf96af061180a223b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C64e4aab4c5 [TRUNCATED] Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
2024-05-24 06:27:13 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:13 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50142	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	1027	OUT	GET /cookiesyncendpoint?biddername=5&pid=59c9148628a0612da3689288&key=LWKAUNHL-D-BFYD HTTP/1.1 Host: sync.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95
2024-05-24 06:27:13 UTC	324	IN	HTTP/1.1 200 OK set-cookie: 1_C_5=LWKAUNHL-D-BFYD; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:13 GMT; Secure; SameSite=None set-cookie: 1_C_5=LWKAUNHL-D-BFYD; Path=/; Expires=Mon, 03 Jun 2024 06:27:13 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:13 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50143	104.18.38.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	349	OUT	GET /m129331.jpg HTTP/1.1 Host: digiadsply.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/jpeg Content-Length: 65475 Connection: close CF-Ray: 888b37f6cf787d1a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 995140 Cache-Control: max-age=2592000 ETag: "40b1e7a3b7e6385c8cec8c5ecc198023" Expires: Mon, 24 Jun 2024 06:27:13 GMT Last-Modified: Tue, 16 May 2023 18:04:36 GMT Via: 1.1 4e3df844337032b56b8434990b0f76ca.cloudfront.net (CloudFront) Cf-Bgj: h2pri X-Amz-Cf-Id: zHJu7LWFlDd4-8mVVbOCAWUe_CWREdAwoKPOGUPQ29EOT1xD37ijcQ== X-Amz-Cf-Pop: EWR53-C2 x-amz-server-side-encryption: AES256 x-amz-storage-class: REDUCED_REDUNDANCY X-Cache: RefreshHit from cloudfront Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:13 UTC	651	IN	Data Raw: ff d8 ff e1 11 fb 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 26 00 00 01 01 00 03 00 00 00 01 01 40 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 35 3a 31 36 20 32 30 3a 34 36 3a 35 30 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*&@(12i ''Adobe Photoshop CS6 (Windows)2023:05:16 20:46:500
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 Data Ascii: 3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw
2024-05-24 06:27:13 UTC	1170	IN	Data Raw: af d3 54 ba 8e 10 c5 c0 65 1e a3 ac 0f b1 a0 17 b8 b9 c1 ac fd 29 6b 9e ef f8 46 2b d8 58 b9 18 74 56 db 6f f5 c3 5a 00 d0 06 81 f9 fb 4c 95 4b a9 3c d8 f6 b4 99 68 92 df 0f dd fe 08 0d e9 39 28 46 fa ec e2 e4 37 42 ae d7 4f da 3a 5e c6 e9 a4 21 1a 3d 67 fa 60 ea 55 bc 2c 3c bc 53 1b f7 56 7f 36 14 a1 ae e7 74 9c 3c 8c 63 69 b4 6d 6f 65 a3 f5 7e 1f eb 6d e3 71 fc aa 5d 47 d4 18 ee d9 a6 8a 1f 55 58 e0 db 03 b5 32 53 81 df c9 4e a1 66 a5 5b ae 86 9a c1 84 07 08 71 f8 ad 3a 18 0d 0d 50 73 27 d3 1f 36 5c 3b 97 36 da 00 ec a9 ba 91 ea b7 4e eb 6a da 74 54 6c a8 0b 41 f3 55 41 66 21 ff d2 e7 32 7d d8 4f 1f 72 c5 e9 86 32 d9 e6 e5 b6 e0 5d 8e f6 f9 4a c2 c3 96 e5 37 c9 f0 98 7a 25 e8 3a c8 27 19 ff 00 d4 59 b8 ba f4 e6 f9 58 16 a7 54 f7 62 93 3f 98 b2 f0 75 e9 Data Ascii: Te)kF+XtVoZLK<h9(F7BO:^!=g`U,<SV6t<cimoe~mq]GUX2SNf[q:Ps'6\;6NjtTlAUAf!2}Or2]J7z%:'YXTb?u
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: 5f 24 b1 c4 0f 36 fb c7 fd 4a e6 b1 2c d9 93 5b f8 f7 41 f8 1f 6f f1 40 6c a6 fe 65 db ac 77 1e d0 62 34 e7 e0 a8 49 24 f8 78 1e 11 6e 71 3e a3 bf d7 94 16 13 e1 3e 29 05 32 1f 93 41 3f f5 0f 4e d2 34 f2 3d fe 07 94 d0 d2 3f 21 ff 00 c9 24 64 0f 3f f5 d5 15 33 f3 49 29 d7 cb 95 26 09 3c c0 82 7c 78 49 0b 26 fc 88 df 67 12 06 f9 9e fb 5d 1d b8 d3 f9 49 bd 20 00 97 6a 7b 06 99 99 db b7 f7 7d ff 00 4a bf df 49 4c 1d e1 d9 26 ea 02 21 a4 03 ee 2e fc e0 34 00 18 12 c3 b9 c7 db bb f9 4d 52 6f a1 5b dc 0e db 18 5c 20 7b 89 68 fc ee 23 7a 4a 44 0e b0 38 e4 7f 14 9e 3d 84 f9 11 f7 6a b7 7a 47 41 af ab 61 da e6 9f 46 d6 80 68 c8 71 22 a2 58 5b 5b 99 75 61 ae fd 1d 9e ff 00 d3 37 df 5a c5 c9 a6 ec 6b ec a6 f6 1a ed a9 c6 bb ea 3c b5 c0 c7 6f e5 21 69 20 80 09 ea 8e Data Ascii: _$6J,[Ao@lewb4I$xnq>>)2A?N4=?!$d?3I)&<\|xI&g]I j{}JIL&!.4MRo[\ {h#zJD8=jzGAaFhq"X[[ua7Zk<o!i
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: c7 b5 be a5 04 f2 00 3b 6c a5 e7 f7 ab 77 fd 0d 8b 0d 24 a1 76 56 e4 aa d7 77 62 de a6 eb 2a 82 0c a3 7d 5d 76 eb ad 27 92 b0 52 4f 62 7f ff d9 ff ed 1a 00 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 27 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 fc c0 00 38 42 49 4d 04 25 00 00 00 00 00 10 2b 9a 5a 16 cc d9 97 4a 03 61 e6 a6 d5 4e 9d 8f 38 42 49 4d 04 3a 00 00 00 00 00 e5 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 Data Ascii: ;lw$vVwb*}]v'RObPhotoshop 3.08BIM'Z%GZ%GZ%GZ%G8BIM%+ZJaN8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitbool
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: 00 00 06 00 01 00 00 00 09 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 4d 00 00 00 06 00 00 00 00 00 00 00 00 00 00 03 00 00 00 04 00 00 00 00 0c 00 61 00 73 00 39 00 38 00 64 00 37 00 39 00 71 00 34 00 77 00 65 00 35 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 04 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 Data Ascii: 8BIM@@8BIM8BIMMas98d79q4we5nullboundsObjcRct1Top long
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e0 3a a0 1b ed 8e 25 5f e9 3e ec 51 f0 55 3a d3 62 cb 0f 88 10 ac 74 42 4d 21 be 7c 20 37 fa a4 ec 10 f5 96 c0 a4 f6 4d 81 fd 2d 9f d5 46 eb 83 f4 55 1e e1 d0 81 81 fd 26 af 18 40 fc ca e8 cf ab b7 6e 57 c9 55 3c d6 55 fe b4 d2 2e 61 77 24 2a 07 e8 b7 e2 84 b7 29 1b 06 cf 4f fe Data Ascii: 7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?:%_>QU:btBM!\| 7M-FU&@nWU<U.aw$*)O
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: 63 69 b4 6d 6f 65 a3 f5 7e 1f eb 6d e3 71 fc aa 5d 47 d4 18 ee d9 a6 8a 1f 55 58 e0 db 03 b5 32 53 81 df c9 4e a1 66 a5 5b ae 86 9a c1 84 07 08 71 f8 ad 3a 18 0d 0d 50 73 27 d3 1f 36 5c 3b 97 36 da 00 ec a9 ba 91 ea b7 4e eb 6a da 74 54 6c a8 0b 41 f3 55 41 66 21 ff d2 e7 32 7d d8 4f 1f 72 c5 e9 86 32 d9 e6 e5 b6 e0 5d 8e f6 f9 4a c2 c3 96 e5 37 c9 f0 98 7a 25 e8 3a c8 27 19 ff 00 d4 59 b8 ba f4 e6 f9 58 16 a7 54 f7 62 93 3f 98 b2 f0 75 e9 ce f2 78 46 7b 95 07 67 2e 1d d3 fe 01 61 52 3f 44 e1 e4 b7 ad 8f b0 12 60 00 24 93 c0 5c d3 b3 99 43 1c d6 00 f7 91 1e 41 09 82 48 f2 48 35 6d 87 b1 ce c8 c6 6b 04 bd e5 ad 63 64 09 73 88 6b 5b ee f6 fd 22 a7 f5 80 86 d9 53 58 45 9b 19 25 cd e0 99 76 fd 9f bc cf a2 b0 ec c8 be cb 7d 52 f3 bc 11 b7 ca 35 6c 2b e3 24 e4 Data Ascii: cimoe~mq]GUX2SNf[q:Ps'6\;6NjtTlAUAf!2}Or2]J7z%:'YXTb?uxF{g.aR?D`$\CAHH5mkcdsk["SXE%v}R5l+$
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: d2 83 d7 9c cc 78 d1 e3 e4 53 b7 32 b2 3d a4 15 ca 5d 95 46 c1 e9 be 0f c5 57 19 56 0d 59 69 1f 05 1c cf 10 aa 5f 11 45 ec dd 92 ef 05 56 db ad 24 40 d5 73 1f 6f c9 68 d2 d3 f0 5a 3d 27 2a dc 8d e2 c7 6e 23 85 1f 01 5e 4d 3f ff d5 e6 f0 fd cd 23 b1 31 f7 e8 b9 12 d2 c7 96 9f a4 c2 47 dc ba ac 5b 08 6b a3 80 57 3d d4 59 e9 e7 5d fb be ab fe e9 dd ff 00 7f 4d 1b a4 b1 77 b9 a7 cc a1 b4 47 6d 3c 54 99 2e 63 5a dd 5c 74 00 6a 56 96 37 41 ce c8 13 be ba e7 b3 c9 27 fe 83 4a 3b 22 9c f0 3b f0 a4 40 20 b7 c7 85 b6 cf a9 bd 4d e0 1a ef c7 77 91 2f 6f e3 e9 96 aa 7d 47 a1 75 5e 98 3d 4c ca 0b 69 98 17 b0 8b 2a fe 4c d9 5f f3 7b bf e1 7d 34 81 0a a3 d9 cc 0e 9d 7e 03 f8 a9 87 19 d0 c7 84 21 30 eb f0 26 11 99 b6 41 78 f6 c4 9f 3f b9 15 32 04 81 f4 8c 9d 46 a7 ef 4f Data Ascii: xS2=]FWVYi_EV$@sohZ='n#^M?#1G[kW=Y]MwGm<T.cZ\tjV7A'J;";@ Mw/o}Gu^=LiL_{}4~!0&Ax?2FO
2024-05-24 06:27:13 UTC	1369	IN	Data Raw: 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 Data Ascii: MP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/Resource

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50123	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	603	OUT	GET /pixel?google_nid=openx&google_hm=ZTkwNDY0YjctYmNiMC0yYmY1LWVkMDAtNmUwZmE3Yjc1OGM3 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:13 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 24 May 2024 06:27:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:13 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50141	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:12 UTC	704	OUT	GET /ecm3?id=LWKAUNHL-D-BFYD&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:13 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DTW3CT7XNAHY2TTY0X5C Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50139	52.46.155.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	488	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9dbdcb00-696d-ceab-38ee-b62105665d47&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:13 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: SSRBSGBV6QQSEDWWV995 Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 06:27:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50133	54.195.158.29	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	504	OUT	GET /sync/openx/51acd139-e56b-e718-c937-224392025bee?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
2024-05-24 06:27:13 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50144	52.95.122.74	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	460	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:13 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: X91CMAZSDZRDVAB5XS1V Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 06:27:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50119	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	626	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	395	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:13 GMT location: https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp&gdpr=0&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 24 May 2024 06:37:13 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50146	178.250.1.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	874	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	451	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 24 May 2024 06:27:13 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ server-processing-duration-in-ticks: 94327 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50149	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	698	OUT	GET /ecm3?ex=rubiconprojectHMT&id=YAm-fjTBRB2GxG2EiqWDgw&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:13 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: A9VK8SR7K1GZ52RZBXPK Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50147	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	860	OUT	GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=7F542745-2D60-41EB-9A96-52B90C82DF34&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:13 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2D1GVDWJ5XTDFHTH9BHT Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 06:27:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50153	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	889	OUT	GET /match?bidder_id=33&external_user_id=3671706280332458943464&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:13 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:13 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50140	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	925	OUT	GET /csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fsync.aniview.com%2Fcookiesyncendpoint%3Fauid%3D1716532025945-172031150014-000201-002-004790%26biddername%3D200%26key%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	636	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:13 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D; path=/; expires=Sat, 24 May 2025 06:27:13 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.aniview.com/cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=200&key=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50152	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	1157	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ipc=161673^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3FpartnerID%3D161673%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fcm.mgid.com%252Fm%253Fcdsp%253D712807%2526c%253D%2523PMUID^1^0; KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; chkChromeAb67Sec=2; pi=156077:3; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254
2024-05-24 06:27:13 UTC	882	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&partnerID=161673&pmc=1&pr=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D712807%26c%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=161673:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:12 GMT Content-Length: 233 Connection: close
2024-05-24 06:27:13 UTC	233	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 61 72 74 6e 65 72 49 44 3d 31 36 31 36 37 33 26 61 6d 70 3b 70 6d 63 3d 31 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 6d 67 69 64 2e 63 6f 6d 25 32 46 6d 25 33 46 63 64 73 70 25 33 44 37 31 32 38 30 37 25 32 36 63 25 33 44 37 46 35 34 32 37 34 35 2d 32 44 36 30 2d 34 31 45 42 2d 39 41 39 36 2d 35 32 42 39 30 43 38 32 44 46 33 34 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 44 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&partnerID=161673&pmc=1&pr=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D712807%26c%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50151	37.252.173.215	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	1320	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJWq_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:13 UTC	1510	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=4426393169609033625&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 3dd819f6-5387-4953-9e79-56480fcd0cd5 Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:13 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:13 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:13 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50150	54.157.238.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	704	OUT	GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30&gdpr=0 HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	495	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 24 May 2024 06:27:13 GMT Location: https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=31c13c99-d8e7-447c-b9e0-64fdf07947f8&expires=30&gdpr=0 Set-Cookie: cu=31c13c99-d8e7-447c-b9e0-64fdf07947f8\|1716532033710; Path=/; Domain=ipredictive.com; Expires=Sat, 24 May 2025 06:27:13 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 9e34cd3b-9dae-4f36-9bef-ba175fb8a2db Content-Length: 155 Connection: Close
2024-05-24 06:27:13 UTC	155	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 37 31 34 39 26 61 6d 70 3b 6e 69 64 3d 32 38 36 31 26 61 6d 70 3b 70 75 74 3d 33 31 63 31 33 63 39 39 2d 64 38 65 37 2d 34 34 37 63 2d 62 39 65 30 2d 36 34 66 64 66 30 37 39 34 37 66 38 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=31c13c99-d8e7-447c-b9e0-64fdf07947f8&expires=30&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50158	34.120.133.55	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	598	OUT	GET /api/identity/envelope?pid=105 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	510	IN	HTTP/1.1 451 Unavailable For Legal Reasons Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://pjnewsletter.com Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:27:13 GMT Content-Length: 44 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:13 UTC	44	IN	Data Raw: 6d 75 73 74 20 62 65 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 27 63 74 27 20 61 6e 64 20 27 63 76 27 20 70 61 72 61 6d 65 74 65 72 0a Data Ascii: must be exactly one 'ct' and 'cv' parameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50156	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	687	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 135 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#2
2024-05-24 06:27:13 UTC	135	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 38 30 30 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 33 37 31 7d 2c 22 62 6f 75 6e 63 65 22 3a 74 72 75 65 7d Data Ascii: {"name":"id5Id","storage":{"type":"html5","name":"id5id","expires":90,"refreshInSeconds":28800},"params":{"partner":371},"bounce":true}
2024-05-24 06:27:13 UTC	418	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://pjnewsletter.com vary: Origin access-control-allow-credentials: true content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:13 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:13 UTC	201	IN	Data Raw: 43 33 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 33 37 31 2e 6a 73 6f 6e 22 2c 22 6f 76 65 72 72 69 64 65 73 22 3a 7b 22 70 62 45 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 7d 7d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a Data Ascii: C3{"fetchCall":{"url":"https://id5-sync.com/g/v2/371.json","overrides":{"pbExtensions":{"bounce":{"setCookie":false}}}},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}
2024-05-24 06:27:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50154	91.228.74.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	828	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:13 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EJ0BCwH2K_ijAA; expires=Thu, 22-Aug-2024 06:27:13 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=66503341-c2a82-65fef-9a444; expires=Tue, 24-Jun-2025 06:27:13 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50155	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	814	OUT	GET /ul_cb/sync?ssp=the33across&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; c=1716532031; tuuid_lu=1716532031
2024-05-24 06:27:13 UTC	568	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:13 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch&ttd_tpi=1&ttd_puid=the33across&gdpr=&gdpr_consent= Set-Cookie: tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; path=/; expires=Sat, 24-May-2025 06:27:13 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716532033; path=/; expires=Sat, 24-May-2025 06:27:13 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50164	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	764	OUT	GET /i/231/8.gif?o=api&id5id=ID5U60D8kuyqjuyq4y-AGkkfd2s00CjK_Y8Nw4MavDQ5GChKe5LEBa3C9wfjxiCMq-9&gdpr_consent=undefined&gdpr=false HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#2
2024-05-24 06:27:14 UTC	1636	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#3; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:13 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:13 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://dis.eu.criteo.com/dis/usersync.aspx?r=30&p=59&cp=id5&cu=1&url=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F203%2F7%2F2.gif%3Fpuid%3D%40%40CRITEO_USERID%40%40%26gdpr%3D0%26gdpr_consent%3D transfer-encoding: chunked date: Fri, 24 May 2024 06:27:13 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50163	54.164.74.54	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	718	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:13 UTC	1391	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 24 May 2024 06:27:13 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCDB5sCyBjABOgT87-jmQgSizWKw.pSN%2Fns5GefLyw4b1%2FXKnrIL5XKvbzuNSVC2Vnxrwstc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCDB5sCyBjABOgT87-jmQgSizWKw.pSN%2Fns5GefLyw4b1%2FXKnrIL5XKvbzuNSVC2Vnxrwstc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 188 Connection: Close
2024-05-24 06:27:13 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 77 44 52 69 33 59 31 58 57 75 64 74 79 65 63 35 4b 4b 76 6a 37 67 67 75 65 36 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50159	185.89.210.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	1256	OUT	GET /getuid?https%3A%2F%2Fsync.e-volution.ai%2F3b2daa038df3c30052752dd6f56bb9f0.gif%3Fpuid%3D%24UID%26gdpr%3D[GDPR]%26gdpr_consent%3D[GDPR_CONSENT]%26us_privacy%3D[CCPA_CONSENT] HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJW*q_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:14 UTC	1519	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.e-volution.ai/3b2daa038df3c30052752dd6f56bb9f0.gif?puid=4426393169609033625&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&us_privacy=[CCPA_CONSENT] AN-X-Request-Uuid: 331aabd9-11fd-45c4-9039-866ee9cf5680 Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:13 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:13 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:13 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50161	85.114.159.93	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:13 UTC	720	OUT	GET /cookie/?ssp=9&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:14 UTC	519	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:14 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7372448948567406736; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372448948567406736&gdpr=0&gdpr_consent=
2024-05-24 06:27:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50169	34.36.214.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	888	OUT	GET /topics_frame.html?bidder=openx HTTP/1.1 Host: pa.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
2024-05-24 06:27:14 UTC	791	IN	HTTP/1.1 200 OK x-goog-generation: 1705934323795552 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1036 x-goog-hash: crc32c=eLLIGA== x-goog-hash: md5=xTeeNeJn3qzFLgbtD1+oHw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1036 X-GUploader-UploadID: ABPtcPp_o7APlajtu350q5Idz0ZCko0UUGe9qV8J6L5XLXneDXzLe9S_qiy7HAs77muN67iSUvI Server: UploadServer Date: Fri, 24 May 2024 05:51:02 GMT Age: 2172 Last-Modified: Mon, 22 Jan 2024 14:38:43 GMT ETag: "c5379e35e267deacc52e06ed0f5fa81f" Content-Type: text/html; charset=utf-8 Vary: Origin Cache-Control: public,max-age=3600 x-allow-fledge: true supports-loading-mode: fenced-frame Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:14 UTC	599	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 41 50 49 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 54 6f 70 69 63 73 28 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 20 20 20 20 20 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 20 69 6e 20 64 6f 63 75 6d 65 6e 74 20 26 26 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 Data Ascii: <!DOCTYPE html><html lang="en"><head> <title>Topics API</title> <meta charset="utf-8"></head><script> async function getTopics() { try { if ( "browsingTopics" in document && document.featurePolicy.allowsFeature("browsi
2024-05-24 06:27:14 UTC	437	IN	Data Raw: 6f 70 69 63 73 28 29 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 45 72 72 6f 72 3a 22 2c 20 65 72 72 6f 72 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 74 6f 70 69 63 73 20 3d 20 61 77 61 69 74 20 67 65 74 54 6f 70 69 63 73 28 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0a 20 20 20 20 20 20 73 65 67 6d 65 6e 74 3a 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 6d 61 69 6e 3a 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 Data Ascii: opics() not supported"); } } catch (error) { console.log("Error:", error); } } (async function () { const topics = await getTopics(); const message = JSON.stringify({ segment: { domain: window.location.hostna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50166	52.57.22.80	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	841	OUT	GET /web/cookie/bidswitch/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: sonata-notifications.taptapnetworks.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:14 UTC	532	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:14 GMT Content-Type: image/gif Content-Length: 45 Connection: close Server: nginx/1.18.0 (Ubuntu) Content-Disposition: inline Location: https://x.bidswitch.net/sync?dsp_id=413&ssp=pubmatic&user_id=csonata_9e3fb671-cc11-4e32-a9a9-a424db4bec5f&bsw_param=327352f8-d01a-4565-9f98-77efcc2259b7&expires=10&gdpr=0&gdpr_consent=&gdpr_pd= Set-Cookie: SONATA_ID=csonata_9e3fb671-cc11-4e32-a9a9-a424db4bec5f; Domain=taptapnetworks.com; Path=/; Max-Age=31536000; SameSite=None; Secure
2024-05-24 06:27:14 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50171	216.239.36.181	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	1421	OUT	POST /g/collect?v=2&tid=G-6EDY1BF25J&gtm=45je45m0v886867345za200zb848813796&_p=1716532007549&gcd=13l3l3l3l1&npa=0&dma=0&cid=1010184661.1716532012&ecid=1618387984&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEI&_s=2&sid=1716532012&sct=1&seg=0&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=Jewish%20Voters%20Blast%20Biden%20with%20Eye-Opening%20Move%20-%20This%20Could%20Be%20an%20Election%20Game-Changer&en=ad_impression&ep.post_id=null&ep.publish_date=null&ep.query_id=CLq0zIjUpYYDFSfKuwgdu4UIMQ&_et=6451&tfd=19604 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:14 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pjnewsletter.com Date: Fri, 24 May 2024 06:27:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50172	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	1535	OUT	POST /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive Content-Length: 446 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD
2024-05-24 06:27:14 UTC	446	OUT	Data Raw: 5b 22 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 26 73 74 61 67 69 64 3d 36 35 30 30 30 36 31 62 33 31 37 61 65 63 61 63 30 62 30 36 34 62 33 34 26 73 74 70 6c 69 64 3d 36 35 30 30 30 36 31 62 61 34 32 31 31 62 34 66 61 65 30 61 34 31 32 34 26 64 34 3d 31 26 64 35 3d 30 26 70 6c 74 3d 32 26 65 3d 69 6e 76 65 6e 74 6f 72 79 52 65 71 75 65 73 74 22 2c 22 26 6e 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 6e 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 26 6e 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 26 65 3d 72 Data Ascii: ["pid=64db4ddc8904509d8303ce64&cid=6500054a17fa3a03e7086f47&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d4=1&d5=0&plt=2&e=inventoryRequest","&nid=64db4ddc8904509d8303ce64&ncid=6500054a17fa3a03e7086f47&nasid=64ddec09ef5e241fc1061287&e=r
2024-05-24 06:27:14 UTC	251	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:14 GMT access-control-allow-origin: * content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50174	74.119.117.16	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	880	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:14 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Fri, 24 May 2024 06:27:14 GMT server: Kestrel cache-control: no-cache expires: Fri, 24 May 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 262113 strict-transport-security: max-age=31536000; preload; connection: close
2024-05-24 06:27:14 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50167	18.195.237.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	631	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1652 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:14 UTC	1652	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 37 66 31 32 37 66 38 2d 61 39 63 63 2d 34 64 35 61 2d 62 35 36 66 2d 62 33 62 34 35 35 62 30 39 38 64 64 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 37 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e Data Ascii: {"id":"57f127f8-a9cc-4d5a-b56f-b3b455b098dd","at":1,"cur":["USD"],"tmax":7000,"site":{"domain":"pjnewsletter.com","page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","ref":null,"publisher":{"domain":"pjn
2024-05-24 06:27:14 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:14 GMT Content-Type: application/json; charset=utf-8 Content-Length: 476 Connection: close Set-Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121; Max-Age=2592000; Expires=Sun, 23 Jun 2024 06:27:14 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true
2024-05-24 06:27:14 UTC	476	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 2e 62 69 6e 67 2e 63 6f 6d 2f 63 2e 67 69 66 3f 52 65 64 33 3d 53 54 4d 53 5f 70 64 26 75 69 64 3d 39 61 64 32 61 39 33 61 2d 64 34 64 30 2d 34 34 33 30 2d 38 38 65 37 2d 37 66 65 33 38 65 63 31 64 31 32 31 22 2c 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 32 2f 72 6d 70 73 73 70 3f 73 75 62 3d 73 68 61 72 65 74 68 72 6f 75 67 68 22 2c 22 68 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://c.bing.com/c.gif?Red3=STMS_pd&uid=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121","https://sync.1rx.io/usersync2/rmpssp?sub=sharethrough","h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50170	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	654	OUT	POST /cdb?profileId=207&av=36&wv=8.48.0&cb=97693315726&lsavail=1 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 2535 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:14 UTC	2535	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 30 39 63 36 30 36 38 2d 66 64 62 64 2d 34 38 35 34 2d 61 30 63 66 2d 65 35 37 30 31 65 32 31 38 34 62 35 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 7d 2c 22 72 65 67 73 22 3a 7b 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 36 30 63 39 66 33 62 35 63 61 64 65 33 66 22 2c 22 69 6d 70 69 64 22 3a 22 61 76 5f 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 2d 36 35 32 66 37 63 38 34 64 66 Data Ascii: {"id":"609c6068-fdbd-4854-a0cf-e5701e2184b5","publisher":{"url":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage"},"regs":{},"slots":[{"slotid":"60c9f3b5cade3f","impid":"av_64ddec09ef5e241fc1061287-652f7c84df
2024-05-24 06:27:14 UTC	308	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:14 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50173	52.57.150.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	778	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=dn2m51u&google_gid=CAESEK6XEEHIgPaZKgYSt5TDsHM&google_cver=1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:14 UTC	546	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:14 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u& Content-Length: 0 Date: Fri, 24 May 2024 06:27:14 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50180	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	1341	OUT	GET /cookiesyncendpoint?auid=1716532025945-172031150014-000201-002-004790&biddername=200&key=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1 Host: sync.aniview.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_5=LWKAUNHL-D-BFYD
2024-05-24 06:27:14 UTC	384	IN	HTTP/1.1 200 OK set-cookie: 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:14 GMT; Secure; SameSite=None set-cookie: 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003; Path=/; Expires=Mon, 03 Jun 2024 06:27:14 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:14 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50182	216.239.36.181	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:14 UTC	1432	OUT	POST /g/collect?v=2&tid=G-6EDY1BF25J&gtm=45je45m0v886867345za200zb848813796&_p=1716532007549&gcd=13l3l3l3l1&npa=0&dma=0&tcfd=10000&cid=1010184661.1716532012&ecid=1618387984&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEI&_s=3&sid=1716532012&sct=1&seg=1&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=Jewish%20Voters%20Blast%20Biden%20with%20Eye-Opening%20Move%20-%20This%20Could%20Be%20an%20Election%20Game-Changer&en=ad_impression&ep.post_id=null&ep.publish_date=null&ep.query_id=CMPCsYjUpYYDFYjluwgdQlYNwQ&_et=7061&tfd=24657 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:14 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pjnewsletter.com Date: Fri, 24 May 2024 06:27:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50184	109.206.161.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	769	OUT	GET /3b2daa038df3c30052752dd6f56bb9f0.gif?puid=4426393169609033625&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&us_privacy=[CCPA_CONSENT] HTTP/1.1 Host: sync.e-volution.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: v_usr=dea6b5ce-8eb0-4fbd-a447-2f5d230e440b; v_red=4\|38
2024-05-24 06:27:15 UTC	675	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 24 May 2024 06:27:15 GMT Content-Length: 0 Connection: close Set-Cookie: v_usr=dea6b5ce-8eb0-4fbd-a447-2f5d230e440b; path=/; domain=.e-volution.ai; expires=Fri, 07 Jun 2024 06:27:15 GMT;SameSite=None;Secure Set-Cookie: v_red=4\|38\|44; path=/; domain=.e-volution.ai; expires=Fri, 07 Jun 2024 06:27:15 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://us.ck-ie.com/oiad745.gif?gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&us_privacy=[US_PRIVACY]&redir=https%3A%2F%2Fsync.e-volution.ai%2F159323af27f5e0e6efefdcdf238951e6.gif%3Fpuid%3D%7B%24PARTNER_UID%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50177	162.19.138.120	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	555	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:15 UTC	378	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://pjnewsletter.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:15 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:15 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 6a 33 36 57 74 37 76 78 4d 2b 73 32 76 71 42 78 45 64 76 61 4c 77 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"j36Wt7vxM+s2vqBxEdvaLw=="}
2024-05-24 06:27:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50179	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	1125	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
2024-05-24 06:27:15 UTC	657	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:15 GMT; path=/ Set-Cookie: PugT=1716532035; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50181	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	1119	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=4426393169609033625&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
2024-05-24 06:27:15 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:13 GMT; path=/ Set-Cookie: PugT=1716532033; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50178	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	1127	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
2024-05-24 06:27:15 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:13 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:13 GMT; path=/ Set-Cookie: PugT=1716532033; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50176	185.64.190.81	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	1065	OUT	GET /AdServer/SPug?gdpr=0&partnerID=161673&pmc=1&pr=https%3A%2F%2Fcm.mgid.com%2Fm%3Fcdsp%3D712807%26c%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
2024-05-24 06:27:15 UTC	386	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:15 GMT Transfer-Encoding: chunked Connection: close Location: https://cm.mgid.com/m?cdsp=712807&c=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50188	178.250.1.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	739	OUT	GET /dis/usersync.aspx?r=30&p=59&cp=id5&cu=1&url=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F203%2F7%2F2.gif%3Fpuid%3D%40%40CRITEO_USERID%40%40%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: dis.eu.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:15 UTC	668	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 24 May 2024 06:27:15 GMT server: Kestrel cache-control: no-cache expires: Fri, 24 May 2024 00:00:00 GMT location: https://id5-sync.com/c/231/203/7/2.gif?puid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; expires=Wed, 18 Jun 2025 06:27:15 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1495126 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50189	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	1121	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372448948567406736&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3
2024-05-24 06:27:15 UTC	616	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:15 GMT; path=/ Set-Cookie: PugT=1716532035; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50190	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	934	OUT	GET /sync?dsp_id=413&ssp=pubmatic&user_id=csonata_9e3fb671-cc11-4e32-a9a9-a424db4bec5f&bsw_param=327352f8-d01a-4565-9f98-77efcc2259b7&expires=10&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:15 UTC	615	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:15 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50192	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:15 UTC	1536	OUT	POST /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive Content-Length: 1831 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD
2024-05-24 06:27:15 UTC	1831	OUT	Data Raw: 5b 22 26 63 6f 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 6e 69 64 3d 35 39 63 39 31 34 38 36 32 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 6f 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 26 6e 63 69 64 3d 36 34 64 64 65 62 39 35 34 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 63 6f 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 26 6e 61 73 69 64 3d 36 35 30 61 66 66 63 32 64 30 31 30 36 36 64 38 39 30 30 37 31 64 37 32 26 6f 66 70 72 3d 26 65 3d 69 6e 69 74 41 64 26 76 69 3d 30 26 64 31 3d 76 70 61 69 64 26 70 6c 74 3d 32 22 2c 22 26 63 6f 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 Data Ascii: ["&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&nasid=650affc2d01066d890071d72&ofpr=&e=initAd&vi=0&d1=vpaid&plt=2","&copid=64db4ddc8904509d8303ce64
2024-05-24 06:27:16 UTC	251	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:15 GMT access-control-allow-origin: * content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50194	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	1041	OUT	GET /m?cdsp=712807&c=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:16 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:16 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"712807":1716532036,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:16 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b380c1a634213-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50207	8.2.110.70	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	755	OUT	GET /oiad745.gif?gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&us_privacy=[US_PRIVACY]&redir=https%3A%2F%2Fsync.e-volution.ai%2F159323af27f5e0e6efefdcdf238951e6.gif%3Fpuid%3D%7B%24PARTNER_UID%7D HTTP/1.1 Host: us.ck-ie.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:16 UTC	124	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 24 May 2024 06:27:16 GMT Content-Type: text/plain Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50201	3.33.220.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	736	OUT	GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSABKAIyCwjqyJ7kqPH9PBAFOAE.
2024-05-24 06:27:16 UTC	621	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:16 GMT Content-Length: 323 Connection: close server: Kestrel location: https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGwoMc2hhcmV0aHJvdWdoEgsIprfz7ZLx_TwQBRgBIAEoAjILCLCt9pqp8f08EAU4AVoMc2hhcmV0aHJvdWdoYAI.; expires=Sat, 24 May 2025 06:27:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:16 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 Data Ascii: Redirecting to: <a href="https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent=">https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50202	81.17.55.123	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	626	OUT	GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:16 UTC	269	IN	HTTP/1.1 200 OK content-length: 913 content-type: text/html date: Fri, 24 May 2024 06:27:15 GMT set-cookie: pid=8554246236155519815; expires=Tue, 24 Jun 2025 06:26:16 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close
2024-05-24 06:27:16 UTC	913	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 39 38 4b 55 7a 33 37 79 70 65 39 44 33 58 32 73 66 39 6f 76 67 65 54 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 38 35 35 34 32 34 36 32 33 36 31 35 35 35 31 39 38 31 35 22 20 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 69 73 73 69 3d 31 26 70 61 72 74 6e 65 72 69 64 3d 31 33 34 26 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 4f 42 5f 4f Data Ascii: <html><head></head><body><img src="//match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&gdpr=0&gdpr_consent=&source_user_id=8554246236155519815" /><img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50198	172.217.16.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	797	OUT	GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:16 UTC	831	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Date: Fri, 24 May 2024 06:27:16 GMT Expires: Fri, 24 May 2024 06:27:16 GMT Cache-Control: private, max-age=3600, stale-while-revalidate=3600 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 515 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 06:42:16 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:16 UTC	515	IN	Data Raw: 5b 6e 75 6c 6c 2c 5b 5b 5b 22 31 30 37 34 33 30 33 33 38 22 5d 2c 5b 22 31 33 36 34 33 31 39 30 32 22 5d 2c 5b 22 31 37 30 37 33 37 30 37 36 22 5d 2c 5b 22 31 38 37 32 37 31 38 36 34 22 5d 2c 5b 22 32 31 38 30 34 38 34 38 32 32 30 22 5d 2c 5b 22 32 31 39 33 39 32 33 39 36 36 31 22 5d 2c 5b 22 32 32 30 35 39 34 31 36 34 37 35 22 5d 2c 5b 22 32 32 34 36 36 36 37 31 32 31 35 22 5d 2c 5b 22 37 30 34 37 22 5d 2c 5b 22 37 31 30 33 22 5d 2c 5b 22 39 34 31 36 36 36 31 37 22 5d 5d 5d 2c 5b 5b 5b 22 31 30 37 34 33 30 33 33 38 22 2c 31 5d 2c 5b 22 31 33 36 34 33 31 39 30 32 22 2c 31 5d 2c 5b 22 31 37 30 37 33 37 30 37 36 22 2c 31 5d 2c 5b 22 31 38 37 32 37 31 38 36 34 22 2c 31 5d 2c 5b 22 32 31 38 30 34 38 34 38 32 32 30 22 2c 31 5d 2c 5b 22 32 31 39 33 39 32 33 39 Data Ascii: [null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50196	37.252.173.215	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	1141	OUT	GET /prebid/setuid?bidder=rubicon&uid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.FEVNsVF']wIg2In8=bO'r!@wnf-Te9(SG_WCV<LQ==Bx%He(U0r3o6-keDxf7e'bK%5uuIy@(ePde%D(i2RQxdJW*q_RLbP/X+GY1Qw3[OK_!<; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:16 UTC	1973	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 31301e9e-76dc-427c-8e30-d59bbc24dfad Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:16 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ*<-1c[x3nXm/!)'E25C6c[; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:16 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:16 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:16 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-24 06:27:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50197	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	747	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-05-24 06:27:16 UTC	388	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:16 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 24 May 2024 06:37:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50200	142.250.184.230	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	535	OUT	GET /instream/video/client.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:16 UTC	659	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 44701 Date: Fri, 24 May 2024 06:27:16 GMT Expires: Fri, 24 May 2024 06:27:16 GMT Cache-Control: private, max-age=900 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:16 UTC	731	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.define
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 70 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e Data Ascii: ))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.en
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 7d 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 3b 70 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e Data Ascii: },fa=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e};p("Array.prototype.keys",fun
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 6d 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 6b 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 66 6f 72 28 6b 3d 6d 3f 6d 2e 63 61 6c 6c 28 6b 29 3a 7b 6e 65 78 74 3a 61 61 28 6b 29 7d 3b 21 28 6d 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6d 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b Data Ascii: ()+1).toString();if(k){var m="undefined"!=typeof Symbol&&Symbol.iterator&&k[Symbol.iterator];for(k=m?m.call(k):{next:aa(k)};!(m=k.next()).done;)m=m.value,this.set(m[0],m[1])}};l.prototype.set=function(k,m){if(!d(k))throw Error("Invalid WeakMap key");e(k);
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 79 2e 70 72 6f 74 6f 74 79 70 65 3b 63 5b 61 5d 3d 62 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 61 2e 41 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f Data Ascii: ecScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b},z=function(a,b){var c=y.prototype;c[a]=b},A=function(a,b){function c(){}c.prototype=b.prototype;a.Aa=b.prototype;a.proto
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 72 20 63 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 3d 3d 63 3f 30 3a 30 3e 63 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 63 29 3a 63 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 31 21 3d 62 2e 6c 65 6e 67 74 68 3f 2d 31 3a 61 2e 69 6e 64 65 78 4f 66 28 62 2c 63 29 3b 66 6f 72 28 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 61 26 26 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 44 3d 41 72 72 61 79 2e 70 Data Ascii: r c;return Array.prototype.indexOf.call(a,b,c)}:function(a,b){var c=null==c?0:0>c?Math.max(0,a.length+c):c;if("string"===typeof a)return"string"!==typeof b\|\|1!=b.length?-1:a.indexOf(b,c);for(;c<a.length;c++)if(c in a&&a[c]===b)return c;return-1},D=Array.p
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 3e 62 3f 31 3a 30 7d 3b 76 61 72 20 45 61 3b 61 3a 7b 76 61 72 20 46 61 3d 76 2e 6e 61 76 69 67 61 74 6f 72 3b 69 66 28 46 61 29 7b 76 61 72 20 47 61 3d 46 61 2e 75 73 65 72 41 67 65 6e 74 3b 69 66 28 47 61 29 7b 45 61 3d 47 61 3b 62 72 65 61 6b 20 61 7d 7d 45 61 3d 22 22 7d 76 61 72 20 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 45 61 3b 72 65 74 75 72 6e 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 2c 48 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 61 3b 72 65 74 75 72 6e 2d 31 21 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 7d 3b 76 61 72 20 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: >b?1:0};var Ea;a:{var Fa=v.navigator;if(Fa){var Ga=Fa.userAgent;if(Ga){Ea=Ga;break a}}Ea=""}var G=function(a){var b=Ea;return-1!=b.indexOf(a)},Ha=function(){var a=Ea;return-1!=a.toLowerCase().indexOf("webkit")};var Ia=function(){return null},Ja=function(a
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 70 65 2e 56 3d 21 30 3b 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 7d 3b 49 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 0a 76 61 72 20 57 61 3d 7b 7d 2c 58 61 3d 6e 65 77 20 49 28 22 22 2c 57 61 29 2c 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 29 72 65 74 75 72 6e 20 61 3d 51 61 28 61 29 2c 27 75 72 6c 28 22 27 2b 61 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 25 33 63 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5c 22 5d 2f 67 2c 22 5c 5c 24 26 22 29 2b 27 22 29 27 3b 61 3d 61 20 69 6e 73 74 61 6e 63 65 Data Ascii: pe.V=!0;I.prototype.L=function(){return this.wa};I.prototype.toString=function(){return this.wa.toString()};var Wa={},Xa=new I("",Wa),Za=function(a){if(a instanceof H)return a=Qa(a),'url("'+a.replace(/</g,"%3c").replace(/[\\"]/g,"\\$&")+'")';a=a instance
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 20 63 2b 66 2b 62 2b 66 2b 65 7d 29 7d 3b 76 61 72 20 68 62 3d 7b 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 61 3d 62 3d 3d 3d 68 62 3f 61 3a 22 22 3b 74 68 69 73 2e 56 3d 21 30 7d 2c 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 22 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 3f 44 28 64 2c 63 29 3a 62 2b 3d 69 62 28 64 29 7d 3b 44 28 61 72 67 75 6d 65 6e 74 73 2c 63 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 4a 28 62 2c 68 62 29 7d 3b 4a 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 7d 3b 76 61 72 20 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 Data Ascii: c+f+b+f+e})};var hb={},J=function(a,b){this.va=b===hb?a:"";this.V=!0},jb=function(a){var b="",c=function(d){Array.isArray(d)?D(d,c):b+=ib(d)};D(arguments,c);return new J(b,hb)};J.prototype.L=function(){return this.va};var ib=function(a){return a instance
2024-05-24 06:27:16 UTC	1390	IN	Data Raw: 61 72 20 63 3d 73 62 3b 76 61 72 20 64 3d 64 3f 64 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 62 28 61 29 7d 3b 76 61 72 20 75 62 3d 47 28 22 4f 70 65 72 61 22 29 2c 4c 3d 47 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 47 28 22 4d 53 49 45 22 29 2c 76 62 3d 47 28 22 45 64 67 65 22 29 2c 77 62 3d 47 28 22 47 65 63 6b 6f 22 29 26 26 21 28 48 61 28 29 26 26 21 47 28 22 45 64 67 65 22 29 29 26 26 21 28 47 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 47 28 22 4d 53 49 45 22 29 29 26 26 21 47 28 22 45 64 67 65 22 29 2c 78 62 3d 48 61 28 29 26 26 21 47 28 22 45 64 67 65 22 29 2c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: ar c=sb;var d=d?d(a):a;return Object.prototype.hasOwnProperty.call(c,d)?c[d]:c[d]=b(a)};var ub=G("Opera"),L=G("Trident")\|\|G("MSIE"),vb=G("Edge"),wb=G("Gecko")&&!(Ha()&&!G("Edge"))&&!(G("Trident")\|\|G("MSIE"))&&!G("Edge"),xb=Ha()&&!G("Edge"),yb=function(){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50211	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	691	OUT	GET /ps/?xi=1&xu=LWKAUNHL-D-BFYD HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:16 UTC	671	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:16 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP017 location: https://events-ssc.33across.com/match?bidder_id=30&external_user_id=LWKAUNHL-D-BFYD&ts=1716532036&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Fri, 24 May 2024 06:27:16 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50215	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	905	OUT	GET /match?bidder_id=99&external_user_id=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD%7EA&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:16 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:16 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50206	52.213.145.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	663	OUT	GET /merge?pid=80&3pid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf
2024-05-24 06:27:16 UTC	637	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_80=LWKAUNHL-D-BFYD; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:16 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:16 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-05-24 06:27:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50208	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	1542	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5141210831119936251 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; PugT=1716532035; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736
2024-05-24 06:27:16 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:16 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-5141210831119936251; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:16 GMT; path=/ Set-Cookie: PugT=1716532036; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:16 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50204	13.32.99.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	654	OUT	GET /live/liveCS.php?source=external&advId=100&advUuid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:16 UTC	812	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Fri, 24 May 2024 06:27:16 GMT p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: no-store pragma: no-cache set-cookie: csuuid=66503344d445f; expires=Tue, 18-Jun-2024 06:27:16 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWKAUNHL-D-BFYD X-Cache: Miss from cloudfront Via: 1.1 b43c04a791e8dcb8ddb6bb0847fcf95a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Gt6w1MlWTElI3p5ShRFfpQLClA_SAN0el5orVEiRBw24bmHclS8hig== Age: 0
2024-05-24 06:27:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50210	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	1610	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; pi=161673:3; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; PugT=1716532035; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736
2024-05-24 06:27:16 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:15 GMT; path=/ Set-Cookie: PugT=1716532035; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:16 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50212	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	689	OUT	POST /g/v2/371.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 732 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#3; 3pi=
2024-05-24 06:27:16 UTC	732	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 22 3a 33 37 31 2c 22 67 64 70 72 22 3a 30 2c 22 6e 62 50 61 67 65 22 3a 31 2c 22 6f 22 3a 22 70 62 6a 73 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 Data Ascii: {"partner":371,"gdpr":0,"nbPage":1,"o":"pbjs","tml":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","ref":null,"cu":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=acte
2024-05-24 06:27:17 UTC	558	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:16 GMT p3p: CP="CAO PSA OUR" set-cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; Path=/; Domain=id5-sync.com; Expires=Thu, 22 Aug 2024 06:27:16 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://pjnewsletter.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:17 UTC	592	IN	Data Raw: 32 34 34 0d 0a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 67 30 2d 33 56 42 36 41 33 66 58 42 43 77 4e 34 73 50 4a 68 33 73 45 59 5f 42 45 45 41 6e 70 49 76 4c 65 6a 74 33 52 4f 67 58 62 67 6e 41 77 35 49 36 6d 79 45 6d 6c 43 6a 37 6d 33 35 37 79 4c 57 46 68 30 75 39 75 78 46 6d 32 68 36 5a 65 42 67 4f 78 79 6b 64 30 31 37 31 31 6f 44 50 57 41 37 51 7a 6f 35 46 65 75 36 55 65 46 32 32 50 71 57 62 50 64 7a 73 77 2d 67 59 67 7a 52 44 51 41 42 67 2d 49 74 34 58 42 33 75 67 30 6f 58 51 49 74 4d 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 34 54 30 36 3a 32 37 3a 30 39 2e 37 30 38 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 22 3a 22 49 44 35 2a 37 71 74 76 Data Ascii: 244{"signature":"ID5_Ag0-3VB6A3fXBCwN4sPJh3sEY_BEEAnpIvLejt3ROgXbgnAw5I6myEmlCj7m357yLWFh0u9uxFm2h6ZeBgOxykd01711oDPWA7Qzo5Feu6UeF22PqWbPdzsw-gYgzRDQABg-It4XB3ug0oXQItM","created_at":"2024-05-24T06:27:09.708Z","id5_consent":true,"original_uid":"ID5*7qtv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50214	46.228.164.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	752	OUT	GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1 Host: d.turn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=8792414088104974232
2024-05-24 06:27:16 UTC	533	IN	HTTP/1.1 302 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 pragma: no-cache set-cookie: uid=8792414088104974232; Domain=.turn.com; Expires=Wed, 20-Nov-2024 06:27:16 GMT; Path=/; Secure; SameSite=None location: https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=8792414088104974232&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u& content-length: 0 date: Fri, 24 May 2024 06:27:16 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50209	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	724	OUT	GET /c/231/203/7/2.gif?puid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#3; 3pi=
2024-05-24 06:27:17 UTC	1488	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F434%2F6%2F3.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&consent= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:16 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50216	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	867	OUT	GET /track/cmf/generic?ttd_pid=bidswitch&ttd_tpi=1&ttd_puid=the33across&gdpr=&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAEYBSABKAIyCwjqyJ7kqPH9PBAFOAE.
2024-05-24 06:27:16 UTC	622	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:16 GMT Content-Length: 341 Connection: close server: Kestrel location: https://x.bidswitch.net/sync?dsp_id=93&user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&expires=30&ssp=the33across&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_21} set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCITylJ2p8f08EAU4AVoJYmlkc3dpdGNoYAI.; expires=Sat, 24 May 2025 06:27:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:16 UTC	341	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 39 33 26 75 73 65 72 5f 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 65 78 70 69 72 65 73 3d 33 30 26 73 73 70 3d 74 68 65 33 33 61 63 72 6f 73 73 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 5f 32 31 7d 22 3e 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 39 33 26 75 73 65 72 5f 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 Data Ascii: Redirecting to: <a href="https://x.bidswitch.net/sync?dsp_id=93&user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&expires=30&ssp=the33across&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_21}">https://x.bidswitch.net/sync?dsp_id=93&user_id=264441c2-0e4b-4098-920f-1c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50203	18.192.200.108	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	726	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:17 UTC	83	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:17 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50213	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	693	OUT	GET /usersync2/rmpssp?sub=sharethrough HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
2024-05-24 06:27:17 UTC	687	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:17 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.102%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 24 May 2025 06:27:17 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4541464280 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50225	35.186.193.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	813	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:17 UTC	475	IN	HTTP/1.1 200 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_ddbb4611924448e8b6eb622b3f89bb76=1; path=/; domain=.ctnsnet.com; expires=Sat, 24 May 2025 06:27:17 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Fri, 24 May 2024 06:27:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50221	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:16 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-05-24 06:27:17 UTC	789	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:17 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFKVGlFN01vR2NBQUJUdVluSmhXZw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAJTiE7MoGcAABTuYnJhWg; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:17 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:17 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50223	213.155.156.165	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	821	OUT	GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1 Host: d5p.de17a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:17 UTC	138	IN	HTTP/1.1 200 content-length: 35 content-type: image/gif p3p: CP=NON CURa ADMa DEVa TAIa OUR STP IND UNI COM NAV connection: close
2024-05-24 06:27:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50220	82.145.213.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	758	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9
2024-05-24 06:27:17 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Fri, 24 May 2024 06:27:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9 Pragma: no-cache Set-Cookie: UID=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-05-24 06:27:17 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 35 65 34 62 36 63 66 37 31 66 38 62 34 62 37 66 38 33 64 36 65 62 36 33 39 32 64 31 62 33 65 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50224	35.214.244.63	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:17 UTC	403	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=69c8acb9-0c52-45cf-aa65-5c1bcf939b8d; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 24-Aug-2024 06:27:17 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 content-length: 0 date: Fri, 24 May 2024 06:27:17 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50232	104.18.24.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:17 UTC	949	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 24 May 2024 06:27:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 2718 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aRnoeUPME7uQmKvEjTsZbhMmGQ3TrrYor31ZdZdcbtc; path=/; domain=.tribalfusion.com; expires=Thu, 22-Aug-2024 06:27:17 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aRnoeUPME7uQmKvEjTsZbhMmGQ3TrrYor31ZdZdcbtc; path=/; domain=.tribalfusion.com; expires=Thu, 22-Aug-2024 06:27:17 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b38111b5843d6-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:17 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-05-24 06:27:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50233	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	774	OUT	GET /match?bidder_id=30&external_user_id=LWKAUNHL-D-BFYD&ts=1716532036&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:17 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:17 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50234	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	1366	OUT	GET /umatch/1?dataid=data1&uuid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.connectad.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=eyJpdiI6Ikc1NU5pVE5ZdWdYcGNwWGNZcHhGQ0E9PSIsInZhbHVlIjoiVU1ZMmtxT1g2K0xqaG8zUkFBWnRUbnVCbGhWWnJIVjFRb3Q1bi9rejAxTENaSWtJSmRBUnlHbnRmK3RYOGRKSTA5cjJRQjZkS2VNZ3ltT1ZBV3VBM21LODgwSS96eTJBM09mQ1hNVkU1VkMyNy9nUnNiVVFlbFQ4aGNCenN0bVFZOXRsaVoxUzk3MFJlK3ZHOVdCUmF1dndJRjduTDlSWE5yVkF2ZnFWMExrbzVuUFNFTFRqSGhIWjkxY2N6ZGp2MHI4cEl2TUZzUFJrSXV5Z0wvODVBMXlRRm5mMzNPZUlGeEJFQUNuZEJESDZFRzJNRElCWHBhN1FZK0VpUTlRb1RFakxEMVpEYkNPU0N3Z2o3TWlyQldHeURGQVRKZ3ZYM2dNdmIrUytWeGc9IiwibWFjIjoiNjc1YWZjODE1YmJhYjgzZTU0ZGFmZDM4NWFlOTZiNDliYzgwMDkxODIyNmMzNTY4MDk1YWYwN2M0MzU3OWRmNyIsInRhZyI6IiJ9
2024-05-24 06:27:17 UTC	1083	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:17 GMT Connection: close set-cookie: id=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; expires=Sun, 23 Jun 2024 16:27:17 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b3811af15431f-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50238	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	792	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGwoMc2hhcmV0aHJvdWdoEgsIprfz7ZLx_TwQBRgBIAEoAjILCLCt9pqp8f08EAU4AVoMc2hhcmV0aHJvdWdoYAI.
2024-05-24 06:27:17 UTC	665	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:17 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGwoMc2hhcmV0aHJvdWdoEgsIprfz7ZLx_TwQBRIXCghwdWJtYXRpYxILCKCGzPWS8f08EAUYASABKAIyCwjW_M6iqfH9PBAFOAFaCHB1Ym1hdGljYAI.; expires=Sat, 24 May 2025 06:27:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:17 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50242	34.111.129.221	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	619	OUT	GET /cr?key=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: cr.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:17 UTC	749	IN	HTTP/1.1 307 Temporary Redirect Server: Weborama Collect Frontend Date: Fri, 24 May 2024 06:27:16 GMT Content-Length: 0 Location: https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=2373818703 Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Fri, 24 May 2024 06:27:17 GMT Set-Cookie: AFFICHE_W=1cd23kFpmYfV88; expires=Sat, 21 Jun 2025 06:27:17 GMT; domain=.weborama.fr; path=/; secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50243	104.22.50.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	666	OUT	GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:17 UTC	582	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:17 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://ads.pubmatic.com set-cookie: zc=731f80cc-470e-4b5f-6ce2-635d7676424c; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 888b3811bf5ec461-EWR
2024-05-24 06:27:17 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50236	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	991	OUT	GET /qmap?c=240&tp=PUBM&tpid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
2024-05-24 06:27:17 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:17 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.11.114 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:17 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50239	54.195.158.29	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	757	OUT	GET /sync/pubmatic/7F542745-2D60-41EB-9A96-52B90C82DF34?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
2024-05-24 06:27:17 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-24 06:27:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50240	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	805	OUT	GET /ups/58292/sync?_origin=1&uid=7F542745-2D60-41EB-9A96-52B90C82DF34&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDSYNC=190u~2ili; A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
2024-05-24 06:27:17 UTC	753	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:17 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="190u~2ili:18z8~2ili";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 24-May-2025 06:27:17 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-dsl4wtVE2uUU8Rdkav_IeU5Zg.sDJ70-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50247	69.166.1.66	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	703	OUT	GET /us?loc=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F434%2F6%2F3.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&consent= HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:17 UTC	784	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:17 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-189 x-xss-protection: 0 location: https://id5-sync.com/c/231/434/6/3.gif?puid=1f42063c-1e64-4491-87eb-aa2cbcbeb39f&gdpr=0&gdpr_consent= set-cookie: __uis=1f42063c-1e64-4491-87eb-aa2cbcbeb39f; expires=Sun, 23 Jun 2024 06:27:17 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85189\|ZlAzS; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50231	54.217.19.5	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	731	OUT	GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:18 UTC	587	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:17 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=ab2f4a30-1996-11ef-b02a-b3dce69ae9da; Version=1; Expires=Mon, 23-Jun-2025 06:27:17 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://cm.adgrx.com/bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50250	198.47.127.19	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	1521	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20782884&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
2024-05-24 06:27:18 UTC	1023	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156423:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1717718400%3A197_245_241_227_201_226_219; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:16 GMT Content-Length: 1091 Connection: close
2024-05-24 06:27:18 UTC	1091	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 69 70 67 6c 6f 62 2e 73 65 6d 61 73 69 6f 2e 6e 65 74 2f 70 75 62 6d 61 74 69 63 2f 31 2f 69 6e 66 6f 3f 73 54 79 70 65 3d 73 79 6e 63 26 73 45 78 74 43 6f 6f 6b 69 65 49 64 3d 37 46 35 34 32 37 34 35 2d 32 44 36 30 2d 34 31 45 42 2d 39 41 39 36 2d 35 32 42 39 30 43 38 32 44 46 33 34 26 73 49 6e 69 74 69 61 74 6f 72 3d 65 78 74 65 72 6e 61 6c 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 32 31 34 26 6d 61 70 70 65 Data Ascii: PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mappe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50246	52.57.150.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	727	OUT	GET /match?bid=1mpjpn0&turn_id=8792414088104974232&newuser=1&dc_rc=2&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:18 UTC	559	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:18 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://sync-tm.everesttech.net/upi/pid/lons7jax?redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24%7BTM_USER_ID%7D%26bid%3D0rijhbu%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3Ddn2m51u%26 Content-Length: 0 Date: Fri, 24 May 2024 06:27:18 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50260	35.186.253.211	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	899	OUT	GET /sync/prebid?gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dopenx%26uid%3D%24%7BUID%7D HTTP/1.1 Host: rtb.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
2024-05-24 06:27:18 UTC	461	IN	HTTP/1.1 302 Found Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: text/html; charset=utf-8 Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=openx&uid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Fri, 24 May 2024 06:27:17 GMT Content-Length: 152 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:18 UTC	152	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 73 65 74 75 69 64 3f 41 3d 62 66 66 64 36 39 66 33 2d 66 32 34 64 2d 34 39 63 37 2d 38 61 66 66 2d 62 33 30 62 62 31 65 34 66 35 35 39 26 61 6d 70 3b 62 69 64 64 65 72 3d 6f 70 65 6e 78 26 61 6d 70 3b 75 69 64 3d 66 63 62 35 33 38 62 32 2d 63 63 35 38 2d 34 36 62 38 2d 39 33 36 63 2d 66 34 61 33 65 63 30 65 35 34 32 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=openx&uid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50245	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	668	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-05-24 06:27:18 UTC	660	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:18 GMT location: https://pixel.rubiconproject.com/tap.php?v=183462&nid=4114&put=AAGDV07MoGcAABSqiSzwQg&expires=30&gdpr=0 Server: gunicorn set-cookie: bito=AAGDV07MoGcAABSqiSzwQg; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:18 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:18 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50230	18.159.229.46	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	755	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:18 UTC	83	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50241	35.204.74.118	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:18 UTC	820	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:18 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Set-Cookie: suid=503321D4229142C7A5087AC9113CE764; Path=/; domain=simpli.fi; Expires=Sun, 25-May-25 06:27:18 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=503321D4229142C7A5087AC9113CE764; Path=/; domain=simpli.fi; Expires=Sun, 25-May-25 06:27:18 GMT; Secure; Expires: Thu, 23 May 2024 06:27:18 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 06:27:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50255	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	761	OUT	GET /ups/58570/occ?uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDSYNC=190u~2ili; A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
2024-05-24 06:27:18 UTC	732	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:18 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="190u~2ili:196y~2ili";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 24-May-2025 06:27:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://prebid.a-mo.net/setuid/yahoo?uid=y-PbfZl6pE2uHzLdIJV6yxRvAif23THj.r9tU7_aI-~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50229	195.5.165.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:18 UTC	234	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: avatar-1dcb4f9e6606@version_1.7.4 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Fri, 24 May 2024 06:27:18 GMT
2024-05-24 06:27:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50259	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	1717	OUT	GET /AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
2024-05-24 06:27:18 UTC	1173	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=158355:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:17 GMT Content-Length: 246 Connection: close
2024-05-24 06:27:18 UTC	246	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 38 33 35 35 26 61 6d 70 3b 70 6d 63 3d 31 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 25 32 46 73 65 74 75 69 64 25 33 46 41 25 33 44 62 66 66 64 36 39 66 33 2d 66 32 34 64 2d 34 39 63 37 2d 38 61 66 66 2d 62 33 30 62 62 31 65 34 66 35 35 39 25 32 36 62 69 64 64 65 72 25 33 44 70 75 62 6d 61 74 69 63 25 32 36 75 69 64 25 33 44 37 46 35 34 32 37 34 35 2d 32 44 36 30 2d 34 31 45 42 2d 39 41 39 36 2d 35 32 42 39 30 43 38 32 44 46 33 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50248	18.239.69.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	876	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWKAUNHL-D-BFYD HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=7c0kCriUA6; IQver=1.9; IQMID=137264047#1716532029761; IQPData=137264047#1716532029745#0#1716532029745; intentIQCDate=1716532029753; CSDT=UEQ6MTUzNThfMCZVRGZkU3Ex; ASDT=0
2024-05-24 06:27:18 UTC	1357	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 06:27:18 GMT Set-Cookie: IQMID=137264047#1716532029761; Domain=.intentiq.com; Expires=Sun, 23 Jun 2024 06:27:18 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVRGZkVjBnIzE1MzU4XzAmVURmZFNxMQ; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:18 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:18 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=137264047#1716532038110#0#1716532029745; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:18 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:18 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=7c0kCriUA6; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:18 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 d1b1cc661d55a3f8a88f240826e4f38c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Ve1AgNP0GZhheGRqo_y4gfmmEp5lxzSja6n9J8Pm4rb-JmHTBGBm4g==
2024-05-24 06:27:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50258	37.252.173.215	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	1332	OUT	GET /getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dappnexus%26uid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:18 UTC	1472	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=appnexus&uid=4426393169609033625 AN-X-Request-Uuid: fed41823-fddb-4188-afd2-4a621a18241c Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50261	104.18.36.155	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	748	OUT	GET /usermatchredir?s=191503&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dindex_rtb%26uid%3D HTTP/1.1 Host: ssum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:18 UTC	1273	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:18 GMT Content-Length: 0 Connection: close Location: /usermatchredir?cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dindex_rtb%26uid%3D&gdpr=0&gdpr_consent=&s=191503&us_privacy=&C=1 CF-Ray: 888b381569cb43f7-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZlAzRkt3uaUAAD53AR3IEwAA; Path=/; Domain=casalemedia.com; Expires=Sat, 24 May 2025 06:27:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=1233; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 06:27:18 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1233; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 06:27:18 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eDjdXXHGpkXvRUN4nvzqgrYqVG%2BbUPkfzKfGFtPs32w%2BGVcPYoXrVqTYHwqo%2BM8HS8xrUU80a5HYANtUR9rVtIyMdiC9iUdNDRMYKOez1%2BA4iGyppLqX6%2BQyj7namoWZ3f8lOYKq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50262	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	1645	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
2024-05-24 06:27:18 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 07-Jun-2024 06:27:18 GMT; path=/ Set-Cookie: PugT=1716532038; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50265	104.18.24.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	920	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aRnoeUPME7uQmKvEjTsZbhMmGQ3TrrYor31ZdZdcbtc
2024-05-24 06:27:18 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=apntXLRkP6i6eCno6nTrqKmUEJVArmXRVLlOoaRYdMfkONaPpbrr2fGGdCyg6ZaZdOcnZbni6sZdieudUe3RIS5FZbZc6avVZcg; path=/; domain=.tribalfusion.com; expires=Thu, 22-Aug-2024 06:27:18 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=apntXLRkP6i6eCno6nTrqKmUEJVArmXRVLlOoaRYdMfkONaPpbrr2fGGdCyg6ZaZdOcnZbni6sZdieudUe3RIS5FZbZc6avVZcg; path=/; domain=.tribalfusion.com; expires=Thu, 22-Aug-2024 06:27:18 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b3815caff7c8a-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50268	34.111.129.221	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	680	OUT	GET /cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=2373818703 HTTP/1.1 Host: cr.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AFFICHE_W=1cd23kFpmYfV88
2024-05-24 06:27:18 UTC	486	IN	HTTP/1.1 204 No Content Server: Weborama Collect Frontend Date: Fri, 24 May 2024 06:27:17 GMT Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Fri, 24 May 2024 06:27:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50257	52.17.205.185	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	814	OUT	GET /pixel?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&redir=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dsovrn%26uid%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; _ljtrtb_80=LWKAUNHL-D-BFYD
2024-05-24 06:27:18 UTC	294	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:18 GMT Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50252	3.33.220.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:17 UTC	783	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4541464280 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCITylJ2p8f08EAU4AVoJYmlkc3dpdGNoYAI.
2024-05-24 06:27:18 UTC	546	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:18 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/264441c2-0e4b-4098-920f-1c8a6b45a578 set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCLbw6aip8f08EAU4AVoLYWRjb25kdWN0b3JgAg..; expires=Sat, 24 May 2025 06:27:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:18 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/264441c2-0e4b-4098-920f-1c8a6b45a578">https://sync.1rx.io/usersync/tradedesk/264441c2-0e4b-4098-920f-1c8a6b45a578</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50264	147.75.84.158	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	745	OUT	GET /setuid/magnite?uid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; amdgt_lk%40cfs=1
2024-05-24 06:27:18 UTC	365	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:18 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_7=1; path=/; domain=prebid.a-mo.net; expires=Sat, 25 May 2024 06:27:18 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 4 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50249	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	907	OUT	GET /sync?dsp_id=93&user_id=264441c2-0e4b-4098-920f-1c8a6b45a578&expires=30&ssp=the33across&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_21} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:18 UTC	514	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ssc-cms.33across.com/ps/?xi=10&us_privacy=&xu=120ce5db-d35e-4f16-8347-f58a51fd3b1b Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50254	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	769	OUT	GET /sync?ssp=adaptmx&user_id=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:18 UTC	369	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //dis.criteo.com/dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dadaptmx%26user_id%3D%40%40CRITEO_USERID%40%40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50266	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	1609	OUT	GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
2024-05-24 06:27:18 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50267	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	1565	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; DPSync3=1717718400%3A245_241_227_201; SyncRTB3=1719100800%3A203%7C1717372800%3A63%7C1717804800%3A35%7C1717113600%3A223_15_2%7C1717718400%3A249_165_220_21_13_8_22_54_81_55_264_166_176_214_56_251_3_233_46_238_71_266_161_234_254; chkChromeAb67Sec=3; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035
2024-05-24 06:27:18 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:17 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:17 GMT; path=/ Set-Cookie: PugT=1716532037; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50270	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	678	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
2024-05-24 06:27:18 UTC	482	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:18 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=pubmatic&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 24 May 2024 06:27:18 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50269	18.159.229.46	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	668	OUT	GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:18 UTC	83	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50276	34.36.216.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	748	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=532c50a4-cd6b-40c9-b238-9f975626694b#1716532028798; _ssuma=eyIzOSI6MTcxNjUzMjAyOTQyMywiNyI6MTcxNjUzMjAyOTQyM30
2024-05-24 06:27:18 UTC	889	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=532c50a4-cd6b-40c9-b238-9f975626694b#1716532028798; Domain=.sitescout.com; Expires=Sat, 24-May-2025 06:27:18 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxNjUzMjAzODY4MCwiMzkiOjE3MTY1MzIwMjk0MjMsIjciOjE3MTY1MzIwMjk0MjN9; Domain=.sitescout.com; Expires=Sun, 23-Jun-2024 06:27:18 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Fri, 24 May 2024 06:27:18 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50273	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	790	OUT	GET /c/231/434/6/3.gif?puid=1f42063c-1e64-4491-87eb-aa2cbcbeb39f&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:18 UTC	1459	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:18 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ib.adnxs.com/getuid?https://id5-sync.com/c/231/2/5/4.gif?puid=$UID&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:18 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50271	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	532	OUT	GET /cksync.php?cs=1&type=bs&ovsid=327352f8-d01a-4565-9f98-77efcc2259b7&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:18 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1;Expires=Fri, 23 May 2025 06:27:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:18 GMT Connection: close
2024-05-24 06:27:18 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:18 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50275	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	875	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAJTiE7MoGcAABTuYnJhWg; bitoIsSecure=ok
2024-05-24 06:27:18 UTC	586	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:18 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAJTiE7MoGcAABTuYnJhWg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 Server: gunicorn set-cookie: bito=AAJTiE7MoGcAABTuYnJhWg; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:18 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50281	185.64.190.84	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	1799	OUT	GET /setuid?bidder=amx&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&do=pjnewsletter.com HTTP/1.1 Host: ow.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; PugT=1716532035; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_9 [TRUNCATED]
2024-05-24 06:27:18 UTC	163	IN	HTTP/1.1 451 Unavailable For Legal Reasons Date: Fri, 24 May 2024 06:27:18 GMT Content-Length: 57 Content-Type: text/plain; charset=utf-8 Connection: close
2024-05-24 06:27:18 UTC	57	IN	Data Raw: 54 68 65 20 67 64 70 72 5f 63 6f 6e 73 65 6e 74 20 73 74 72 69 6e 67 20 70 72 65 76 65 6e 74 73 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 62 65 69 6e 67 20 73 61 76 65 64 Data Ascii: The gdpr_consent string prevents cookies from being saved

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50282	134.122.57.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	740	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:19 UTC	517	IN	HTTP/1.1 302 302 Date: Fri, 24 May 2024 06:27:19 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=b87569e9-b5c2-4e16-b58e-f18cc16ffd7e.485746039; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:b87569e9-b5c2-4e16-b58e-f18cc16ffd7e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50288	104.18.36.155	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	814	OUT	GET /usermatchredir?cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dindex_rtb%26uid%3D&gdpr=0&gdpr_consent=&s=191503&us_privacy=&C=1 HTTP/1.1 Host: ssum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZlAzRkt3uaUAAD53AR3IEwAA; CMPS=1233; CMPRO=1233
2024-05-24 06:27:19 UTC	1081	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:19 GMT Content-Length: 0 Connection: close Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=index_rtb&uid=ZlAzRkt3uaUAAD53AR3IEwAA%261233 CF-Ray: 888b381bdd6a1a07-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZlAzRkt3uaUAAD53AR3IEwAA; Path=/; Domain=casalemedia.com; Expires=Sat, 24 May 2025 06:27:19 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1233; Path=/; Domain=casalemedia.com; Expires=Thu, 22 Aug 2024 06:27:19 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bWQk0QyLcvs%2BdChwHGGyUNc96%2Bx5gleI507JxTy1JM36tLDmr24%2FyUROKK5Tgo6Tj03BY33fVgVuzWOxIeqrsDkWVFqK1zYd9I0XBg0QOqDiIbKHQrFu9yUCWXjWaNgFolfg3C8Z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50277	54.217.19.5	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	778	OUT	GET /bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADGRX_UID=ab2f4a30-1996-11ef-b02a-b3dce69ae9da
2024-05-24 06:27:19 UTC	816	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=ab2f4a30-1996-11ef-b02a-b3dce69ae9da; Version=1; Expires=Mon, 23-Jun-2025 06:27:19 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None set-cookie: ADGRX_CM_PUBMATIC_BRIDGED=1; Version=1; Expires=Sat, 25-May-2024 06:27:19 GMT; Max-Age=86400; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=ab2f4a30-1996-11ef-b02a-b3dce69ae9da Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50287	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	833	OUT	GET /ps/?xi=10&us_privacy=&xu=120ce5db-d35e-4f16-8347-f58a51fd3b1b HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:19 UTC	692	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806; Domain=.33across.com; Expires=Sat, 24-May-2025 06:27:19 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP010 location: https://events-ssc.33across.com/match?bidder_id=10&external_user_id=120ce5db-d35e-4f16-8347-f58a51fd3b1b&ts=1716532039&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Fri, 24 May 2024 06:27:18 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50285	198.47.127.19	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:18 UTC	2175	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=67342843&p=156077&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNY HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	590	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156077:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:18 GMT Content-Length: 47 Connection: close
2024-05-24 06:27:19 UTC	47	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 50 75 67 4d 61 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 66 61 6c 73 65 2c 20 66 61 6c 73 65 2c 20 74 72 75 65 29 3b Data Ascii: PubMatic.PugMasterCallback(false, false, true);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50279	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	770	OUT	GET /usersync/tradedesk/264441c2-0e4b-4098-920f-1c8a6b45a578 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.102%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-24 06:27:19 UTC	766	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:19 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 24 May 2025 06:27:19 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D175kELn9xvfXoe3C4qjRaWS8%26source_user_id%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 connection: close
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50286	37.252.173.215	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	1296	OUT	GET /prebid/setuid?bidder=amx&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&do=pjnewsletter.com HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:19 UTC	2144	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 73420135-5b18-4dcf-b1a2-79f53186546c Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:19 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]tbnF:^1+9RkhB3zrqv.`'Jrt5LGe:(1a5C2q]>)S?Fn4bzU'Ixpv(E:L>>e5)hn)R8EfNYTnWGlwX=<@[5V!pAuFlW?'2)8bi@6n_Ik8$S6!/D)oz@_-4J]s0eUY-cAC#PK#HJ_H_JV//DXt7@T0M?RT%yDcVb6=dcnB40/+0J2!4UK5ke5!T; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:19 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoxOVoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-24 06:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50294	178.250.1.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	787	OUT	GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dadaptmx%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:19 UTC	418	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 24 May 2024 06:27:18 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dadaptmx%26user_id%3D%40%40CRITEO_USERID%40%40 server-processing-duration-in-ticks: 90630 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50290	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	724	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=openx&uid=fcb538b2-cc58-46b8-936c-f4a3ec0e542a HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:19 UTC	364	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:18 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_13=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:19 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50291	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	708	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=adform&uid=4259863599046777896 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:19 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:18 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_8=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:19 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50292	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	710	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=appnexus&uid=4426393169609033625 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:19 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:18 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_0=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:19 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50293	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2263	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532038; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:18 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50289	147.75.84.158	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	775	OUT	GET /setuid/yahoo?uid=y-PbfZl6pE2uHzLdIJV6yxRvAif23THj.r9tU7_aI-~A HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _sv3_14=1; amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; sd_amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; amdgt_lk%40cfs=1; _sv3_7=1
2024-05-24 06:27:19 UTC	365	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:18 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_9=1; path=/; domain=prebid.a-mo.net; expires=Sat, 25 May 2024 06:27:19 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50298	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2219	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESECrc2Ar-_vJg4cjpdmSF9zs&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	760	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23025-CAESECrc2Ar-_vJg4cjpdmSF9zs&KRTB&23386-CAESECrc2Ar-_vJg4cjpdmSF9zs; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:19 GMT; path=/ Set-Cookie: PugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50299	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2198	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=4259863599046777896 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	737	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_391=22924-4259863599046777896&KRTB&23263-4259863599046777896&KRTB&23481-4259863599046777896; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:18 GMT; path=/ Set-Cookie: PugT=1716532038; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:18 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50295	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2159	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-dsl4wtVE2uUU8Rdkav_IeU5Zg.sDJ70-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532038; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50297	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2297	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=ab2f4a30-1996-11ef-b02a-b3dce69ae9da HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	741	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-ab2f4a30-1996-11ef-b02a-b3dce69ae9da&KRTB&23275-ab2f4a30-1996-11ef-b02a-b3dce69ae9da; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:18 GMT; path=/ Set-Cookie: PugT=1716532038; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:18 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50305	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	854	OUT	GET /match?liv=h&us_privacy=&bidder_id=25&external_user_id=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:19 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50301	141.94.242.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	708	OUT	GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: green.erne.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:19 UTC	431	IN	HTTP/1.1 302 Found server: envoy date: Fri, 24 May 2024 06:27:19 GMT content-type: text/html content-length: 145 location: https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent x-envoy-upstream-service-time: 0 connection: close
2024-05-24 06:27:19 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50304	35.204.74.118	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=503321D4229142C7A5087AC9113CE764
2024-05-24 06:27:19 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:503321D4229142C7A5087AC9113CE764&gdpr=0&gdpr_consent= Expires: Thu, 23 May 2024 06:27:19 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 06:27:19 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50310	15.235.15.221	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	657	OUT	GET /?partner=214&mapped=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:19 UTC	572	IN	HTTP/1.1 302 Found set-cookie: cookie=20495bfc7d8dc46d; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:19 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects104=1; Max-Age=86400; Expires=Sat, 25 May 2024 06:27:19 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=20495bfc7d8dc46d/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50306	185.89.210.141	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	1286	OUT	GET /getuid?https://id5-sync.com/c/231/2/5/4.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:19 UTC	1447	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://id5-sync.com/c/231/2/5/4.gif?puid=4426393169609033625&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 3e7b0e20-4c8e-4e4c-b8d2-537a658e1e89 Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:19 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:19 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50313	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	566	OUT	GET /w/1.0/sd?id=537148856&val=ZlAzPgAAKneghQAZ&_test=ZlAzPgAAKneghQAZ HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
2024-05-24 06:27:19 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50317	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	903	OUT	GET /match?bidder_id=10&external_user_id=120ce5db-d35e-4f16-8347-f58a51fd3b1b&ts=1716532039&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0013300001hSPhhAAG&us_privacy=&ru=https%3A//cm.mgid.com/m%3Fcdsp%3D796887%26c%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:19 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50316	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	810	OUT	GET /m?cdsp=43070&c=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"712807":1716532036,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:19 UTC	892	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:19 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"43070":1716532039,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"712807":1716532036,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:19 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b38201d1842a7-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50312	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	630	OUT	GET /w/1.0/sd?id=537072971&val=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=c56bb77d-75c7-7551-f8e0-34b66d5596a7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532032522755
2024-05-24 06:27:19 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532039673392; Version=1; Expires=Sat, 08-Jun-2024 06:27:19 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50321	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	498	OUT	GET /match?liv=h&us_privacy=&bidder_id=90&external_user_id=4426393169609033625 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:19 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50318	52.46.155.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	462	OUT	GET /ecm3?id=LWKAUNHL-D-BFYD&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:19 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: J6CRMF3550D6K3KNA9QR Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50329	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	825	OUT	GET /m?cdsp=712807&c=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: cm.mgid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn; mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"712807":1716532036,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}
2024-05-24 06:27:19 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: max-age=0 Pragma: no-cache Set-Cookie: muidn=o4n2DX9tTBrn; expires=Sat, 24 May 2025 06:27:19 GMT; domain=.mgid.com; path=/; secure; SameSite=None Set-Cookie: mg_sync={"265689":1716532024,"287839":1716532031,"363887":1716532024,"433146":1716532024,"516418":1716532024,"709070":1716532030,"709071":1716532024,"712807":1716532036,"720798":1716532024,"827026":1716532028,"834104":1716532029,"834124":1716532024}; expires=Sun, 23 Jun 2024 06:27:19 GMT; secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b38200a904294-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 06:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50322	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	539	OUT	GET /match?bidder_id=33&external_user_id=3671706280332458943464&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:19 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50302	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	857	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%222069.102%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-24 06:27:19 UTC	687	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:19 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 24 May 2025 06:27:19 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://cms.quantserve.com/pixel/p-QcHdy7VcGLKJK.gif?idmatch=0&siteId=995936&rndcb=7057081357 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50308	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2228	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	767	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_188=3189-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553&KRTB&23418-532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:19 GMT; path=/ Set-Cookie: PugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50319	52.46.155.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	456	OUT	GET /ecm3?ex=rubiconprojectHMT&id=YAm-fjTBRB2GxG2EiqWDgw&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:19 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ZVAJ4KT3PCFRF0ARDYPD Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50331	96.46.186.182	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	1057	OUT	GET /cookiesyncendpoint?biddername=5&pid=59c9148628a0612da3689288&key=LWKAUNHL-D-BFYD HTTP/1.1 Host: sync.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:19 UTC	324	IN	HTTP/1.1 200 OK set-cookie: 1_C_5=LWKAUNHL-D-BFYD; Path=/; Domain=aniview.com; Expires=Mon, 03 Jun 2024 06:27:19 GMT; Secure; SameSite=None set-cookie: 1_C_5=LWKAUNHL-D-BFYD; Path=/; Expires=Mon, 03 Jun 2024 06:27:19 GMT; Secure; SameSite=None date: Fri, 24 May 2024 06:27:19 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50330	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	555	OUT	GET /match?bidder_id=99&external_user_id=y-nUJ4z59E2uGWoqNGcDg9tSjUP81bnlvD%7EA&ts=1716532032&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:19 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50307	52.57.150.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	710	OUT	GET /match?uid=ZlAzPgAAKneghQAZ&bid=0rijhbu&dc_rc=3&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:20 UTC	519	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:20 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://ib.adnxs.com/getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3Ddn2m51u%26 Content-Length: 0 Date: Fri, 24 May 2024 06:27:20 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50311	77.243.51.121	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	696	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:19 UTC	307	IN	HTTP/1.1 302 Found location: https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= date: Fri, 24 May 2024 06:27:19 GMT content-length: 0 routing-server-id: -1 access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50346	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	1478	OUT	GET /umatch/1?dataid=data1&uuid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.connectad.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7e43a2ac-3d1d-41f0-a785-c344abfed582; id=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
2024-05-24 06:27:19 UTC	1083	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:19 GMT Connection: close set-cookie: id=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; expires=Sun, 23 Jun 2024 16:27:19 GMT; Max-Age=2628000; path=/; domain=.connectad.io; secure; SameSite=None cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b382068e0c331-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50348	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	532	OUT	GET /match?bidder_id=30&external_user_id=LWKAUNHL-D-BFYD&ts=1716532036&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:19 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:19 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50350	172.67.40.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	479	OUT	GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=731f80cc-470e-4b5f-6ce2-635d7676424c
2024-05-24 06:27:19 UTC	431	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 06:27:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Fri, 24 May 2024 06:27:34 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 888b3820bc638c81-EWR
2024-05-24 06:27:19 UTC	938	IN	Data Raw: 31 35 66 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 15fe<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-05-24 06:27:19 UTC	1369	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 3b 0a 20 20 20 20 20 20 63 6f 6f 6b 69 65 45 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 77 72 61 Data Ascii: r.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert'); cookieEl.style.display = 'block'; }) }</script>...<![endif]--></head><body> <div id="cf-wra
2024-05-24 06:27:19 UTC	1369	IN	Data Raw: 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 6b 73 2e 20 54 68 65 20 61 63 74 69 6f 6e 20 79 6f 75 20 6a 75 73 74 20 70 65 72 66 6f 72 6d 65 64 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 74 68 61 74 20 63 6f 75 6c 64 20 74 72 69 67 67 65 72 20 74 68 69 73 20 62 6c 6f 63 6b 20 69 6e 63 6c 75 64 69 6e 67 20 73 75 62 6d 69 74 74 69 6e 67 20 61 20 63 65 72 74 61 69 6e 20 77 6f 72 64 20 6f 72 20 70 68 72 61 73 65 2c 20 61 20 53 51 4c 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 6d 61 6c 66 6f 72 6d 65 64 20 64 61 74 61 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p> </div> <div cl
2024-05-24 06:27:19 UTC	1369	IN	Data Raw: 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 70 Data Ascii: den">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></sp
2024-05-24 06:27:19 UTC	593	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 28 29 20 7b 76 61 72 20 5f 30 78 69 20 3d 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 20 7c 7c 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 20 28 5f 30 78 69 29 20 7b 76 61 72 20 5f 30 78 6a 20 3d 20 5f 30 78 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5f 30 78 6a 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6a 73 3b 5f 30 78 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 5f 30 78 6a 29 3b 7d 7d 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 21 3d 3d 20 27 6c 6f 61 64 69 6e 67 27 29 20 7b 68 61 Data Ascii: );function handler() {var _0xi = _0xh.contentDocument \|\| _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading') {ha
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50309	208.93.169.131	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	919	OUT	GET /bh/rtset?ev=AAJTiE7MoGcAABTuYnJhWg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:19 UTC	1446	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-77c5966d9-fwbcc cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=Mfm5DWu5r7XL;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 19-May-2025 06:27:19 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_Mfm5DWu5r7XL;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 19-May-2025 06:27:19 GMT;SameSite=None;Partitioned set-cookie: pb_rtb_ev=3-1rjd\|7dN.0.AAJTiE7MoGcAABTuYnJhWg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sat, 24-May-2025 06:27:19 GMT;Max-Age=31536000;SameSite=None set-cookie: pb_rtb_ev_part=3-1rjd\|7dN.0.AAJTiE7MoGcAABTuYnJhWg;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sat, 24-May-2025 06:27:19 GMT;SameSite=None;Partitioned location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AAJTiE7MoGcAABTuYnJhWg&pid=558502&do=add&gdpr=0 transfer-encoding: chunked server: Jetty(10.0.14) set-cookie: INGRESSCOOKIE=55f4456c6623a6e0; path=/; HttpOnly; Secure; SameSite=None connection: close
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50315	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	723	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=index_rtb&uid=ZlAzRkt3uaUAAD53AR3IEwAA%261233 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:20 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:19 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_2=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:19 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50320	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2236	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	864	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_632=23041-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23047-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23234-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&KRTB&23361-p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Set-Cookie: PugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50328	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2219	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:b87569e9-b5c2-4e16-b58e-f18cc16ffd7e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:19 UTC	410	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Transfer-Encoding: chunked Connection: close Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50314	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	618	OUT	GET /pixel?google_nid=rubicon&google_hm=MDVlYzYzNWUwOGE3ZWFmZWVjNzM4YWYzNjA3YjIwMzA1ZTlmMjYwMg&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 24 May 2024 06:27:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50333	141.95.33.120	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	349	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:20 UTC	309	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:19 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:20 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 36 6a 4f 6b 6f 72 33 68 41 54 38 38 4b 30 62 43 64 4a 42 65 52 51 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"6jOkor3hAT88K0bCdJBeRQ=="}
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50323	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	519	OUT	GET /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:20 UTC	304	IN	HTTP/1.1 400 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding content-type: text/html;charset=utf-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:19 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:20 UTC	40	IN	Data Raw: 32 32 0d 0a 70 61 72 74 6e 65 72 20 70 61 72 61 6d 65 74 65 72 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 0d 0a Data Ascii: 22partner parameter must not be null
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50339	81.17.55.123	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	423	OUT	GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=8554246236155519815
2024-05-24 06:27:20 UTC	121	IN	HTTP/1.1 200 OK content-length: 958 content-type: text/html date: Fri, 24 May 2024 06:27:19 GMT connection: close
2024-05-24 06:27:20 UTC	958	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 39 38 4b 55 7a 33 37 79 70 65 39 44 33 58 32 73 66 39 6f 76 67 65 54 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 38 35 35 34 32 34 36 32 33 36 31 35 35 35 31 39 38 31 35 22 20 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 67 65 74 3f 70 3d 4d 35 30 31 39 39 31 36 34 38 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 25 Data Ascii: <html><head></head><body><img src="//match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&gdpr=0&gdpr_consent=&source_user_id=8554246236155519815" /><img src="https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50332	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	592	OUT	GET /pixel?google_nid=rp&google_hm=TFdLQVVOSEwtRC1CRllE&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 24 May 2024 06:27:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50344	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2683	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:503321D4229142C7A5087AC9113CE764&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7 [TRUNCATED]
2024-05-24 06:27:20 UTC	410	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:18 GMT Transfer-Encoding: chunked Connection: close Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50334	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	515	OUT	GET /g/v2/371.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:20 UTC	185	IN	HTTP/1.1 400 Bad Request date: Fri, 24 May 2024 06:27:19 GMT transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:20 UTC	547	IN	Data Raw: 32 31 43 0d 0a 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 32 43 6f 6e 74 72 6f 6c 6c 65 72 2e 66 65 74 63 68 43 6c 69 65 6e 74 54 6f 53 65 72 76 65 72 28 6a 61 76 61 2e 6c 61 6e 67 2e 4c 6f 6e 67 2c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 71 75 65 73 74 42 6f 64 79 2c 6a 61 76 61 2e 6c 61 6e 67 2e 49 6e 74 65 67 65 72 2c 6a 61 76 61 2e 6c 61 6e 67 Data Ascii: 21CRequired request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50349	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	2088	OUT	GET /AdServer/SPug?partnerID=156077&gdpr=0&gdpr_consent=&us_privacy=1YNY HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7 [TRUNCATED]
2024-05-24 06:27:20 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50360	74.119.117.16	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	793	OUT	GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dadaptmx%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:19 UTC	543	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 24 May 2024 06:27:19 GMT server: Kestrel cache-control: no-cache expires: Fri, 24 May 2024 00:00:00 GMT location: https://x.bidswitch.net/sync?dsp_id=462&ssp=adaptmx&user_id=k-ITlwOc5fRVdJJqXINxZak8-LL-h-fL9jO0WZ8A&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 954837 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50343	52.213.145.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	449	OUT	GET /merge?pid=80&3pid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; _ljtrtb_80=LWKAUNHL-D-BFYD
2024-05-24 06:27:20 UTC	922	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_80=LWKAUNHL-D-BFYD; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtb=eJyrVrIwULJS8gn3dgz18%2FDRddF1cot0UaoFAEwLBkw%3D; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:20 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LWKAUNHL-D-BFYD; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:20 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:20 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-05-24 06:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50352	54.195.158.29	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:19 UTC	521	OUT	GET /sync/pubmatic/7F542745-2D60-41EB-9A96-52B90C82DF34?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8
2024-05-24 06:27:20 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-24 06:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50353	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	727	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:20 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:20 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:20 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50357	18.239.69.99	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	656	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWKAUNHL-D-BFYD HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=7c0kCriUA6; IQver=1.9; IQMID=137264047#1716532029761; intentIQCDate=1716532029753; ASDT=0; CSDT=UEQ6MTUxMDZfMCZVRGZkVjBnIzE1MzU4XzAmVURmZFNxMQ; IQPData=137264047#1716532038110#0#1716532029745
2024-05-24 06:27:20 UTC	1357	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 24 May 2024 06:27:20 GMT Set-Cookie: intentIQ=7c0kCriUA6; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:20 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:20 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=137264047#1716532040277#0#1716532029745; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:20 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVRGZkVlpnIzE1MzU4XzAmVURmZFNxMQ; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:20 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 24 May 2026 06:27:20 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQMID=137264047#1716532029761; Domain=.intentiq.com; Expires=Sun, 23 Jun 2024 06:27:20 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: j4cSLWGx0mrDKAcB1rysgJ22ebv4kx4fVmVQK91u64trwKODvOqyeA==
2024-05-24 06:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50351	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	885	OUT	GET /csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D175kELn9xvfXoe3C4qjRaWS8%26source_user_id%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
2024-05-24 06:27:20 UTC	612	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:20 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D; path=/; expires=Sat, 24 May 2025 06:27:20 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.sharethrough.com/sync/v1?source_id=175kELn9xvfXoe3C4qjRaWS8&source_user_id=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50362	185.64.190.81	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	2280	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-dsl4wtVE2uUU8Rdkav_IeU5Zg.sDJ70-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7 [TRUNCATED]
2024-05-24 06:27:20 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:20 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532040; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:20 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50359	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	2609	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7 [TRUNCATED]
2024-05-24 06:27:20 UTC	968	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=158355:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=6; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:20 GMT Content-Length: 281 Connection: close
2024-05-24 06:27:20 UTC	281	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 38 33 35 35 26 61 6d 70 3b 70 6d 63 3d 31 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 25 32 46 73 65 74 75 69 64 25 33 46 41 25 33 44 62 66 66 64 36 39 66 33 2d 66 32 34 64 2d 34 39 63 37 2d 38 61 66 66 2d 62 33 30 62 62 31 65 34 66 35 35 39 25 32 36 62 69 64 64 65 72 25 33 44 70 75 62 6d 61 74 69 63 25 32 36 75 69 64 25 33 44 37 46 35 34 32 37 34 35 2d 32 44 36 30 2d 34 31 45 42 2d 39 41 39 36 2d 35 32 42 39 30 43 38 32 44 46 33 34 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50340	37.252.172.123	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	879	OUT	GET /prebid/setuid?bidder=rubicon&uid=LWKAUNHL-D-BFYD&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=4426393169609033625; anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#GD_XuV'.gGq_Uy'vMS@3fKL+hcDY2BG-^(XB0QUZjIV]tDRaZ:$$_Ib9]DX%FIQU+?qcvSJi5V/m0/ky+-%ZBG2vm3?]PEL5opityAaSJ*<-1c[x3nXm/!)'E25C6c[; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=
2024-05-24 06:27:20 UTC	1973	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 2a493dff-a1b1-4f30-bbee-cfacc52610d8 Set-Cookie: XANDR_PANID=1fJUoWeetG-fr855vYpp07adNaFpcx6Vj3J0EbMubkdN-ZRyuo4kfVahohmx9xXxdh_hqa4twvGBq3Ml6nKHMqtUS0vCBRYuhMTMbgYGVwE.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.gD>6NRF']wIg2In8=bO'r!A#EjF:^1+9RkhB3zrqv.`'Jrt5LGe:(1a5C2q]>)S?Fn4bzU'Ixpv(E:L>>e5)hn)R8EfNYTnWGlwX=<@[5V!pAuFlW?'2)8bi@6n_Ik8$S6!$0tDb6_:!)FIk96%zh; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MjBaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjRUMDY6Mjc6MTBaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-24 06:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50361	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	2398	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7 [TRUNCATED]
2024-05-24 06:27:20 UTC	968	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=158355:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=6; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:19 GMT Content-Length: 281 Connection: close
2024-05-24 06:27:20 UTC	281	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 38 33 35 35 26 61 6d 70 3b 70 6d 63 3d 31 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 25 32 46 73 65 74 75 69 64 25 33 46 41 25 33 44 62 66 66 64 36 39 66 33 2d 66 32 34 64 2d 34 39 63 37 2d 38 61 66 66 2d 62 33 30 62 62 31 65 34 66 35 35 39 25 32 36 62 69 64 64 65 72 25 33 44 70 75 62 6d 61 74 69 63 25 32 36 75 69 64 25 33 44 37 46 35 34 32 37 34 35 2d 32 44 36 30 2d 34 31 45 42 2d 39 41 39 36 2d 35 32 42 39 30 43 38 32 44 46 33 34 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50358	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	1997	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=264441c2-0e4b-4098-920f-1c8a6b45a578&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7 [TRUNCATED]
2024-05-24 06:27:20 UTC	835	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:20 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_377=6810-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22918-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&22926-264441c2-0e4b-4098-920f-1c8a6b45a578&KRTB&23031-264441c2-0e4b-4098-920f-1c8a6b45a578; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:20 GMT; path=/ Set-Cookie: PugT=1716532040; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:20 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50337	18.159.201.246	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:20 UTC	101	IN	HTTP/1.1 404 Not Found Date: Fri, 24 May 2024 06:27:20 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50355	34.91.62.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	534	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=503321D4229142C7A5087AC9113CE764
2024-05-24 06:27:20 UTC	552	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:20 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Thu, 23 May 2024 06:27:20 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-24 06:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50354	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	755	OUT	GET /qmap?c=240&tp=PUBM&tpid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
2024-05-24 06:27:20 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:20 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.26.229 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:20 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50365	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	1092	OUT	GET /map/c=8587/tp=CLOD/tpid=20495bfc7d8dc46d/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
2024-05-24 06:27:20 UTC	369	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:20 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.29.215 Location: https://pixel.onaudience.com/?partner=104&icm&cver&mapped=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50368	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	553	OUT	GET /match?bidder_id=10&external_user_id=120ce5db-d35e-4f16-8347-f58a51fd3b1b&ts=1716532039&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:20 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:20 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50363	37.252.172.123	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	1080	OUT	GET /prebid/setuid?bidder=amx&uid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&do=pjnewsletter.com HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=4426393169609033625; anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]tbnF:^1+9RkhB3zrqv.`'Jrt5LGe:(1a5C2q]>)S?Fn4bzU'Ixpv(E:L>>e5)hn)R8EfNYTnWGlwX=<@[5V!pAuFlW?'2)8bi@6n_Ik8$S6!/D)oz@_-4J]s0eUY-cAC#PK#HJ_H_JV//DXt7@T0M?RT%yDcVb6=dcnB40/+0J2!4UK5ke5!T; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoxOVoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==
2024-05-24 06:27:20 UTC	2144	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 124eacd9-270f-4adb-9dbd-2f71bad9b62e Set-Cookie: XANDR_PANID=SiMxNHTNw0ObAMflBEsqv_DEBvPxm6kIlRqyLrxCwsb-ECGtj-ixE2H_6seauz7uyBJnoc5meSoN-5RJVSx1f-gmFl9MaWpYm5bdz5rD15Q.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]taXh6!84P)[Q_Dzjkr9D+qip/FbMQ.6CHb$L4V1GuoaFf52-ovfn-fn8^WQ.QIa1EipQ!wNU3k^k/US@n$G2lWU]rmB0Z+!c?GY`._Co?0z*I!1^0gb.<6Eq?k=QSE'I_$9#r%1+EmE=5':e6dE[/a+N(/k@XJ4kMAKNN2Wm:4=sB!4aLolb1@W; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoyMFoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-24 06:27:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50366	141.94.171.212	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	954	OUT	GET /?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent HTTP/1.1 Host: pixel-eu.onaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1
2024-05-24 06:27:20 UTC	702	IN	HTTP/1.1 302 Found set-cookie: cookie=20495bfc7d8dc46d; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:20 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects109=1; Max-Age=86400; Expires=Sat, 25 May 2024 06:27:20 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://pixel-eu.onaudience.com/?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253DGp1rLOrtXaWRVhMjTQSQjWUQ%2526gdpr%253D0%2526gdpr_consent%253D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50367	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	2230	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8792414088104974232&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_8 [TRUNCATED]
2024-05-24 06:27:20 UTC	736	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_22=14911-8792414088104974232&KRTB&23150-8792414088104974232&KRTB&23527-8792414088104974232; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Set-Cookie: PugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50369	91.228.74.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	804	OUT	GET /pixel/p-QcHdy7VcGLKJK.gif?idmatch=0&siteId=995936&rndcb=7057081357 HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EJ0BCwH2K_ijAA; mc=66503341-c2a82-65fef-9a444
2024-05-24 06:27:20 UTC	624	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:20 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://sync.1rx.io/usersync/quantcast/dPjxLHH98C1vrfZ9evzpKneooXpv96UodvrYZ9A3? P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EOwBEgH2K_ijCsuZMA; expires=Thu, 22-Aug-2024 06:27:20 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50371	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	799	OUT	GET /c/231/2/5/4.gif?puid=4426393169609033625&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:20 UTC	1570	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:20 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://rtb.gumgum.com/getuid/id5?r=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F441%2F4%2F5.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:20 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50375	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	854	OUT	GET /match?liv=h&us_privacy=&bidder_id=25&external_user_id=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:20 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Fri, 24 May 2024 06:27:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:20 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50372	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	903	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AAJTiE7MoGcAABTuYnJhWg&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AAJTiE7MoGcAABTuYnJhWg
2024-05-24 06:27:21 UTC	633	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:21 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AAJTiE7MoGcAABTuYnJhWg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AAJTiE7MoGcAABTuYnJhWg; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:21 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50373	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	3028	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&expiration=1716618440&nuid=7F542745-2D60-41EB-9A96-52B90C82DF34&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; ipc=158355^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID^0^0; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7 [TRUNCATED]
2024-05-24 06:27:21 UTC	823	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&22715-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK&KRTB&23519-AQAG15iAZjy5FwIlmzX1AQEBAQEBAQCOqElQSgEBAI6oSVBK; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:19 GMT; path=/ Set-Cookie: PugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50376	178.250.1.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	549	OUT	GET /js/ld/publishertag.prebid.144.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:21 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Fri, 24 May 2024 06:27:21 GMT content-type: text/javascript content-length: 98590 last-modified: Fri, 27 Oct 2023 06:43:26 GMT etag: "653b5c0e-1811e" expires: Sat, 25 May 2024 06:27:21 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-05-24 06:27:21 UTC	15900	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 69 6f 78 78 64 6a 48 44 7a 46 42 74 35 30 6a 73 4b 48 63 55 4c 6f 45 6a 66 50 6a 6e 37 46 75 70 48 55 4f 62 55 58 54 45 75 6c 48 31 69 49 6d 63 61 54 31 4f 59 59 71 34 6e 58 65 64 76 2b 76 36 79 73 74 4c 2f 6d 63 69 77 34 33 65 4e 32 4e 31 73 42 71 75 6b 45 63 42 31 47 33 79 4c 61 6f 7a 77 41 51 6f 5a 61 72 49 76 70 65 2b 6f 70 32 49 38 64 44 57 43 72 6e 6d 51 4c 35 61 41 33 54 52 46 41 32 68 49 47 4d 45 73 47 44 50 64 6c 6a 49 66 5a 6c 78 50 4b 42 35 54 74 38 72 5a 4d 6b 77 64 38 54 2b 37 55 45 4a 4f 44 6b 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-05-24 06:27:21 UTC	16319	IN	Data Raw: 49 54 45 4f 5f 43 53 4d 5f 43 4f 55 4e 54 45 52 53 5f 48 41 4e 44 4c 45 52 3d 22 63 73 6d 2f 63 6f 75 6e 74 65 72 73 22 2c 62 65 2e 43 52 49 54 45 4f 5f 45 52 52 4f 52 5f 48 41 4e 44 4c 45 52 3d 22 65 72 72 6f 72 22 2c 62 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3d 22 70 72 65 62 69 64 2f 61 75 64 69 74 22 2c 62 65 29 3b 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3d 65 7d 76 61 72 20 77 65 3d 28 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 45 76 65 6e 74 73 54 6f 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 65 26 26 6e 61 Data Ascii: ITEO_CSM_COUNTERS_HANDLER="csm/counters",be.CRITEO_ERROR_HANDLER="error",be.CRITEO_BIDDER_AUDIT_HANDLER="prebid/audit",be);function be(e){void 0===e&&(e=!1),this.auditMode=e}var we=(Ce.prototype.sendEventsToBeacon=function(e,t){navigator.sendBeacon&&e&&na
2024-05-24 06:27:21 UTC	16384	IN	Data Raw: 3d 3d 69 26 26 28 69 3d 21 31 29 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 45 6e 64 70 6f 69 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 73 70 2d 73 79 6e 63 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 2f 70 69 78 65 6c 73 22 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 54 69 6d 65 6f 75 74 3d 32 65 33 2c 74 68 69 73 2e 65 72 72 6f 72 52 65 70 6f 72 74 65 72 3d 74 2c 74 68 69 73 2e 6f 6e 50 69 78 65 6c 73 52 65 74 72 69 65 76 65 64 3d 65 2c 74 68 69 73 2e 64 65 62 75 67 3d 69 7d 76 61 72 20 65 74 3d 28 74 74 2e 65 78 65 63 55 73 65 72 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 31 29 2c 6e 65 77 20 24 65 28 74 74 2e 61 70 70 65 6e 64 55 73 65 72 53 79 6e 63 50 69 78 Data Ascii: ==i&&(i=!1),this.pixelSyncEndpoint="https://ssp-sync.criteo.com/user-sync/pixels",this.pixelSyncTimeout=2e3,this.errorReporter=t,this.onPixelsRetrieved=e,this.debug=i}var et=(tt.execUserSync=function(e,t,i,n){void 0===n&&(n=!1),new $e(tt.appendUserSyncPix
2024-05-24 06:27:21 UTC	16123	IN	Data Raw: 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 30 29 2c 72 3d 7b 5f 5f 75 73 70 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 74 2c 63 61 6c 6c 49 64 3a 6e 7d 7d 3b 6f 2e 75 73 70 61 70 69 43 61 6c 6c 62 61 63 6b 73 5b 6e 5d 3d 69 2c 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 72 2c 22 2a 22 29 7d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 3f 76 74 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 3b 69 66 28 74 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 74 75 72 6e 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 Data Ascii: om().toString(10),r={__uspapiCall:{command:e,parameter:t,callId:n}};o.uspapiCallbacks[n]=i,s.postMessage(r,"*")},this.currentWindow.addEventListener("message",function(e){var t="string"==typeof e.data?vt(e.data):e.data;if(t&&t.__uspapiReturn&&t.__uspapiRe
2024-05-24 06:27:21 UTC	16384	IN	Data Raw: 72 65 71 75 65 73 74 52 65 63 65 69 76 65 64 28 29 3b 76 61 72 20 74 3d 75 65 28 65 29 7c 7c 7b 7d 2c 69 3d 78 65 28 74 29 3b 76 6f 69 64 20 30 21 3d 3d 73 2e 63 61 6c 6c 62 61 63 6b 53 75 63 63 65 73 73 26 26 73 2e 63 61 6c 6c 62 61 63 6b 53 75 63 63 65 73 73 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2c 69 29 2c 64 2e 66 69 6e 69 73 68 28 29 2c 21 30 3d 3d 3d 74 2e 75 73 65 72 5f 73 79 6e 63 26 26 65 74 2e 65 78 65 63 55 73 65 72 53 79 6e 63 28 6e 2e 63 6f 6e 74 65 78 74 2e 72 65 6d 6f 74 65 4c 6f 67 67 69 6e 67 2c 6f 2c 74 29 2c 72 2e 67 65 74 4d 65 74 72 69 63 73 4d 61 6e 61 67 65 72 28 29 2e 73 65 6e 64 45 76 65 6e 74 73 28 72 2c 61 2c 21 30 29 7d 63 61 74 63 68 28 65 29 7b 73 2e 72 65 70 6f 72 74 41 73 79 6e 63 52 65 71 75 65 73 74 45 78 Data Ascii: requestReceived();var t=ue(e)\|\|{},i=xe(t);void 0!==s.callbackSuccess&&s.callbackSuccess(JSON.stringify(t),i),d.finish(),!0===t.user_sync&&et.execUserSync(n.context.remoteLogging,o,t),r.getMetricsManager().sendEvents(r,a,!0)}catch(e){s.reportAsyncRequestEx
2024-05-24 06:27:21 UTC	16384	IN	Data Raw: 6c 57 65 62 49 64 28 29 2e 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 29 7d 2c 41 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 4f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 73 65 72 44 61 74 61 48 61 6e 64 6c 65 72 73 2e 6f 70 74 4f 75 74 28 29 2e 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 29 7d 2c 41 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 42 75 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 73 65 72 44 61 74 61 48 61 6e 64 6c 65 72 73 2e 62 75 6e 64 6c 65 28 29 2e 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 29 7d 2c 41 69 29 3b 66 75 6e 63 74 69 6f 6e 20 41 69 28 65 29 7b 74 68 69 73 2e 75 73 65 72 44 61 74 61 48 61 6e 64 6c 65 72 73 3d 65 7d 76 61 Data Ascii: lWebId().fromAllStorages()},Ai.prototype.getOptOut=function(){return this.userDataHandlers.optOut().fromAllStorages()},Ai.prototype.getBundle=function(){return this.userDataHandlers.bundle().fromAllStorages()},Ai);function Ai(e){this.userDataHandlers=e}va
2024-05-24 06:27:21 UTC	960	IN	Data Raw: 6f 3d 65 6e 28 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 7c 7c 7b 7d 2c 65 29 2c 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 5f 70 72 65 62 69 64 5f 31 34 34 3d 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 2c 24 2e 44 65 62 75 67 28 22 50 75 62 6c 69 73 68 65 72 20 54 61 67 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 77 69 74 68 20 77 69 6e 64 6f 77 2e 63 72 69 74 65 6f 5f 70 75 62 74 61 67 7c 63 72 69 74 65 6f 5f 70 75 62 74 61 67 5f 70 72 65 62 69 64 5f 31 34 34 2c 20 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 7c 43 72 69 74 65 6f 5f 70 72 65 62 69 64 5f 31 34 34 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 65 2c 74 29 7b 69 66 28 74 6e 28 65 29 26 26 74 6e 28 74 29 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 69 66 28 74 6e 28 74 5b 69 5d 29 29 7b 69 66 28 21 74 6e 28 65 Data Ascii: o=en(window.Criteo\|\|{},e),window.Criteo_prebid_144=window.Criteo,$.Debug("Publisher Tag initialized with window.criteo_pubtag\|criteo_pubtag_prebid_144, window.Criteo\|Criteo_prebid_144")}function en(e,t){if(tn(e)&&tn(t))for(var i in t)if(tn(t[i])){if(!tn(e
2024-05-24 06:27:21 UTC	136	IN	Data Raw: 6e 74 73 29 29 2c 77 69 6e 64 6f 77 2e 63 72 69 74 65 6f 5f 70 75 62 74 61 67 2e 63 6f 6e 74 65 78 74 2e 73 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 2e 67 65 74 53 65 72 76 69 63 65 73 41 73 79 6e 63 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 47 74 28 65 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 48 65 6c 70 65 72 29 7d 29 7d 6e 6e 28 29 2c 65 2e 44 65 63 6c 61 72 65 50 72 65 62 69 64 3d 6e 6e 7d 28 7b 7d 29 3b Data Ascii: nts)),window.criteo_pubtag.context.serviceProvider.getServicesAsync(function(e){Gt(e.localStorageHelper)})}nn(),e.DeclarePrebid=nn}({});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50377	50.57.31.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	694	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:21 UTC	688	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 5 Set-Cookie: SEUNCY=E325B534875EA12A; Expires=Sat, 24 May 2025 06:27:20 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Fri, 24 May 2024 06:27:20 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50378	185.89.210.141	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	1503	OUT	GET /getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3Ddn2m51u%26 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]tbnF:^1+9RkhB3zrqv.`'Jrt5LGe:(1a5C2q]>)S?Fn4bzU'Ixpv(E:L>>e5)hn)R8EfNYTnWGlwX=<@[5*V!pAuFlW?'2)8bi@6n_Ik8$S6!/D)oz@_-4J]s0eUY-cAC#PK#HJ_H_JV//DXt7@T0M?RT%yDcVb6=dcnB40/+0J2!4UK5ke5!T; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoxOVoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==
2024-05-24 06:27:21 UTC	1461	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ps.eyeota.net/match?uid=4426393169609033625&bid=2cr76e1&dc_rc=4&dc_mr=5&dc_orig=dn2m51u& AN-X-Request-Uuid: ee2b64fd-92a3-4617-bb76-f56b4e9ca22e Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:21 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:21 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50380	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	2878	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:21 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:20 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532040; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:20 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50382	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:20 UTC	2775	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:21 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50381	18.159.229.46	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	741	OUT	GET /sync/v1?source_id=175kELn9xvfXoe3C4qjRaWS8&source_user_id=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:21 UTC	83	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:21 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50374	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	758	OUT	GET /sync?dsp_id=462&ssp=adaptmx&user_id=k-ITlwOc5fRVdJJqXINxZak8-LL-h-fL9jO0WZ8A&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:21 UTC	545	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:21 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pb-am.a-mo.net/setuid?bidder=bid_switch&uid=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50383	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	821	OUT	GET /ups/58771/fed?1p=0&gdpr=0&gdpr_consent=&us_privacy=&pixelId=58771&puid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://prebid.a-mo.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
2024-05-24 06:27:21 UTC	618	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:21 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://prebid.a-mo.net Access-Control-Allow-Credentials: true Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-24 06:27:21 UTC	323	IN	Data Raw: 31 33 63 0d 0a 7b 22 76 6d 75 69 64 22 3a 20 22 30 46 66 2d 45 56 42 77 54 6d 51 49 73 58 4b 49 4c 35 72 61 73 53 39 54 30 66 73 65 5a 35 36 34 6e 66 4a 55 72 45 4f 76 63 61 32 5a 56 75 4a 45 4b 38 78 31 48 6e 52 71 69 7a 2d 4c 67 6b 78 74 61 7a 32 5a 49 44 45 6d 55 6f 2d 6e 37 53 74 65 79 59 6e 32 75 51 22 2c 20 22 63 6f 6e 6e 65 63 74 69 64 22 3a 20 22 30 46 66 2d 45 56 42 77 54 6d 51 49 73 58 4b 49 4c 35 72 61 73 53 39 54 30 66 73 65 5a 35 36 34 6e 66 4a 55 72 45 4f 76 63 61 32 5a 56 75 4a 45 4b 38 78 31 48 6e 52 71 69 7a 2d 4c 67 6b 78 74 61 7a 32 5a 49 44 45 6d 55 6f 2d 6e 37 53 74 65 79 59 6e 32 75 51 22 2c 20 22 63 6f 6e 6e 65 63 74 49 64 22 3a 20 22 30 46 66 2d 45 56 42 77 54 6d 51 49 73 58 4b 49 4c 35 72 61 73 53 39 54 30 66 73 65 5a 35 36 34 6e Data Ascii: 13c{"vmuid": "0Ff-EVBwTmQIsXKIL5rasS9T0fseZ564nfJUrEOvca2ZVuJEK8x1HnRqiz-Lgkxtaz2ZIDEmUo-n7SteyYn2uQ", "connectid": "0Ff-EVBwTmQIsXKIL5rasS9T0fseZ564nfJUrEOvca2ZVuJEK8x1HnRqiz-Lgkxtaz2ZIDEmUo-n7SteyYn2uQ", "connectId": "0Ff-EVBwTmQIsXKIL5rasS9T0fseZ564n
2024-05-24 06:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50384	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	2393	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:21 UTC	659	IN	HTTP/1.1 204 No Content Cache-Control: private,max-age=86400 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=0^^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=7; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50385	15.235.15.221	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	702	OUT	GET /?partner=104&icm&cver&mapped=72aac350df2b4a40201cac1fd18dfe1f&gdpr=0 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1
2024-05-24 06:27:21 UTC	421	IN	HTTP/1.1 302 Found set-cookie: cookie=20495bfc7d8dc46d; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:21 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects252=1; Max-Age=86400; Expires=Sat, 25 May 2024 06:27:21 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://cms.analytics.yahoo.com/cms?partner_id=DELI&gdpr=0 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50386	141.94.171.212	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	1068	OUT	GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253DGp1rLOrtXaWRVhMjTQSQjWUQ%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: pixel-eu.onaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1; done_redirects109=1
2024-05-24 06:27:21 UTC	459	IN	HTTP/1.1 302 Found set-cookie: cookie=20495bfc7d8dc46d; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:21 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://tags.bluekai.com/site/33141?&id=e1c86c3f06009e11&redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3DGp1rLOrtXaWRVhMjTQSQjWUQ%26gdpr%3D0%26gdpr_consent%3D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50389	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	2667	OUT	GET /AdServer/SPug?partnerID=156423&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:21 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532039; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50390	50.57.31.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	728	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=E325B534875EA12A
2024-05-24 06:27:21 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 14 Set-Cookie: SEUNCY=E325B534875EA12A; Expires=Sat, 24 May 2025 06:27:21 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Fri, 24 May 2024 06:27:21 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-05-24 06:27:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50388	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	874	OUT	GET /usersync/quantcast/dPjxLHH98C1vrfZ9evzpKneooXpv96UodvrYZ9A3? HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-24 06:27:21 UTC	784	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:21 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 24 May 2025 06:27:21 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 connection: close
2024-05-24 06:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50391	81.17.55.116	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	999	OUT	GET /redir?partneruserid=AAJTiE7MoGcAABTuYnJhWg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=8554246236155519815
2024-05-24 06:27:22 UTC	552	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 24 May 2024 06:27:21 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=8554246236155519815&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=127:AAJTiE7MoGcAABTuYnJhWg; expires=Sat, 24 May 2025 06:27:21 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50393	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	2878	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:22 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:20 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532040; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:20 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50387	54.217.112.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	710	OUT	GET /getuid/id5?r=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F441%2F4%2F5.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:22 UTC	417	IN	HTTP/1.1 302 Date: Fri, 24 May 2024 06:27:21 GMT Content-Length: 0 Connection: close Server: nginx Set-Cookie: vst=e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0; Domain=.gumgum.com; Expires=Sat, 24 May 2025 06:27:21 GMT; Path=/; Secure; SameSite=None Location: https://id5-sync.com/c/231/441/4/5.gif?puid=e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0&gdpr=0&gdpr_consent= Content-Language: en-US Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50392	52.57.150.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	713	OUT	GET /match?uid=4426393169609033625&bid=2cr76e1&dc_rc=4&dc_mr=5&dc_orig=dn2m51u& HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:22 UTC	466	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:22 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 24 May 2024 06:27:22 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50396	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	882	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:22 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:21 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:22 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50394	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	779	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:22 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:21 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:22 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50395	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:21 UTC	2775	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:22 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:21 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532041; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:21 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50397	147.75.84.158	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	724	OUT	GET /setuid?bidder=bid_switch&uid=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: pb-am.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prebid.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559
2024-05-24 06:27:22 UTC	365	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:21 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_12=1; path=/; domain=pb-am.a-mo.net; expires=Sat, 25 May 2024 06:27:22 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50398	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	746	OUT	GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
2024-05-24 06:27:22 UTC	278	IN	HTTP/1.1 302 Redirect Date: Fri, 24 May 2024 06:27:22 GMT Connection: close Server: ATS/9.1.10.112 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58679/cms?partner_id=DELI&gdpr=0 Content-Type: text/html Content-Language: en Content-Length: 350
2024-05-24 06:27:22 UTC	350	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50399	3.75.62.37	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	591	OUT	GET /ups/58771/fed?1p=0&gdpr=0&gdpr_consent=&us_privacy=&pixelId=58771&puid=bffd69f3-f24d-49c7-8aff-b30bb1e4f559 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
2024-05-24 06:27:22 UTC	510	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:22 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-24 06:27:22 UTC	323	IN	Data Raw: 31 33 63 0d 0a 7b 22 76 6d 75 69 64 22 3a 20 22 67 36 6f 4b 47 2d 67 61 68 4b 4d 7a 52 31 4a 76 76 59 6a 43 45 54 43 54 34 62 70 35 4a 72 46 47 6c 4e 58 39 51 58 59 43 35 57 4e 62 30 4c 58 6b 78 67 4e 42 42 47 72 58 46 63 54 61 31 33 58 48 56 5a 43 69 36 73 4c 32 2d 57 59 51 46 42 39 78 4d 42 4d 53 71 77 22 2c 20 22 63 6f 6e 6e 65 63 74 69 64 22 3a 20 22 67 36 6f 4b 47 2d 67 61 68 4b 4d 7a 52 31 4a 76 76 59 6a 43 45 54 43 54 34 62 70 35 4a 72 46 47 6c 4e 58 39 51 58 59 43 35 57 4e 62 30 4c 58 6b 78 67 4e 42 42 47 72 58 46 63 54 61 31 33 58 48 56 5a 43 69 36 73 4c 32 2d 57 59 51 46 42 39 78 4d 42 4d 53 71 77 22 2c 20 22 63 6f 6e 6e 65 63 74 49 64 22 3a 20 22 67 36 6f 4b 47 2d 67 61 68 4b 4d 7a 52 31 4a 76 76 59 6a 43 45 54 43 54 34 62 70 35 4a 72 46 47 6c Data Ascii: 13c{"vmuid": "g6oKG-gahKMzR1JvvYjCETCT4bp5JrFGlNX9QXYC5WNb0LXkxgNBBGrXFcTa13XHVZCi6sL2-WYQFB9xMBMSqw", "connectid": "g6oKG-gahKMzR1JvvYjCETCT4bp5JrFGlNX9QXYC5WNb0LXkxgNBBGrXFcTa13XHVZCi6sL2-WYQFB9xMBMSqw", "connectId": "g6oKG-gahKMzR1JvvYjCETCT4bp5JrFGl
2024-05-24 06:27:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50404	50.57.31.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	492	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=7F542745-2D60-41EB-9A96-52B90C82DF34&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=E325B534875EA12A
2024-05-24 06:27:22 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 14 Set-Cookie: SEUNCY=E325B534875EA12A; Expires=Sat, 24 May 2025 06:27:22 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Fri, 24 May 2024 06:27:22 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-05-24 06:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50402	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	902	OUT	GET /cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=8554246236155519815&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AAJTiE7MoGcAABTuYnJhWg
2024-05-24 06:27:23 UTC	468	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:22 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAJTiE7MoGcAABTuYnJhWg&gdpr=0&gdpr_consent= Server: gunicorn set-cookie: bito=AAJTiE7MoGcAABTuYnJhWg; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:22 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50403	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	867	OUT	GET /c/231/441/4/5.gif?puid=e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:23 UTC	1743	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:22 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ice.360yield.com/match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-1024KS-b_dA2vXhi9BW7vzHihsG2x_pVkz2skk3Vpg&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F231%2F124%2F3%2F6.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:22 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50406	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	882	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:23 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:22 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:22 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 4 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50405	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	2775	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:23 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:21 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532041; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:21 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50407	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	779	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:23 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:22 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:23 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50408	3.33.220.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	786	OUT	GET /track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCLbw6aip8f08EAU4AVoLYWRjb25kdWN0b3JgAg..
2024-05-24 06:27:23 UTC	543	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:22 GMT Content-Length: 191 Connection: close server: Kestrel location: https://ps.eyeota.net/match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCO6Y19ep8f08EAU4AVoGZXllb3RhYAI.; expires=Sat, 24 May 2025 06:27:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:23 UTC	191	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 75 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 62 69 64 3d 31 65 32 6e 34 6f 75 22 3e 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 75 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 62 69 64 3d 31 65 32 6e 34 6f 75 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ps.eyeota.net/match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou">https://ps.eyeota.net/match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50401	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:22 UTC	1006	OUT	GET /csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
2024-05-24 06:27:23 UTC	628	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:23 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D; path=/; expires=Sat, 24 May 2025 06:27:23 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50409	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	756	OUT	GET /ups/58679/cms?partner_id=DELI&gdpr=0 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; IDSYNC="190u~2ili:196y~2ili"
2024-05-24 06:27:23 UTC	753	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:23 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="190u~2ili:196y~2ili:199z~2ili";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 24-May-2025 06:27:23 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://pixel.onaudience.com/?partner=252&mapped=y-Yk23sBpE2pQIvWiGC9Zuef9eG_SlFPzbuA--~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBD8zUGYCEPjDwhYKZTiMOFMHm-KvUZsFEgEBAQGEUWZaZgAAAAAA_eMAAA&S=AQAAArKWCetEu22923avbe0HrM8; Expires=Sat, 24 May 2025 12:27:23 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50410	178.250.1.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	373	OUT	GET /js/ld/publishertag.prebid.144.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:23 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Fri, 24 May 2024 06:27:23 GMT content-type: text/javascript content-length: 98590 last-modified: Fri, 27 Oct 2023 06:43:26 GMT etag: "653b5c0e-1811e" expires: Sat, 25 May 2024 06:27:23 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-05-24 06:27:23 UTC	15900	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 69 6f 78 78 64 6a 48 44 7a 46 42 74 35 30 6a 73 4b 48 63 55 4c 6f 45 6a 66 50 6a 6e 37 46 75 70 48 55 4f 62 55 58 54 45 75 6c 48 31 69 49 6d 63 61 54 31 4f 59 59 71 34 6e 58 65 64 76 2b 76 36 79 73 74 4c 2f 6d 63 69 77 34 33 65 4e 32 4e 31 73 42 71 75 6b 45 63 42 31 47 33 79 4c 61 6f 7a 77 41 51 6f 5a 61 72 49 76 70 65 2b 6f 70 32 49 38 64 44 57 43 72 6e 6d 51 4c 35 61 41 33 54 52 46 41 32 68 49 47 4d 45 73 47 44 50 64 6c 6a 49 66 5a 6c 78 50 4b 42 35 54 74 38 72 5a 4d 6b 77 64 38 54 2b 37 55 45 4a 4f 44 6b 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-05-24 06:27:23 UTC	16319	IN	Data Raw: 49 54 45 4f 5f 43 53 4d 5f 43 4f 55 4e 54 45 52 53 5f 48 41 4e 44 4c 45 52 3d 22 63 73 6d 2f 63 6f 75 6e 74 65 72 73 22 2c 62 65 2e 43 52 49 54 45 4f 5f 45 52 52 4f 52 5f 48 41 4e 44 4c 45 52 3d 22 65 72 72 6f 72 22 2c 62 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3d 22 70 72 65 62 69 64 2f 61 75 64 69 74 22 2c 62 65 29 3b 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3d 65 7d 76 61 72 20 77 65 3d 28 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 45 76 65 6e 74 73 54 6f 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 65 26 26 6e 61 Data Ascii: ITEO_CSM_COUNTERS_HANDLER="csm/counters",be.CRITEO_ERROR_HANDLER="error",be.CRITEO_BIDDER_AUDIT_HANDLER="prebid/audit",be);function be(e){void 0===e&&(e=!1),this.auditMode=e}var we=(Ce.prototype.sendEventsToBeacon=function(e,t){navigator.sendBeacon&&e&&na
2024-05-24 06:27:23 UTC	16384	IN	Data Raw: 3d 3d 69 26 26 28 69 3d 21 31 29 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 45 6e 64 70 6f 69 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 73 70 2d 73 79 6e 63 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 2f 70 69 78 65 6c 73 22 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 54 69 6d 65 6f 75 74 3d 32 65 33 2c 74 68 69 73 2e 65 72 72 6f 72 52 65 70 6f 72 74 65 72 3d 74 2c 74 68 69 73 2e 6f 6e 50 69 78 65 6c 73 52 65 74 72 69 65 76 65 64 3d 65 2c 74 68 69 73 2e 64 65 62 75 67 3d 69 7d 76 61 72 20 65 74 3d 28 74 74 2e 65 78 65 63 55 73 65 72 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 31 29 2c 6e 65 77 20 24 65 28 74 74 2e 61 70 70 65 6e 64 55 73 65 72 53 79 6e 63 50 69 78 Data Ascii: ==i&&(i=!1),this.pixelSyncEndpoint="https://ssp-sync.criteo.com/user-sync/pixels",this.pixelSyncTimeout=2e3,this.errorReporter=t,this.onPixelsRetrieved=e,this.debug=i}var et=(tt.execUserSync=function(e,t,i,n){void 0===n&&(n=!1),new $e(tt.appendUserSyncPix
2024-05-24 06:27:23 UTC	16384	IN	Data Raw: 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 30 29 2c 72 3d 7b 5f 5f 75 73 70 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 74 2c 63 61 6c 6c 49 64 3a 6e 7d 7d 3b 6f 2e 75 73 70 61 70 69 43 61 6c 6c 62 61 63 6b 73 5b 6e 5d 3d 69 2c 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 72 2c 22 2a 22 29 7d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 3f 76 74 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 3b 69 66 28 74 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 74 75 72 6e 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 Data Ascii: om().toString(10),r={__uspapiCall:{command:e,parameter:t,callId:n}};o.uspapiCallbacks[n]=i,s.postMessage(r,"*")},this.currentWindow.addEventListener("message",function(e){var t="string"==typeof e.data?vt(e.data):e.data;if(t&&t.__uspapiReturn&&t.__uspapiRe
2024-05-24 06:27:23 UTC	960	IN	Data Raw: 6e 28 6e 2c 22 6f 6e 53 75 63 63 65 73 73 22 2c 65 29 7d 6e 2e 63 6f 6e 74 65 78 74 2e 72 65 6d 6f 74 65 4c 6f 67 67 69 6e 67 2e 73 65 6e 64 45 72 72 6f 72 52 65 70 6f 72 74 28 73 2e 75 72 6c 42 75 69 6c 64 65 72 2c 61 29 2c 73 2e 6d 65 74 72 69 63 42 75 69 6c 64 65 72 3d 76 6f 69 64 20 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 64 2e 72 65 71 75 65 73 74 52 65 63 65 69 76 65 64 28 29 2c 76 6f 69 64 20 30 21 3d 3d 73 2e 63 61 6c 6c 62 61 63 6b 45 72 72 6f 72 26 26 73 2e 63 61 6c 6c 62 61 63 6b 45 72 72 6f 72 28 65 2c 74 29 2c 64 2e 66 69 6e 69 73 68 28 29 2c 72 2e 67 65 74 4d 65 74 72 69 63 73 4d 61 6e 61 67 65 72 28 29 2e 73 65 6e 64 45 76 65 6e 74 73 28 72 2c 61 2c 21 30 29 7d 63 61 74 63 68 28 65 29 7b 73 2e 72 65 70 6f 72 74 41 73 Data Ascii: n(n,"onSuccess",e)}n.context.remoteLogging.sendErrorReport(s.urlBuilder,a),s.metricBuilder=void 0},function(e,t){try{d.requestReceived(),void 0!==s.callbackError&&s.callbackError(e,t),d.finish(),r.getMetricsManager().sendEvents(r,a,!0)}catch(e){s.reportAs
2024-05-24 06:27:23 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 63 72 69 74 65 6f 22 3d 3d 3d 65 2e 62 69 64 64 65 72 43 6f 64 65 7d 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 7d 2c 4e 74 2e 67 65 74 52 65 71 75 65 73 74 41 75 63 74 69 6f 6e 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 75 63 74 69 6f 6e 53 74 61 72 74 7d 2c 4e 74 2e 4e 41 4d 45 3d 22 64 69 72 65 63 74 62 69 64 64 69 6e 67 22 2c 4e 74 29 2c 42 74 3b 66 75 6e 63 74 69 6f 6e 20 4e 74 28 65 2c 74 2c 69 2c 6e 2c 72 2c 6f 2c 73 2c 61 2c 63 2c 64 2c 6c 2c 75 2c 70 29 7b 76 61 72 20 68 3d 42 74 2e 63 61 6c 6c 28 74 68 69 73 2c 4e 74 2e 4e 41 4d 45 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 68 2e 70 72 6f 66 69 6c 65 49 64 3d 65 2c 68 2e 75 Data Ascii: (function(e){return"criteo"===e.bidderCode})}catch(e){return}},Nt.getRequestAuctionStart=function(e){return e&&e.auctionStart},Nt.NAME="directbidding",Nt),Bt;function Nt(e,t,i,n,r,o,s,a,c,d,l,u,p){var h=Bt.call(this,Nt.NAME)\|\|this;return h.profileId=e,h.u
2024-05-24 06:27:23 UTC	16259	IN	Data Raw: 28 55 69 2e 49 44 43 50 59 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 29 7d 2c 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 63 61 6c 57 65 62 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 65 47 75 69 64 28 55 69 2e 4c 57 49 44 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 29 7d 2c 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 70 74 4f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 46 69 28 42 6f 6f 6c 65 61 6e 2c 55 69 2e 4f 50 54 4f 55 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 2c 55 69 2e 4f 50 54 4f 55 54 5f 52 45 54 45 4e 54 49 4f 4e 5f 54 49 4d 45 5f 48 4f 55 52 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 41 64 61 70 74 65 72 29 7d 2c 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 6e 64 6c 65 3d 66 75 6e 63 Data Ascii: (Ui.IDCPY_COOKIE_NAME)},Ui.prototype.localWebId=function(){return this.createGuid(Ui.LWID_COOKIE_NAME)},Ui.prototype.optOut=function(){return new Fi(Boolean,Ui.OPTOUT_COOKIE_NAME,Ui.OPTOUT_RETENTION_TIME_HOUR,this.storageAdapter)},Ui.prototype.bundle=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50411	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	3085	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=Gp1rLOrtXaWRVhMjTQSQjWUQ&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:23 UTC	680	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:23 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_409=22966-Gp1rLOrtXaWRVhMjTQSQjWUQ; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:23 GMT; path=/ Set-Cookie: PugT=1716532043; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:23 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50413	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	3083	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAJTiE7MoGcAABTuYnJhWg&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:23 UTC	678	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:23 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AAJTiE7MoGcAABTuYnJhWg; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:23 GMT; path=/ Set-Cookie: PugT=1716532043; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:23 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50412	52.57.150.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	697	OUT	GET /match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:24 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:23 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 24 May 2024 06:27:23 GMT
2024-05-24 06:27:24 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50414	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	2775	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:23 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:22 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532042; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:22 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50415	63.32.35.158	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	971	OUT	GET /match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-1024KS-b_dA2vXhi9BW7vzHihsG2x_pVkz2skk3Vpg&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F231%2F124%2F3%2F6.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=f102e783-2700-4bb9-aa0d-8e4779f6d278; tuuid_lu=1716532029; um=!490,tXuZIVw39tcQO1WZwtciZFqjqyfcA8Dgckg,1724308030; umeh=!490,0,1778740030,-1
2024-05-24 06:27:24 UTC	775	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:24 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: um=!79,-xF0iS76PJDaTvjM.CPrL6qGUAt1uaUc4rIQspFlRF2YSXEnBl4yPdw7mFeWb315pSOBIIcIhrVTaZmu,1724308044!490,tXuZIVw39tcQO1WZwtciZFqjqyfcA8Dgckg,1724308030; Expires=Thu, 22 Aug 2024 06:27:24 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!79,0,1778740044,-1!490,0,1778740030,-1; Expires=Thu, 22 Aug 2024 06:27:24 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://id5-sync.com/cq/231/124/3/6.gif?puid=f102e783-2700-4bb9-aa0d-8e4779f6d278&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50416	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	779	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:24 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:23 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:24 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50418	15.235.15.221	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	743	OUT	GET /?partner=252&mapped=y-Yk23sBpE2pQIvWiGC9Zuef9eG_SlFPzbuA--~A&gdpr=0 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1; done_redirects109=1; done_redirects252=1
2024-05-24 06:27:24 UTC	530	IN	HTTP/1.1 302 Found set-cookie: cookie=20495bfc7d8dc46d; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:24 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects236=1; Max-Age=86400; Expires=Sat, 25 May 2024 06:27:24 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://pixel.onaudience.com/?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50417	198.47.127.205	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:23 UTC	3084	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-b0419578-1025-453b-9458-3b49bf185e5c-003 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:24 UTC	754	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:22 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-b0419578-1025-453b-9458-3b49bf185e5c-003&KRTB&17107-RX-b0419578-1025-453b-9458-3b49bf185e5c-003; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 22-Aug-2024 06:27:22 GMT; path=/ Set-Cookie: PugT=1716532042; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:22 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50419	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:24 UTC	3225	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:24 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:24 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532044; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:24 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50420	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:24 UTC	2775	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:24 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:23 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532043; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:23 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50421	15.235.15.221	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:24 UTC	835	OUT	GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=20495bfc7d8dc46d; done_redirects104=1; done_redirects109=1; done_redirects252=1; done_redirects236=1
2024-05-24 06:27:24 UTC	308	IN	HTTP/1.1 302 Found set-cookie: cookie=20495bfc7d8dc46d; Max-Age=31536000; Expires=Sat, 24 May 2025 06:27:24 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://ps.eyeota.net/pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b505f6c0c7ad914 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50424	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:24 UTC	779	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:25 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:24 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:25 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50423	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:24 UTC	955	OUT	GET /cq/231/124/3/6.gif?puid=f102e783-2700-4bb9-aa0d-8e4779f6d278&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:25 UTC	1690	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:25 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://image6.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F429%2F2%2F7.gif%3Fpuid%3D%23PM_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:24 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50422	18.184.216.10	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:25 UTC	461	OUT	GET /match?uid=264441c2-0e4b-4098-920f-1c8a6b45a578&bid=1e2n4ou HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:25 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:25 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 24 May 2024 06:27:25 GMT
2024-05-24 06:27:25 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50426	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:25 UTC	3270	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:25 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:24 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532044; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:24 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50427	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:25 UTC	882	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:25 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:25 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:25 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50425	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:25 UTC	2878	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:25 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:24 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532044; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:24 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50429	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:25 UTC	779	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:26 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:25 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:26 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50428	3.125.70.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:25 UTC	704	OUT	GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b505f6c0c7ad914 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:26 UTC	585	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:25 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://i.w55c.net/ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 Content-Length: 0 Date: Fri, 24 May 2024 06:27:25 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50430	198.47.127.19	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:25 UTC	3215	OUT	GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F429%2F2%2F7.gif%3Fpuid%3D%23PM_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:26 UTC	375	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://id5-sync.com/c/231/429/2/7.gif?puid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Date: Fri, 24 May 2024 06:27:24 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50431	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:26 UTC	3391	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:26 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:25 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532045; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:25 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50432	198.47.127.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:26 UTC	3068	OUT	GET /AdServer/SPug?gdpr=0&p=158355&pmc=1&pr=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Dbffd69f3-f24d-49c7-8aff-b30bb1e4f559%26bidder%3Dpubmatic%26uid%3D7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:26 UTC	559	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:26 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716532046; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 23-Jun-2024 06:27:26 GMT; path=/ Location: https://sync.a-mo.net/setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50433	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:26 UTC	882	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:26 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:25 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:26 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 4 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50434	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:26 UTC	779	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:27 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:26 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:26 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50436	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:26 UTC	963	OUT	GET /c/231/429/2/7.gif?puid=7F542745-2D60-41EB-9A96-52B90C82DF34&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825
2024-05-24 06:27:27 UTC	1776	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:27 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://pixel.tapad.com/idsync/ex/push?partner_id=2922&partner_url=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F108%2F1%2F8.gif%3Fpuid%3D%24%7BTA_DEVICE_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:27 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50435	52.59.104.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:27 UTC	758	OUT	GET /ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1 Host: i.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:27 UTC	731	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 24 May 2024 06:27:26 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-0d9f35a2b2857bf82@eu-central-1a@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=hdnDQ8rd1SaooL5; Domain=.w55c.net; Expires=Mon, 23 Jun 2025 16:27:27 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50437	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:27 UTC	882	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:27 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:27 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:27 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 6 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50438	145.40.97.67	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:27 UTC	779	OUT	GET /setuid?A=bffd69f3-f24d-49c7-8aff-b30bb1e4f559&bidder=pubmatic&uid=7F542745-2D60-41EB-9A96-52B90C82DF34 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=bffd69f3-f24d-49c7-8aff-b30bb1e4f559; _sv3_13=1; _sv3_8=1; _sv3_0=1; _sv3_2=1; _sv3_4=1
2024-05-24 06:27:28 UTC	363	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 24 May 2024 06:27:27 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_4=1; path=/; domain=sync.a-mo.net; expires=Sat, 25 May 2024 06:27:28 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50439	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:27 UTC	852	OUT	GET /idsync/ex/push?partner_id=2922&partner_url=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F108%2F1%2F8.gif%3Fpuid%3D%24%7BTA_DEVICE_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716532031795; TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd; TapAd_3WAY_SYNCS=
2024-05-24 06:27:28 UTC	1185	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:28 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716532031795;Expires=Tue, 23 Jul 2024 06:27:28 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd;Expires=Tue, 23 Jul 2024 06:27:28 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 23 Jul 2024 06:27:28 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://id5-sync.com/c/231/108/1/8.gif?puid=1c74b149-6627-4305-8e39-2d356a63f8cd&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50440	18.194.143.242	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:28 UTC	801	OUT	GET /ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=hdnDQ8rd1SaooL5
2024-05-24 06:27:28 UTC	755	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 24 May 2024 06:27:27 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://ps.eyeota.net/match?bid=9sn4omv&uid=hdnDQ8rd1SaooL5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-001c45a0648e2a03d@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=hdnDQ8rd1SaooL5; Domain=.w55c.net; Expires=Tue, 24 Jun 2025 06:27:28 GMT; Path=/; SameSite=None; Secure Set-Cookie: matcheyeota=5; Domain=.w55c.net; Expires=Sun, 23 Jun 2024 06:27:28 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50441	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:28 UTC	1028	OUT	GET /c/231/108/1/8.gif?puid=1c74b149-6627-4305-8e39-2d356a63f8cd&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:29 UTC	1835	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:28 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ce.lijit.com/merge?pid=58&3pid=7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F1242%2F0%2F9.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:28 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50442	3.125.70.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:29 UTC	740	OUT	GET /match?bid=9sn4omv&uid=hdnDQ8rd1SaooL5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:29 UTC	425	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:29 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://sync.srv.stackadapt.com/sync?nid=eyeota Content-Length: 0 Date: Fri, 24 May 2024 06:27:29 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50443	18.202.254.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:29 UTC	912	OUT	GET /merge?pid=58&3pid=7F542745-2D60-41EB-9A96-52B90C82DF34&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F231%2F1242%2F0%2F9.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; _ljtrtb_80=LWKAUNHL-D-BFYD; ljtrtb=eJyrVrIwULJS8gn3dgz18%2FDRddF1cot0UaoFAEwLBkw%3D
2024-05-24 06:27:30 UTC	1022	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:30 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_80=LWKAUNHL-D-BFYD; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtb=eJyrVrIwULJS8gn3dgz18%2FDRddF1cot0UaoFAEwLBkw%3D; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_58=7F542745-2D60-41EB-9A96-52B90C82DF34; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:30 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id5-sync.com/c/231/1242/0/9.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50148	18.239.70.203	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:29 UTC	588	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:30 UTC	642	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 310033 Connection: close Date: Fri, 24 May 2024 06:27:31 GMT Last-Modified: Tue, 07 May 2024 20:29:13 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 11a78ce92a548aac13fb6ee545aff014.cloudfront.net (CloudFront), 1.1 b12f8dbad5c96c988a65bc3df19995d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 ETag: "3b8ede3ac6facca086f5ab97663513eb" Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: SY6fEpt6PH1dg7DYpezaF8ylIj4D1hdNH8wlZag7tgNYmTvrL_nmGg==
2024-05-24 06:27:30 UTC	15742	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 35 30 36 2e 31 35 31 39 20 2d 20 32 30 32 34 2d 30 35 2d 30 36 20 31 35 3a 31 39 3a 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.506.1519 - 2024-05-06 15:19:52 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-05-24 06:27:30 UTC	2109	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 29 7d 29 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 70 70 53 74 72 69 6e 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 3d 72 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 22 45 3a 70 69 6e 67 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 7d 72 65 74 75 72 6e 5b 6e 2c 6f 5d 7d 28 65 29 2c 32 29 2c 74 3d 6c 5b 30 5d 2c 61 3d 6c 5b 31 5d 2c 75 3d 22 70 69 6e 67 22 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 76 3d 63 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6f 3b 74 72 79 7b 76 61 72 20 72 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 5f 5f 67 70 Data Ascii: ==typeof t&&(n=t)}));void 0===n&&(null!==(e=null==r?void 0:r.gppString)&&void 0!==e?e:"").length>0&&(n=r)}catch(t){o="E:ping: ".concat(t)}return[n,o]}(e),2),t=l[0],a=l[1],u="ping","object"!=typeof t&&(v=c(function(t){var e,o;try{var r=t.globalContext.__gp
2024-05-24 06:27:30 UTC	1024	IN	Data Raw: 65 28 69 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 69 72 61 74 69 6f 6e 20 64 61 74 65 22 29 3b 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 3b 20 65 78 70 69 72 65 73 3d 22 29 2e 63 6f 6e 63 61 74 28 69 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2c 22 3b 20 70 61 74 68 3d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 3b 22 29 7d 2c 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 3d 74 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 56 61 6c 69 64 44 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 Data Ascii: e(i))throw new Error("Invalid expiration date");e.globalContext.document.cookie="".concat(t,"=").concat(n,"; expires=").concat(i.toUTCString(),"; path=").concat(r,";")},this.globalContext=t}return t.prototype.isValidDate=function(t){return t instanceof Da
2024-05-24 06:27:30 UTC	16384	IN	Data Raw: 63 61 74 28 74 2c 27 22 20 61 63 63 6f 75 6e 74 20 69 6e 20 75 73 65 72 73 70 61 63 65 20 6f 62 6a 65 63 74 27 29 29 3b 74 68 69 73 2e 69 64 3d 74 2c 74 68 69 73 2e 73 74 6f 72 65 3d 69 2e 73 74 6f 72 65 2c 74 68 69 73 2e 71 75 65 75 65 3d 69 2e 71 75 65 75 65 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 63 6f 72 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 Data Ascii: cat(t,'" account in userspace object'));this.id=t,this.store=i.store,this.queue=i.queue}return t.prototype.record=function(t,e){return r(this,void 0,void 0,(function(){var o=this;return i(this,(function(r){switch(r.label){case 0:return[4,new Promise((func
2024-05-24 06:27:30 UTC	16384	IN	Data Raw: 67 74 68 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 30 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 45 78 74 65 72 6e 61 6c 45 76 65 6e 74 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 4e 75 6d 62 65 72 4f 66 45 78 74 65 72 6e 61 6c 45 76 65 6e 74 73 28 74 29 3b 74 68 69 73 2e 69 6e 63 72 65 6d 65 6e 74 53 74 6f 72 65 49 74 65 6d 43 6f 75 6e 74 42 79 28 4a 2c 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 4f 6e 49 6e 66 69 6e 69 74 65 4c 6f 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 57 3b 74 68 69 73 2e 69 6e 63 72 65 6d 65 6e 74 53 74 6f 72 65 49 74 65 6d 43 6f 75 6e 74 42 79 28 65 2c 31 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 72 65 Data Ascii: gth)&&void 0!==e?e:0},t.prototype.updateExternalEventCount=function(t){var e=this.getNumberOfExternalEvents(t);this.incrementStoreItemCountBy(J,e)},t.prototype.throwOnInfiniteLoop=function(){var t=this,e=W;this.incrementStoreItemCountBy(e,1);var n=this.re
2024-05-24 06:27:30 UTC	16384	IN	Data Raw: 28 74 2c 65 29 7b 76 61 72 20 6f 3d 74 28 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6f 3f 28 65 2e 75 70 64 61 74 65 28 4f 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 6e 28 7b 7d 2c 74 29 2c 6f 29 7d 29 29 2c 7b 73 74 61 74 75 73 3a 64 2e 63 6f 6d 70 6c 65 74 65 64 7d 29 3a 7b 73 74 61 74 75 73 3a 64 2e 63 61 6e 63 65 6c 6c 65 64 7d 7d 76 61 72 20 54 74 2c 6a 74 3d 6e 65 77 20 75 74 28 7b 73 63 6f 70 65 3a 22 63 78 6d 22 2c 6f 62 6a 65 63 74 3a 22 33 33 61 63 72 6f 73 73 22 2c 61 63 74 69 6f 6e 3a 22 67 65 74 22 2c 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 Data Ascii: (t,e){var o=t(e);return null!=o?(e.update(Ot,(function(t){return n(n({},t),o)})),{status:d.completed}):{status:d.cancelled}}var Tt,jt=new ut({scope:"cxm",object:"33across",action:"get",handler:function(t){var e=t.account;return t.customEvent,r(void 0,void
2024-05-24 06:27:30 UTC	16384	IN	Data Raw: 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 76 65 72 73 69 6f 6e 26 26 74 2e 76 65 72 73 69 6f 6e 21 3d 3d 62 65 2e 4f 70 65 6e 52 54 42 33 5f 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 4f 70 65 6e 52 54 42 20 76 65 72 73 69 6f 6e 20 73 70 65 63 69 66 69 65 64 22 29 3b 76 61 72 20 65 3d 74 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 2c 6f 3d 6e 28 7b 73 6c 6f 74 49 44 3a 74 2e 69 64 2c 73 6c 6f 74 4e 61 6d 65 3a 65 2e 74 61 67 69 64 7d 2c 6b 65 28 65 29 29 2c 72 3d 4c 65 28 74 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 6f 2e 73 6c 6f 74 50 61 72 61 6d 73 3d 72 29 2c 76 6f 69 64 20 30 21 3d 3d 74 2e 66 6c 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 66 6c 72 63 75 72 26 26 22 55 53 44 22 21 3d 3d Data Ascii: ){if(void 0!==t.version&&t.version!==be.OpenRTB3_0)throw new Error("Invalid OpenRTB version specified");var e=t.spec.placement,o=n({slotID:t.id,slotName:e.tagid},ke(e)),r=Le(t);if(void 0!==r&&(o.slotParams=r),void 0!==t.flr){if(void 0!==t.flrcur&&"USD"!==
2024-05-24 06:27:30 UTC	2048	IN	Data Raw: 3a 31 32 38 7d 2c 65 2c 6e 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6f 3d 6e 65 77 28 72 2e 61 70 70 6c 79 28 55 69 6e 74 38 41 72 72 61 79 2c 5b 76 6f 69 64 20 30 2c 69 2e 73 65 6e 74 28 29 5d 29 29 2c 5b 32 2c 62 74 6f 61 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 75 28 5b 5d 2c 63 28 6f 29 2c 21 31 29 29 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 69 2e 73 65 6e 74 28 29 2c 5b 32 2c 6e 75 6c 6c 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 76 61 72 20 68 6e 3d 7b 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 73 65 74 3a 22 67 6f 6f 67 6c 65 2f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 2f 73 65 74 22 2c 67 6f 6f 67 6c 65 5f 73 65 63 Data Ascii: :128},e,n)];case 2:return o=new(r.apply(Uint8Array,[void 0,i.sent()])),[2,btoa(String.fromCharCode.apply(String,u([],c(o),!1)))];case 3:return i.sent(),[2,null];case 4:return[2]}}))}))}var hn={google_secureSignals_set:"google/secureSignals/set",google_sec
2024-05-24 06:27:30 UTC	8949	IN	Data Raw: 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6e 2e 73 72 63 3d 74 2c 6e 2e 61 73 79 6e 63 3d 21 30 2c 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 28 22 68 74 74 70 73 3a 2f 2f 63 2e 74 6f 6f 6c 62 6f 78 2e 61 70 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 Data Ascii: urn t.customEvent,r(void 0,void 0,void 0,(function(){return i(this,(function(t){return function(t,e){var n=e.globalContext.document.createElement("script");n.src=t,n.async=!0,e.globalContext.document.head.appendChild(n)}("https://c.toolbox.aps.amazon-adsy
2024-05-24 06:27:30 UTC	16384	IN	Data Raw: 64 76 65 72 74 69 73 69 6e 67 2e 61 32 7a 2e 63 6f 6d 2f 6c 6f 67 65 76 65 6e 74 2f 70 75 74 52 65 63 6f 72 64 73 3f 65 6e 63 6f 64 65 64 3d 74 72 75 65 22 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 22 78 2d 61 70 69 2d 6b 65 79 22 3a 22 35 65 30 62 31 39 33 37 34 35 39 36 62 31 63 38 61 62 66 62 30 35 36 30 66 63 62 39 35 36 32 32 30 31 33 31 64 30 61 37 66 37 31 30 30 39 37 39 64 65 35 64 31 38 63 66 61 64 61 33 35 35 64 35 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 52 65 63 6f 72 64 73 3a 5b 69 5d 7d 29 7d 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 7d 63 61 74 63 68 Data Ascii: dvertising.a2z.com/logevent/putRecords?encoded=true",{method:"POST",headers:{"Content-Type":"application/json","x-api-key":"5e0b19374596b1c8abfb0560fcb956220131d0a7f7100979de5d18cfada355d5"},body:JSON.stringify({Records:[i]})}).catch((function(){}))}catch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50444	54.164.74.54	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	1294	OUT	GET /sync?nid=eyeota HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCDB5sCyBjABOgT87-jmQgSizWKw.pSN%2Fns5GefLyw4b1%2FXKnrIL5XKvbzuNSVC2Vnxrwstc; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCDB5sCyBjABOgT87-jmQgSizWKw.pSN%2Fns5GefLyw4b1%2FXKnrIL5XKvbzuNSVC2Vnxrwstc
2024-05-24 06:27:30 UTC	242	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 24 May 2024 06:27:30 GMT Location: https://ps.eyeota.net/match?bid=tpm4omv&uid=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=&gdpr_consent= Content-Length: 126 Connection: Close
2024-05-24 06:27:30 UTC	126	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 62 69 64 3d 74 70 6d 34 6f 6d 76 26 61 6d 70 3b 75 69 64 3d 77 44 52 69 33 59 31 58 57 75 64 74 79 65 63 35 4b 4b 76 6a 37 67 67 75 65 36 38 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ps.eyeota.net/match?bid=tpm4omv&uid=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50445	172.240.45.70	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	1957	OUT	POST /api/adserver/s2s?auc_id=244578ccbebd41e3744959cc05d9b210&wpm=&ssrtb=&pbjs=&tms=&AV_C_USER_ID=1716532025945-172031150014-000201-002-004790&AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=6532048549&wfc=1&tgt=0&&AV_VI=0&AV_VID=489.359375&d4=2&d5=25&AV_PLCMT=2&AV_PLACEMENT=3&AV_PLAYBACKMETHOD=6&AV_IRISID=&AV_IRISIDCTX=&ms2s=1 H [TRUNCATED] Host: s2s.aniview.com Connection: keep-alive Content-Length: 753 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:30 UTC	753	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 74 69 74 6c 65 22 3a 22 42 75 79 20 50 61 74 72 69 6f 74 20 47 65 61 72 20 48 65 72 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 31 2e 61 76 70 6c 61 79 65 72 2e 63 6f 6d 2f 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 2f 76 69 64 65 6f 73 2f 36 35 Data Ascii: {"site":{"page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","domain":"pjnewsletter.com","content":{"title":"Buy Patriot Gear Here","url":"https://content1.avplayer.com/64db4ddc8904509d8303ce64/videos/65
2024-05-24 06:27:30 UTC	975	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:30 GMT content-type: application/json transfer-encoding: chunked vary: Accept-Encoding access-control-allow-origin: https://pjnewsletter.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, INDEX access-control-allow-headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With access-control-max-age: 1728000 x-bamboo-c-s: BYPASS x-bamboo-c-skfe: 1 x-bamboo-c-skst: 1 expires: Sun, 12 May 2024 16:40:50 GMT cache-control: no-cache accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 critical-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 alt-svc: h3=":443";ma=60; connection: close
2024-05-24 06:27:30 UTC	5839	IN	Data Raw: 31 36 43 37 0d 0a 7b 22 69 64 22 3a 20 22 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 22 2c 22 62 69 64 69 64 22 3a 20 22 38 34 33 64 62 63 36 66 35 64 32 35 34 35 36 66 35 61 31 35 30 31 64 35 62 61 66 35 37 34 65 37 22 2c 22 63 75 72 22 3a 20 22 55 53 44 22 2c 22 73 65 61 74 62 69 64 22 3a 20 5b 7b 22 73 65 61 74 22 3a 20 22 22 2c 22 62 69 64 22 3a 20 5b 7b 22 69 64 22 3a 20 22 38 34 33 64 62 63 36 66 35 64 32 35 34 35 36 66 35 61 31 35 30 31 64 35 62 61 66 35 37 34 65 37 5f 61 64 73 73 65 72 76 6e 67 73 32 73 37 66 62 64 35 62 36 34 34 73 76 6e 67 5f 36 37 35 36 32 39 37 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 22 2c 22 69 6d 70 69 64 22 3a 20 22 38 34 33 64 62 63 36 66 35 64 32 35 34 35 36 66 35 61 Data Ascii: 16C7{"id": "244578ccbebd41e3744959cc05d9b210","bidid": "843dbc6f5d25456f5a1501d5baf574e7","cur": "USD","seatbid": [{"seat": "","bid": [{"id": "843dbc6f5d25456f5a1501d5baf574e7_adsservngs2s7fbd5b644svng_6756297_[AVC_WFCYCLE]","impid": "843dbc6f5d25456f5a
2024-05-24 06:27:30 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 3d 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 70 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 69 6e 76 2d 6e 65 74 73 2e 61 64 6d 69 78 65 72 2e 6e 65 74 25 32 46 61 64 78 63 6d 2e 61 73 70 78 25 33 46 73 73 70 25 33 44 41 30 45 39 34 45 42 36 2d 37 39 34 33 2d 34 35 37 41 2d 38 42 31 37 2d 39 43 39 39 43 36 41 44 43 45 44 32 25 32 36 69 64 25 33 44 25 32 34 55 49 44 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 49 6d 70 Data Ascii: 1A86=&google_cm&gdpr=0&gdpr_consent=...</Impression><Impression><![CDATA[https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Finv-nets.admixer.net%2Fadxcm.aspx%3Fssp%3DA0E94EB6-7943-457A-8B17-9C99C6ADCED2%26id%3D%24UID...</Impression><Imp
2024-05-24 06:27:30 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 32 36 38 31 31 34 30 32 35 26 64 33 39 3d 26 64 36 35 3d 43 6f 6e 74 72 6f 6c 26 64 36 36 3d 38 2e 35 2e 36 26 64 37 34 3d 26 64 35 36 3d 26 64 38 36 3d 26 64 38 37 3d 26 64 38 38 3d 26 64 38 39 3d 26 64 39 30 3d 26 61 70 70 70 6b 67 3d 26 64 33 37 3d 72 65 61 6c 74 69 6d 65 26 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 25 37 43 36 35 37 39 61 38 38 33 61 34 66 32 64 62 30 64 30 30 30 62 38 62 64 39 26 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 25 37 43 35 39 63 39 31 34 38 36 32 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 25 37 43 36 34 64 64 65 62 39 35 34 30 38 32 Data Ascii: 1A86268114025&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d37=realtime&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb954082
2024-05-24 06:27:30 UTC	2723	IN	Data Raw: 41 39 43 0d 0a 34 66 64 34 2d 61 32 65 33 2d 36 30 65 37 63 62 37 65 66 61 35 36 26 63 65 74 3d 37 26 75 61 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 25 32 38 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 25 32 39 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 69 70 68 61 73 68 3d 31 36 34 36 39 31 35 37 33 30 26 69 64 66 61 3d 26 76 61 73 74 3d 34 26 73 65 61 74 3d 63 30 66 61 61 33 36 31 2d 66 30 30 63 2d 34 34 63 36 2d 39 61 34 34 2d 61 62 66 39 65 33 33 34 64 62 38 31 26 76 61 73 74 63 72 69 64 3d 26 76 Data Ascii: A9C4fd4-a2e3-60e7cb7efa56&cet=7&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&iphash=1646915730&idfa=&vast=4&seat=c0faa361-f00c-44c6-9a44-abf9e334db81&vastcrid=&v
2024-05-24 06:27:30 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 65 72 2e 63 6f 6d 26 72 73 3d 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 26 73 69 64 3d 39 33 37 35 36 26 74 3d 31 37 31 36 35 33 32 30 35 30 26 63 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 73 6e 3d 26 74 67 74 3d 30 26 6f 73 76 3d 31 30 26 62 76 3d 31 31 37 2e 30 26 62 72 6e 3d 43 68 72 6f 6d 65 26 77 69 3d 35 34 30 26 68 65 3d 33 30 33 26 61 70 70 3d 26 41 56 5f 50 55 42 4c 49 53 48 45 52 49 44 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 74 65 73 74 3d 35 26 64 36 34 3d 38 34 33 64 62 63 36 66 35 64 32 35 34 35 36 66 35 61 31 35 30 31 64 35 62 61 66 35 37 34 65 37 26 64 36 33 3d 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 26 61 61 66 61 69 Data Ascii: 1A86er.com&rs=pjnewsletter.com&sid=93756&t=1716532050&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=843dbc6f5d25456f5a1501d5baf574e7&d63=244578ccbebd41e3744959cc05d9b210&aafai
2024-05-24 06:27:30 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 74 65 73 74 3d 35 26 64 36 34 3d 38 34 33 64 62 63 36 66 35 64 32 35 34 35 36 66 35 61 31 35 30 31 64 35 62 61 66 35 37 34 65 37 26 64 36 33 3d 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 26 61 61 66 61 69 64 3d 26 70 72 6f 74 6f 3d 68 74 74 70 73 26 75 69 64 3d 31 37 31 36 35 33 32 30 32 35 39 34 35 2d 31 37 32 30 33 31 31 35 30 30 31 34 2d 30 30 30 32 30 31 2d 30 30 32 2d 30 30 34 37 39 30 26 73 74 61 67 69 64 3d 36 35 30 30 30 36 31 62 33 31 37 61 65 63 61 63 30 62 30 36 34 62 33 34 26 73 74 70 6c 69 64 3d 36 35 30 30 30 36 31 62 61 34 32 31 31 62 34 66 61 65 30 61 34 31 32 34 26 64 33 35 3d 26 64 33 36 3d 36 2e 32 2e 32 31 32 Data Ascii: 1A86dc8904509d8303ce64&test=5&d64=843dbc6f5d25456f5a1501d5baf574e7&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212
2024-05-24 06:27:30 UTC	4328	IN	Data Raw: 31 30 44 42 0d 0a 42 32 45 38 2d 31 43 46 35 43 46 37 43 45 32 44 31 26 72 65 71 75 65 73 74 49 64 3d 31 62 38 36 63 32 35 62 2d 37 64 33 31 2d 34 31 39 34 2d 39 62 30 34 2d 34 39 31 37 31 65 39 33 66 39 30 30 26 65 78 74 65 72 6e 61 6c 52 71 49 64 3d 38 34 33 64 62 63 36 66 35 64 32 35 34 35 36 66 35 61 31 35 30 31 64 35 62 61 66 35 37 34 65 37 5f 61 64 73 73 65 72 76 6e 67 73 32 73 37 66 62 64 35 62 36 34 34 73 76 6e 67 5f 36 35 37 39 61 38 38 33 61 34 66 32 64 62 30 64 30 30 30 62 38 62 64 39 26 69 6e 73 74 3d 41 44 58 2d 49 4e 54 52 2d 4e 59 43 2d 37 26 70 78 6c 3d 31 26 62 69 64 73 63 3d 32 26 70 61 67 65 3d 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 25 32 46 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 Data Ascii: 10DBB2E8-1CF5CF7CE2D1&requestId=1b86c25b-7d31-4194-9b04-49171e93f900&externalRqId=843dbc6f5d25456f5a1501d5baf574e7_adsservngs2s7fbd5b644svng_6579a883a4f2db0d000b8bd9&inst=ADX-INTR-NYC-7&pxl=1&bidsc=2&page=pjnewsletter.com%2Fjewish-americans-send-powerfu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50446	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	2049	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532048557&plt=2&asid=64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C650c2ceaf96af061180a223b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C64e4aab4c5 [TRUNCATED] Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:30 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:30 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50453	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	711	OUT	POST /rtb/prebid?cid=8CU322PTV HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 2909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:30 UTC	2909	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 Data Ascii: {"site":{"domain":"pjnewsletter.com","page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","ref":"","topMostLocation":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=a
2024-05-24 06:27:30 UTC	778	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Fri, 24 May 2024 06:27:30 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://pjnewsletter.com content-type: application/json;charset=utf-8 date: Fri, 24 May 2024 06:27:29 GMT x-envoy-upstream-service-time: 83 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:30 UTC	612	IN	Data Raw: 35 36 62 0d 0a 7b 22 69 64 22 3a 22 63 66 66 32 63 65 39 30 36 61 61 64 61 64 39 65 34 39 66 35 66 35 66 32 63 30 39 34 35 63 61 64 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 6d 66 61 64 73 72 76 72 2e 63 6f 6d 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 73 73 70 5f 75 73 65 72 5f 69 64 3d 3c 76 73 69 64 3e 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 69 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 64 69 73 2f 75 73 65 72 73 79 6e 63 2e 61 73 70 78 3f 72 3d 31 31 35 26 70 3d 32 32 36 26 63 70 3d 6d 65 64 69 61 6e 65 74 26 63 75 3d 31 26 Data Ascii: 56b{"id":"cff2ce906aadad9e49f5f5f2c0945cad","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://rtb.mfadsrvr.com/sync?ssp=medianet&ssp_user_id=<vsid>"},{"type":"image","url":"https://dis.criteo.com/dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&
2024-05-24 06:27:30 UTC	787	IN	Data Raw: 36 34 30 34 37 37 39 30 30 30 56 31 30 25 32 36 74 79 70 65 25 33 44 63 6f 6e 25 32 36 6f 76 73 69 64 25 33 44 25 32 34 55 49 44 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6d 2e 77 35 35 63 2e 6e 65 74 2f 70 69 6e 67 5f 6d 61 74 63 68 2e 67 69 66 3f 65 69 3d 4d 45 44 49 41 4e 45 54 26 72 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 73 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 38 25 32 36 76 73 69 64 25 33 44 33 35 39 35 33 33 36 33 32 36 34 30 34 37 37 39 30 30 30 56 31 30 25 32 36 74 79 70 65 25 33 44 64 78 75 25 32 36 6f 76 73 69 64 25 33 44 5f 77 66 69 76 65 66 69 76 65 63 5f 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 Data Ascii: 6404779000V10%26type%3Dcon%26ovsid%3D%24UID"},{"type":"image","url":"https://pm.w55c.net/ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcs.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Ddxu%26ovsid%3D_wfivefivec_"},{"type":"iframe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50447	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	702	OUT	POST /cdb?ptv=144&profileId=185&av=36&wv=8.48.0&cb=50829669899 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 2226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70
2024-05-24 06:27:30 UTC	2226	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 31 31 32 61 62 38 61 39 66 34 61 32 32 64 33 22 2c 22 69 6d 70 69 64 22 3a 22 61 76 5f 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 2d 36 35 32 66 37 63 38 34 64 66 37 64 35 38 61 34 65 62 30 30 39 37 39 37 5f 32 30 22 2c 22 7a 6f 6e 65 69 64 22 3a 31 36 33 36 37 32 30 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 69 64 22 3a 6e Data Ascii: {"publisher":{"url":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage"},"slots":[{"slotid":"112ab8a9f4a22d3","impid":"av_64ddec09ef5e241fc1061287-652f7c84df7d58a4eb009797_20","zoneid":1636720,"transactionid":n
2024-05-24 06:27:30 UTC	522	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:30 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com set-cookie: cto_bundle=OS0wsV8xTld3RTNqUWpHYkdxMFFwQkJPSkE4c01mWWNJZlAwMWQ0Z2wlMkJRMjVaZFdiR2QyWjE5RnRHSDZOMml6VnQ1TEw; expires=Wed, 18 Jun 2025 06:27:30 GMT; domain=criteo.com; secure; samesite=none; Partitioned vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50448	18.195.237.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	689	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1760 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:30 UTC	1760	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 36 37 37 30 35 39 62 2d 65 32 65 32 2d 34 31 62 35 2d 38 36 38 34 2d 34 36 63 36 65 31 65 30 61 30 38 33 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 37 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e Data Ascii: {"id":"8677059b-e2e2-41b5-8684-46c6e1e0a083","at":1,"cur":["USD"],"tmax":7000,"site":{"domain":"pjnewsletter.com","page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","ref":null,"publisher":{"domain":"pjn
2024-05-24 06:27:31 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:30 GMT Content-Type: application/json; charset=utf-8 Content-Length: 638 Connection: close Set-Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121; Max-Age=2592000; Expires=Sun, 23 Jun 2024 06:27:30 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true
2024-05-24 06:27:31 UTC	638	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 73 62 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 61 70 69 2f 73 79 6e 63 3f 63 61 6c 6c 65 72 49 64 3d 34 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 31 32 39 34 26 67 64 70 72 3d 30 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://ssbsync.smartadserver.com/api/sync?callerId=47&gdpr=0&gdpr_consent=","https://c1.adform.net/serving/cookie/match?party=1294&gdpr=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50450	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	690	OUT	POST /hbjson HTTP/1.1 Host: grid.bidswitch.net Connection: keep-alive Content-Length: 1321 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:30 UTC	1321	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 30 39 32 30 34 34 35 35 34 34 31 37 39 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 25 32 46 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 25 32 46 25 33 46 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 65 6d 61 69 6c 25 32 36 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 61 63 74 65 6e 67 61 67 65 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 69 64 22 3a 22 33 35 38 62 39 38 35 65 22 7d 7d 2c 22 74 6d 61 78 22 3a 37 30 30 30 2c 22 73 6f 75 72 63 65 22 3a 7b 22 65 78 74 22 3a 7b 22 77 72 61 70 70 65 72 22 3a 22 50 72 65 62 69 64 5f 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 34 Data Ascii: {"id":"80920445544179","site":{"page":"https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage","content":{"id":"358b985e"}},"tmax":7000,"source":{"ext":{"wrapper":"Prebid_js","wrapper_version":"8.4
2024-05-24 06:27:30 UTC	344	IN	HTTP/1.1 200 OK server: nginx date: Fri, 24 May 2024 06:27:30 GMT content-type: application/json content-length: 23 cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com strict-transport-security: max-age=31536000; preload; connection: close
2024-05-24 06:27:30 UTC	23	IN	Data Raw: 7b 22 69 64 22 3a 22 38 30 39 32 30 34 34 35 35 34 34 31 37 39 22 7d Data Ascii: {"id":"80920445544179"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50451	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	607	OUT	POST /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive Content-Length: 3131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:30 UTC	3131	OUT	Data Raw: 7b 22 62 69 64 73 22 3a 5b 7b 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 61 76 5f 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 2d 36 35 61 31 33 37 30 39 39 37 63 37 65 30 39 38 35 66 30 38 61 62 35 64 5f 32 33 22 2c 22 62 69 64 49 64 22 3a 22 31 33 37 62 62 39 62 66 32 65 35 64 36 64 66 22 2c 22 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 22 3a 22 31 32 63 36 32 66 64 36 35 61 35 65 64 66 32 22 2c 22 67 70 69 64 22 3a 22 2f 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 2f 36 35 30 30 30 36 31 62 33 31 37 61 65 63 61 63 30 62 30 36 34 62 33 34 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 75 62 49 64 22 3a 22 35 37 65 36 31 38 31 35 30 63 37 30 64 39 30 22 2c 22 63 6f 6e 74 65 78 74 22 Data Ascii: {"bids":[{"adUnitCode":"av_64ddec09ef5e241fc1061287-65a1370997c7e0985f08ab5d_23","bidId":"137bb9bf2e5d6df","bidderRequestId":"12c62fd65a5edf2","gpid":"/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com","pubId":"57e618150c70d90","context"
2024-05-24 06:27:30 UTC	489	IN	HTTP/1.1 200 OK access-control-allow-origin: https://pjnewsletter.com access-control-allow-headers: content-type, origin, referer, user-agent access-control-allow-credentials: true p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:30 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50452	46.228.174.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	525	OUT	OPTIONS /unruly_prebid HTTP/1.1 Host: targeting.unrulymedia.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://pjnewsletter.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:31 UTC	505	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:30 GMT access-control-allow-origin: https://pjnewsletter.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept-Encoding,Origin,Accept-Language,X-CSRF-Token,x-unruly-override access-control-max-age: 1728000 content-type: text/plain charset=UTF-8 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50454	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:30 UTC	1047	OUT	GET /c/231/1242/0/9.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:31 UTC	1660	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532051059#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:31 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:30 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:31 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50456	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	1872	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532048557&plt=2&asid=64f88b1414c8a3d08a098f79%2C65547998695dbe9ce009f6d4%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C650c2ceaf96af061180a223b%2C65a1370997c7e0985f08ab5d%2C64f708f0ff6f508694009216%2C64e4aab4c5 [TRUNCATED] Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:31 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:31 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50457	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	456	OUT	GET /rtb/prebid?cid=8CU322PTV HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:31 UTC	296	IN	HTTP/1.1 204 No Content content-length: 0 date: Fri, 24 May 2024 06:27:30 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50455	3.125.70.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	708	OUT	GET /match?bid=tpm4omv&uid=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:31 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:31 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 24 May 2024 06:27:31 GMT
2024-05-24 06:27:31 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50460	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	780	OUT	POST /csm/events HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 227 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=OS0wsV8xTld3RTNqUWpHYkdxMFFwQkJPSkE4c01mWWNJZlAwMWQ0Z2wlMkJRMjVaZFdiR2QyWjE5RnRHSDZOMml6VnQ1TEw
2024-05-24 06:27:31 UTC	227	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 62 61 38 31 33 39 37 2d 33 39 31 34 2d 34 30 63 34 2d 61 39 37 61 2d 64 30 32 66 35 37 64 66 30 38 34 30 22 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 49 64 22 3a 22 41 64 61 70 74 65 72 42 69 64 53 74 61 72 74 22 2c 22 65 6c 61 70 73 65 64 22 3a 31 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 43 64 62 43 61 6c 6c 53 74 61 72 74 22 2c 22 65 6c 61 70 73 65 64 22 3a 32 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 43 64 62 43 61 6c 6c 45 6e 64 22 2c 22 65 6c 61 70 73 65 64 22 3a 31 31 35 31 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 41 64 61 70 74 65 72 42 69 64 45 6e 64 22 2c 22 65 6c 61 70 73 65 64 22 3a 31 31 35 31 7d 5d 7d Data Ascii: {"requestId":"9ba81397-3914-40c4-a97a-d02f57df0840","events":[{"eventId":"AdapterBidStart","elapsed":1},{"eventId":"CdbCallStart","elapsed":2},{"eventId":"CdbCallEnd","elapsed":1151},{"eventId":"AdapterBidEnd","elapsed":1151}]}
2024-05-24 06:27:32 UTC	308	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:31 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50462	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	352	OUT	GET /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:32 UTC	321	IN	HTTP/1.1 200 OK p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:32 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50459	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	608	OUT	GET /win?i=NzUC32Ixzbw_0&p=1716532050.216631&price=4&f=nurlnw HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:32 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:31 GMT Content-Type: text/xml Content-Length: 3316 Connection: close Access-Control-Allow-Origin: https://pjnewsletter.com Cache-Control: no-store Access-Control-Allow-Credentials: true Accept-CH: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model
2024-05-24 06:27:32 UTC	3316	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 3e 3c 41 64 20 69 64 3d 22 32 35 36 34 36 34 22 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 41 64 4b 65 72 6e 65 6c 20 44 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 69 6d 61 33 76 70 61 69 64 3f 76 61 64 5f 66 6f 72 6d 61 74 3d 6c 69 6e 65 61 72 26 63 6f 72 72 65 6c 61 74 6f 72 3d 26 61 64 74 61 67 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><VAST version="4.0"><Ad id="256464"><Wrapper><AdSystem>AdKernel DSP</AdSystem><VASTAdTagURI><![CDATA[https://tpc.googlesyndication.com/ima3vpaid?vad_format=linear&correlator=&adtagurl=https%3A%2F%2Fpubads.g.doubleclic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50467	18.159.201.246	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:32 UTC	101	IN	HTTP/1.1 404 Not Found Date: Fri, 24 May 2024 06:27:32 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50469	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:31 UTC	840	OUT	GET /c/231/1242/0/9.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532051059#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:32 UTC	1660	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:32 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:31 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:32 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50463	18.239.70.203	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:32 UTC	578	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:32 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Thu, 23 May 2024 18:13:19 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 d419ac9a83ef724c262c5f07f9b5a8da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: AUZpP2GZrvfOxvZzTPt2nbZTPFRNbvsEfpGR8-JfaH0ZjvP_fJ7tCA== Age: 44054
2024-05-24 06:27:32 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50458	46.228.174.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:32 UTC	712	OUT	POST /unruly_prebid HTTP/1.1 Host: targeting.unrulymedia.com Connection: keep-alive Content-Length: 7835 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
2024-05-24 06:27:32 UTC	7835	OUT	Data Raw: 7b 22 62 69 64 64 65 72 52 65 71 75 65 73 74 22 3a 7b 22 62 69 64 73 22 3a 5b 7b 22 62 69 64 64 65 72 22 3a 22 75 6e 72 75 6c 79 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 73 69 74 65 49 64 22 3a 32 31 37 32 32 37 7d 2c 22 61 75 63 74 69 6f 6e 49 64 22 3a 6e 75 6c 6c 2c 22 66 6c 6f 6f 72 44 61 74 61 22 3a 7b 22 6e 6f 46 6c 6f 6f 72 53 69 67 6e 61 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 6b 69 70 70 65 64 22 3a 66 61 6c 73 65 2c 22 73 6b 69 70 52 61 74 65 22 3a 30 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 61 64 55 6e 69 74 22 7d 2c 22 75 73 65 72 49 64 22 3a 7b 22 69 64 35 69 64 22 3a 7b 22 75 69 64 22 3a 22 49 44 35 2a 66 6b 6e 61 2d 47 5a 57 63 7a 47 66 54 31 57 30 4c 59 33 39 64 5f 42 49 43 6b 71 4f 7a 79 38 32 47 75 72 56 59 4e 30 30 50 57 71 68 4b 56 77 6e 6a Data Ascii: {"bidderRequest":{"bids":[{"bidder":"unruly","params":{"siteId":217227},"auctionId":null,"floorData":{"noFloorSignaled":false,"skipped":false,"skipRate":0,"location":"adUnit"},"userId":{"id5id":{"uid":"ID5*fkna-GZWczGfT1W0LY39d_BICkqOzy82GurVYN00PWqhKVwnj
2024-05-24 06:27:32 UTC	324	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:32 GMT content-type: application/json content-length: 11 observe-browsing-topics: ?1 access-control-allow-origin: https://pjnewsletter.com access-control-allow-credentials: true pragma: no-cache cache-control: private, max-age=0, no-cache, no-store connection: close
2024-05-24 06:27:32 UTC	11	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 7d Data Ascii: {"bids":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50464	18.239.70.203	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:32 UTC	703	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fpjnewsletter.com&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:32 UTC	497	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 4713 Connection: close Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Fri, 24 May 2024 06:27:31 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 b96dc0b769a91a3fe5483b063383b1c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: 02_Nm8u_lAUyn8nYyjOakn05AfYQb9Yg8GEvzDxsjIaCRWhdkV_1Yg==
2024-05-24 06:27:32 UTC	4713	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50468	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:32 UTC	435	OUT	GET /hbjson HTTP/1.1 Host: grid.bidswitch.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:32 UTC	302	IN	HTTP/1.1 204 No Content server: nginx date: Fri, 24 May 2024 06:27:32 GMT bad-request-reason: Failed to parse json: Invalid value. at offset 703 near 'penrtb2request":}' cache-control: no-cache, no-store, must-revalidate strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50465	18.244.28.23	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:32 UTC	627	OUT	GET /configs/1ad7261b-91ea-4b6f-b9e9-b83522205b75 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:33 UTC	380	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 563 Connection: close Server: CloudFront Date: Fri, 24 May 2024 06:27:32 GMT Cache-Control: max-age=3600 X-Cache: Miss from cloudfront Via: 1.1 a80ee30b9571c32300f689b0f07dc880.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P5 X-Amz-Cf-Id: O1VfDEA1oJZDev7rFQQ2rGT-lB4RNbFZRrIbGsjEjgvusZMzdQ7KCw==
2024-05-24 06:27:33 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 31 61 64 37 32 36 31 62 2d 39 31 65 61 2d 34 62 36 66 2d 62 39 65 39 2d 62 38 33 35 32 32 32 30 35 62 37 35 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "1ad7261b-91ea-4b6f-b9e9-b83522205b75";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50466	108.138.8.164	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:32 UTC	1506	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&pid=bMec6YWePJIWe&cb=0&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043eec5-ae4e-47b4-b8a2-caec03297ff8&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:32 UTC	473	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 170 Connection: close Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 24 May 2024 06:27:31 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 6278ee254a7d35c23aae5e936b5a56ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: txgGAbNY0SYQFStwhXyHExPJW7cHpW9L2EmOY8U2LARkAUzpPzciwg==
2024-05-24 06:27:32 UTC	170	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 6e 2d 6f 6e 65 74 61 67 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 63 6e 76 5f 61 6e 2d 64 62 35 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50470	18.184.216.10	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:32 UTC	472	OUT	GET /match?bid=tpm4omv&uid=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa9482f7f-2a630000010f544c; SERVERID=21580~DM
2024-05-24 06:27:32 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=21580~DM; Domain=eyeota.net; Path=/; Expires=Fri, 24 May 2024 06:37:32 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 24 May 2024 06:27:32 GMT
2024-05-24 06:27:32 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50476	104.22.52.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	785	OUT	GET /hadron.js?url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&_it=amazon&partner_id=405 HTTP/1.1 Host: cdn.hadronid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:33 UTC	502	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:33 GMT Content-Type: application/javascript Content-Length: 56077 Connection: close Cf-Bgj: minify ETag: "4f8d7eccb8b77bff110a91871ebadcc0" Last-Modified: Thu, 07 Mar 2024 15:57:22 GMT x-amz-id-2: wVIO1wrs31x1jKRIz3dKPn3IKJaxmFZdB4TaOgRyJwNYeBol3+8I/Y1HD2dEOHBU8sCH74De62g= x-amz-request-id: GPA71GZPJYF3GMCR Cache-Control: max-age=432000 CF-Cache-Status: HIT Age: 5471 Accept-Ranges: bytes Server: cloudflare CF-RAY: 888b387468d3c3ee-EWR
2024-05-24 06:27:33 UTC	867	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 49 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 4a 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 49 5b 65 5d 2e 63 61 6c 6c 28 4a 2e 65 78 70 6f 72 74 73 2c 4a 2c 4a 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 4a 2e 6c 3d 21 30 2c 4a 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 49 2c 6e 2e 63 3d 69 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 65 29 7b 6e 2e 6f 28 49 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 49 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=fun
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 49 2c 69 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 69 29 3b 63 6f 6e 73 74 20 65 3d 28 49 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 64 61 74 61 3a 5b 5d 2c 61 64 64 44 61 74 61 3a 28 49 2c 69 29 3d 3e 7b 65 2e 64 61 74 61 2e 70 75 73 68 28 7b 6b 65 79 3a 49 2c 76 61 6c 75 65 3a 69 7d 29 2c 65 2e 61 64 64 65 64 5b 49 5d 3d 21 30 7d 2c 61 64 64 65 64 3a 7b 7d 7d 3b 6c 65 74 20 4a 3d 2d 31 3b 63 6f 6e 73 74 20 73 3d 6a 3d 3e 7b 69 66 28 4a 2b 2b 2c 4a 3e 3d 69 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 65 2e 64 61 74 61 29 3b 63 6f 6e 73 74 20 79 Data Ascii: .hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e.data.push({key:I,value:i}),e.added[I]=!0},added:{}};let J=-1;const s=j=>{if(J++,J>=i.length)return void n(e.data);const y
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 3d 5b 22 30 31 22 2c 22 31 34 22 2c 22 32 37 22 2c 22 33 61 22 2c 22 34 64 22 2c 22 35 67 22 2c 22 36 6a 22 2c 22 37 6d 22 2c 22 38 70 22 2c 22 39 73 22 2c 22 61 76 22 2c 22 62 79 22 2c 22 63 31 22 2c 22 64 34 22 2c 22 65 37 22 2c 22 66 61 22 2c 22 67 64 22 2c 22 68 67 22 2c 22 69 6a 22 2c 22 6a 6d 22 2c 22 6b 70 22 2c 22 6c 73 22 2c 22 6d 76 22 2c 22 6e 79 22 2c 22 6f 31 22 2c 22 70 34 22 2c 22 71 37 22 2c 22 72 61 22 2c 22 73 64 22 2c 22 74 67 22 5d 3b 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2e 73 70 6c 69 74 28 22 22 29 29 2e 72 65 64 Data Ascii: =["01","14","27","3a","4d","5g","6j","7m","8p","9s","av","by","c1","d4","e7","fa","gd","hg","ij","jm","kp","ls","mv","ny","o1","p4","q7","ra","sd","tg"];(Object.create(null),"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".split("")).red
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 31 39 4c 43 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 70 74 49 6e 31 39 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 64 47 63 69 66 53 77 69 65 43 49 36 65 79 4a 76 49 6a 70 37 49 6d 73 69 4f 6e 73 69 65 69 49 36 65 79 49 30 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6f 5a 79 4a 39 66 58 31 39 66 58 30 73 49 6d 73 69 4f 6e 73 69 62 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 35 35 49 6e 31 39 4c 43 4a 72 49 Data Ascii: 19LCJpIjp7Im8iOnsidCI6eyJrIjp7InkiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImptIn19fX19fSwidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoidGcifSwieCI6eyJvIjp7ImsiOnsieiI6eyI0Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJoZyJ9fX19fX0sImsiOnsibSI6eyJnIjp7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6Im55In19LCJrI
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 6b 49 6e 31 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 70 49 6a 70 37 49 6d 34 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 31 39 4c 43 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 69 77 69 65 53 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d Data Ascii: 7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjRkIn19fX19fX19fSwieiI6eyJpIjp7Im4iOnsiayI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX19LCJrIjp7IngiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIiwieSI6eyJxIjp7Im8iOnsibyI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIn19fX19fX19fX0sIm
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 66 53 77 69 62 79 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 73 63 79 4a 39 66 58 31 39 66 58 31 39 4c 43 49 30 49 6a 70 37 49 6e 55 69 4f 6e 73 69 4d 43 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 55 33 49 6e 31 39 66 58 31 39 4c 43 49 31 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 53 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 78 4e 79 4a 39 66 58 31 39 4c 43 49 35 49 6a 70 37 49 6d 6f 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 Data Ascii: fSwibyI6eyJ6Ijp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJscyJ9fX19fX19LCI0Ijp7InUiOnsiMCI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6ImU3In19fX19LCI1Ijp7InUiOnsidSI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJxNyJ9fX19LCI5Ijp7ImoiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjR
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 6e 73 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 6f 69 4f 6e 73 69 4d 43 49 36 65 79 4a 79 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 53 77 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 Data Ascii: nsiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX19fX19fX19fX0sImoiOnsiMCI6eyJyIjp7InoiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fSwiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX0sIngiOnsi
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 49 78 49 6a 70 37 49 6d 73 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 4d 69 4f 6e 73 69 4d 43 49 36 65 79 4a 35 49 6a 70 37 49 6d 73 69 4f 6e 73 69 63 79 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 54 63 69 66 58 31 39 66 58 31 39 66 53 77 69 61 79 49 36 65 79 4a 34 49 6a 70 37 49 6d 38 69 4f 6e 73 69 61 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 6e 31 39 66 58 31 39 66 58 30 73 49 6e 51 69 4f 6e 73 69 61 53 49 36 65 79 4a 72 49 6a 70 37 49 Data Ascii: IxIjp7ImsiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fX19fX19fX0sInMiOnsiMCI6eyJ5Ijp7ImsiOnsicyI6eyJrIjp7InQiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoicTcifX19fX19fSwiayI6eyJ4Ijp7Im8iOnsiaSI6eyJnIjp7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIn19fX19fX0sInQiOnsiaSI6eyJrIjp7I
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 32 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 63 69 4f 6e 73 69 4d 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 67 69 4f 6e 73 69 62 79 49 36 65 79 49 77 49 6a 70 37 49 6e 4d 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 44 51 69 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 7a 45 69 4c 43 4a 76 49 6a 70 37 49 6d 77 69 4f 6e 73 69 62 79 49 36 65 79 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 5a 79 49 36 65 79 4a 79 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d Data Ascii: cdTAwMDAiOnt9LCJtZXRhIjoic2QifX19fX19fX19fX19fX0sInciOnsiMCI6eyJnIjp7IngiOnsibyI6eyIwIjp7InMiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZDQifX19fX19fX0sIngiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibzEiLCJvIjp7ImwiOnsibyI6eyJpIjp7Im8iOnsiZyI6eyJyIjp7Ilx1MDAwMCI6e30sIm
2024-05-24 06:27:33 UTC	1369	IN	Data Raw: 61 69 49 36 65 79 4a 7a 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 63 53 49 36 65 79 4a 76 49 6a 70 37 49 6e 51 69 4f 6e 73 69 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 6e 6b 69 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6d 59 53 4a 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 4d 43 49 36 65 79 4a 32 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 61 53 49 36 65 79 49 Data Ascii: aiI6eyJzIjp7Im8iOnsidCI6eyJ6Ijp7InUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwicSI6eyJvIjp7InQiOnsibSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibnkifX19fSwidCI6eyJxIjp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJmYSJ9fX0sIngiOnsiMCI6eyJ2Ijp7InoiOnsiaSI6eyI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50473	108.138.128.28	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	872	OUT	GET /lt/c/16576/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
2024-05-24 06:27:33 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 39773 Connection: close Last-Modified: Wed, 14 Feb 2024 17:39:34 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 23 May 2024 07:09:39 GMT Cache-Control: public, max-age=86400 ETag: "0f107a0e7753aa69cd07ded21852408c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 27ca5ebac1c0f68ab48134f5b864093c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P4 X-Amz-Cf-Id: tIx3RhGmKeSPPwjSdRQtj1gZq6U9wJQsntRdltZp9MM12zvuWrUhDQ== Age: 83875
2024-05-24 06:27:33 UTC	15820	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-05-24 06:27:33 UTC	16384	IN	Data Raw: 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 2e 6e 61 6d 65 73 70 61 63 65 26 26 28 62 3d 21 Data Ascii: a.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.value is not defined"));a.namespace&&"string"!=typeof a.namespace&&(b=!
2024-05-24 06:27:33 UTC	7569	IN	Data Raw: 6e 63 31 36 35 37 36 5f 45 3a 63 3b 62 26 26 73 79 6e 63 31 36 35 37 36 5f 77 28 62 29 26 26 21 73 79 6e 63 31 36 35 37 36 5f 44 28 62 29 26 26 21 62 2e 75 28 29 26 26 73 79 6e 63 31 36 35 37 36 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 73 79 6e 63 31 36 35 37 36 5f 48 61 28 61 2c 62 2c 64 29 3b 73 79 6e 63 31 36 35 37 36 5f 37 28 61 2c 73 79 6e 63 31 36 35 37 36 5f 30 28 64 29 2c 73 79 6e 63 31 36 35 37 36 5f 38 28 61 2c 64 29 2c 22 64 61 74 61 22 2c 63 29 7d 29 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 37 36 5f 49 61 28 61 2c 62 2c 63 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 73 79 6e 63 31 36 35 37 36 5f 45 3a 63 3b 73 79 6e 63 31 36 35 37 36 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: nc16576_E:c;b&&sync16576_w(b)&&!sync16576_D(b)&&!b.u()&&sync16576_9(a).then(function(d){d=sync16576_Ha(a,b,d);sync16576_7(a,sync16576_0(d),sync16576_8(a,d),"data",c)})} function sync16576_Ia(a,b,c){c=void 0===c?sync16576_E:c;sync16576_9(a).then(function(d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50479	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	845	OUT	GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:33 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:33 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 340 Connection: close x-amz-rid: 0HQ1K4XCBNEAA9QNFPF4 Set-Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 06:27:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 06:27:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:33 UTC	340	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 6f 6e 65 74 61 67 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 63 6e 76 5f 61 6e 2d 64 62 35 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain&fv=1.0&a=cm&cm3p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50478	18.66.102.118	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	540	OUT	GET /bootstrap/bootstrap.js HTTP/1.1 Host: cdn.browsiprod.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:33 UTC	634	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35763 Connection: close Last-Modified: Mon, 20 May 2024 12:13:31 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: EUVgtVYEB5BU3Cl9mKuIZVQE2YKGaojl Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 24 May 2024 06:01:15 GMT Cache-Control: public,max-age=3600 ETag: "3659fb79310edaa2c76e9b0e906d52f7" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 59d5785a1d012a54118141e7e216a492.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: -b97tgeX0HFSwZhsnTzcGsO9MqgmUpHQRtyaBU8gU3Ng4eOX8DrAlw== Age: 2095 Vary: Origin
2024-05-24 06:27:33 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 69 29 7b 69 66 28 6e 5b 69 5d 29 72 65 74 75 72 6e 20 6e 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 6e 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 65 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 65 2e 6d 3d 74 2c 65 2e 63 3d 6e 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 65 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,
2024-05-24 06:27:33 UTC	16384	IN	Data Raw: 2c 43 6f 6e 74 65 78 74 5f 31 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 30 29 2c 45 6e 67 69 6e 65 44 65 6c 61 79 53 65 72 76 69 63 65 5f 31 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 31 30 29 2c 56 69 64 65 6f 4c 6f 61 64 65 72 53 65 72 76 69 63 65 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 35 29 2c 56 69 64 65 6f 4c 6f 61 64 65 72 53 65 72 76 69 63 65 5f 31 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 35 29 2c 6d 61 69 6e 41 70 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 61 69 6e 41 70 70 28 29 7b 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 2b 6e 65 77 20 44 61 74 65 2c 74 68 69 73 2e 74 61 67 44 61 74 61 3d 55 74 69 6c 73 5f 31 2e 64 65 66 61 75 6c Data Ascii: ,Context_1=__webpack_require__(0),EngineDelayService_1=__webpack_require__(10),VideoLoaderService=__webpack_require__(5),VideoLoaderService_1=__webpack_require__(5),mainApp=function(){function mainApp(){this.startTime=+new Date,this.tagData=Utils_1.defaul
2024-05-24 06:27:33 UTC	2995	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 43 6f 6e 73 65 6e 74 28 29 2e 67 64 70 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 74 68 69 73 2e 67 64 70 72 54 72 61 63 6b 65 72 2e 69 73 43 6f 6e 73 65 6e 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 43 50 41 43 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 68 65 63 6b 55 73 61 70 69 43 6f 6e 73 65 6e 74 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 43 6f 6e 73 65 6e 74 28 29 2e 63 63 70 61 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 74 68 69 73 2e 63 63 70 61 54 72 61 63 6b 65 72 2e 69 73 43 6f 6e 73 65 6e 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 Data Ascii: var t=this.getLocalStorageConsent().gdpr;return void 0!==t?t:this.gdprTracker.isConsent},t.prototype.getCCPAConsent=function(){this.checkUsapiConsent();var t=this.getLocalStorageConsent().ccpa;return void 0!==t?t:this.ccpaTracker.isConsent},t.prototype.se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50482	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	402	OUT	GET /win?i=NzUC32Ixzbw_0&p=1716532050.216631&price=4&f=nurlnw HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:33 UTC	161	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:33 GMT Content-Type: text/xml Content-Length: 3316 Connection: close Cache-Control: no-store
2024-05-24 06:27:33 UTC	3316	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 3e 3c 41 64 20 69 64 3d 22 32 35 36 34 36 34 22 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 41 64 4b 65 72 6e 65 6c 20 44 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 69 6d 61 33 76 70 61 69 64 3f 76 61 64 5f 66 6f 72 6d 61 74 3d 6c 69 6e 65 61 72 26 63 6f 72 72 65 6c 61 74 6f 72 3d 26 61 64 74 61 67 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><VAST version="4.0"><Ad id="256464"><Wrapper><AdSystem>AdKernel DSP</AdSystem><VASTAdTagURI><![CDATA[https://tpc.googlesyndication.com/ima3vpaid?vad_format=linear&correlator=&adtagurl=https%3A%2F%2Fpubads.g.doubleclic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50484	18.239.68.199	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	1300	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&pid=bMec6YWePJIWe&cb=0&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22mobile%22%3A0%2C%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043eec5-ae4e-47b4-b8a2-caec03297ff8&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:33 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 170 Connection: close Date: Fri, 24 May 2024 06:27:33 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 b96dc0b769a91a3fe5483b063383b1c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: bLrEFvkCokEoLr805ptb8n1ptu_sjiE6G0pHnI5A1iLW8PihPNY1Hw==
2024-05-24 06:27:33 UTC	170	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 6e 2d 6f 6e 65 74 61 67 5f 72 62 64 5f 72 78 5f 6e 2d 62 61 69 64 75 5f 6e 2d 42 65 65 73 77 61 78 5f 63 6e 76 5f 61 6e 2d 64 62 35 5f 33 6c 69 66 74 5f 6e 2d 4f 75 74 62 72 61 69 6e 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50481	108.138.6.136	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	425	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:33 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 23 May 2024 14:24:33 GMT Cache-Control: public, max-age=86400 ETag: "a4d296427fc806b21335359e398c025c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ecb3ea567a6c6095a23354fbdc938128.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: 83kj5fh6l5EeTTHfrYLWOe8lj2yEqxwmbugJLw3HvisKedTd0OJgGg== Age: 57781
2024-05-24 06:27:33 UTC	6396	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad
2024-05-24 06:27:33 UTC	86	IN	Data Raw: 73 79 73 74 65 6d 5c 2e 63 6f 6d 2f 2e 74 65 73 74 28 6c 29 26 26 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 70 69 78 65 6c 51 75 65 75 65 2e 66 69 72 65 50 69 78 65 6c 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6d 29 2c 6c 2c 22 22 29 7d 7d 29 7d 28 29 3b Data Ascii: system\.com/.test(l)&&amzn_aps_csm.pixelQueue.firePixel(JSON.stringify(m),l,"")}})}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50480	108.138.6.136	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	497	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fpjnewsletter.com&pubid=1ad7261b-91ea-4b6f-b9e9-b83522205b75 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:33 UTC	402	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 4713 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Fri, 24 May 2024 06:27:33 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 1c7275102c069b3b4bff7bcc191ded2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: rPPm9OPjvYrKeF68btA2Ycb4Prvqqet6SyNUeohKvkmKtEXT1AWOoA==
2024-05-24 06:27:33 UTC	4713	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50487	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	1257	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU322PTV&prvid=2034%2C2031%2C2030%2C2074%2C2029%2C2106%2C2028%2C2027%2C2026%2C2025%2C2069%2C437%2C97%2C2109%2C99%2C2045%2C3012%2C2043%2C2087%2C2120%2C201%2C246%2C4%2C521%2C126%2C203%2C2037%2C2113%2C446%2C9%2C2099%2C173%2C251%2C175%2C450%2C2009%2C2126%2C3017%2C2125%2C214%2C338%2C459%2C77%2C2022%2C141%2C262%2C461%2C222%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:34 UTC	315	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 37074 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Sun, 26 May 2024 06:27:33 GMT Date: Fri, 24 May 2024 06:27:33 GMT Connection: close
2024-05-24 06:27:34 UTC	215	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 35 33 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"
2024-05-24 06:27:34 UTC	16384	IN	Data Raw: 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 65 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 6c 6f 6f 6b 75 70 22 3a 7b 22 70 70 74 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 70 74 22 2c 22 74 69 6d 65 22 3a 33 35 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 2d 70 22 2c 22 75 72 6c 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 68 2e 63 6f 6e 74 65 78 74 77 65 62 2e 63 6f 6d 5c 2f 62 68 5c 2f 72 74 73 65 74 3f 70 69 64 3d 35 36 30 32 31 30 26 65 76 3d 31 26 72 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 68 74 6d 6c 25 33 46 63 73 25 33 44 38 25 32 36 76 73 69 64 25 33 44 25 Data Ascii: US","zone":"e","coc":"NA"},"cs":"8","lookup":{"ppt":{"name":"ppt","time":350,"cookie":"data-p","urls":[{"type":"iframe","url":"https:\/\/bh.contextweb.com\/bh\/rtset?pid=560210&ev=1&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D%
2024-05-24 06:27:34 UTC	8192	IN	Data Raw: 75 74 69 6c 2c 22 63 6f 6e 66 69 67 22 2c 22 63 6b 73 79 6e 63 22 2c 22 72 65 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 6e 5b 6e 5d 29 72 65 74 75 72 6e 20 6e 6e 5b 6e 5d 3b 74 72 79 7b 6e 6e 5b 6e 5d 3d 77 69 6e 64 6f 77 2e 5f 63 52 28 5b 6e 5d 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 6e 6e 5b 6e 5d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 6e 5b 6e 5d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 6e 3d 78 28 29 3b 72 65 74 75 72 6e 20 6e 2e 63 63 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 74 2e 6c 6f 6f 6b 75 70 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 74 2e 63 Data Ascii: util,"config","cksync","res"],function(n,t,e,r){"use strict";function o(n){if(void 0!==nn[n])return nn[n];try{nn[n]=window._cR([n])[0]}catch(t){nn[n]=null}return nn[n]}function i(){var n=x();return n.cc}function u(){return t.lookup}function c(){return t.c
2024-05-24 06:27:34 UTC	12283	IN	Data Raw: 6e 73 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 69 2c 74 2c 63 2c 6f 2c 6c 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 63 2e 63 61 6c 6c 28 74 68 69 73 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6f 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 65 3d 74 68 69 73 2c 69 3d 73 2e 67 65 74 53 75 63 63 65 73 73 4c 70 65 72 28 29 2c 74 3d 73 2e 67 65 74 46 61 69 6c 75 72 65 4c 70 65 72 28 29 3b 74 68 69 73 2e 6d 6f 64 65 6c 3d 61 2c 74 68 69 73 2e 61 64 64 4e 65 77 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 74 29 7b 69 66 28 21 6e 2e 69 73 4c 6f 67 44 69 73 61 62 6c 65 64 46 6f 72 53 75 63 63 65 73 73 28 69 29 29 7b 76 61 72 20 63 3d 6e 65 77 20 65 2e 6d 6f 64 65 6c 3b 63 2e 73 65 74 28 22 74 79 70 65 Data Ascii: nsts"],function(e,s,i,t,c,o,l,n,r){"use strict";function a(){c.call(this)}function u(){o.call(this);var e=this,i=s.getSuccessLper(),t=s.getFailureLper();this.model=a,this.addNew=function(s,t){if(!n.isLogDisabledForSuccess(i)){var c=new e.model;c.set("type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50485	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	700	OUT	GET /usync/?cb=1716532049499 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:34 UTC	219	IN	HTTP/1.1 200 OK content-type: text/html cache-control: no-transform, no-cache content-length: 2162 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:34 UTC	1343	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 79 6e 63 20 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 76 61 72 20 73 79 6e 63 50 69 78 65 6c 73 20 3d 20 22 22 3b 0a 20 20 20 20 76 61 72 20 73 79 6e 63 49 66 72 61 6d 65 73 20 3d 20 22 22 3b 0a 0a 20 20 20 20 76 61 72 20 47 44 50 52 5f 41 50 50 4c 49 45 53 20 3d 20 22 67 64 70 72 3d 22 3b 0a 20 20 20 20 76 61 72 20 47 44 50 52 20 3d 20 22 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3b 0a 20 20 20 20 76 61 72 20 55 53 5f 50 52 49 56 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Sync Pixels</title></head><body><script> var syncPixels = ""; var syncIframes = ""; var GDPR_APPLIES = "gdpr="; var GDPR = "gdpr_consent="; var US_PRIV
2024-05-24 06:27:34 UTC	819	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 2e 72 65 70 6c 61 63 65 28 22 24 7b 55 53 5f 50 52 49 56 41 43 59 7d 22 2c 20 75 73 50 72 69 76 61 63 79 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 20 3d 20 75 72 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 79 6e 63 49 66 72 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 79 6e 63 46 20 3d 20 73 79 6e 63 49 66 72 61 6d 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 79 6e 63 46 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 79 6e 63 46 2e Data Ascii: ); url = url.replace("${US_PRIVACY}", usPrivacy); new Image().src = url; }); } } if (syncIframes) { var syncF = syncIframes.split(","); if (syncF != null) { syncF.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50488	35.244.193.51	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	730	OUT	GET /v1/envelope?pid=0010b00002PIxPJAA1&src=aps&ver=1.10.0 HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:33 UTC	366	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Fri, 24 May 2024 06:27:33 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:33 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50489	54.220.158.112	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	946	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
2024-05-24 06:27:33 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 35 37 36 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16576,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2024-05-24 06:27:34 UTC	539	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:34 GMT Content-Type: application/json;charset=utf-8 Content-Length: 235 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.5.197 Set-Cookie: _cc_id=72aac350df2b4a40201cac1fd18dfe1f;Path=/;Domain=crwdcntrl.net;Expires=Tue, 18-Feb-2025 06:02:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://pjnewsletter.com Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:34 UTC	235	IN	Data Raw: 7b 22 70 69 64 22 3a 22 37 32 61 61 63 33 35 30 64 66 32 62 34 61 34 30 32 30 31 63 61 63 31 66 64 31 38 64 66 65 31 66 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 37 32 61 61 63 33 35 30 64 66 32 62 34 61 34 30 32 30 31 63 61 63 31 66 64 31 38 64 66 65 31 66 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 69 22 3a 22 32 61 36 62 35 62 66 63 32 36 63 34 32 37 31 61 36 64 30 38 64 36 31 66 35 33 65 33 31 38 35 63 61 30 32 63 30 33 30 33 62 61 39 30 64 34 63 61 38 64 38 62 31 65 34 30 36 32 38 38 33 32 37 37 22 2c 22 74 22 3a 22 63 22 2c 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 31 37 31 33 36 38 35 34 31 35 38 22 7d 5d 7d Data Ascii: {"pid":"72aac350df2b4a40201cac1fd18dfe1f","c":[{"k":"_cc_id","v":"72aac350df2b4a40201cac1fd18dfe1f","e":23328000}],"ids":[{"i":"2a6b5bfc26c4271a6d08d61f53e3185ca02c0303ba90d4ca8d8b1e4062883277","t":"c","c":"core","e":"1717136854158"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50486	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:33 UTC	683	OUT	GET /sync?ssp=themediagrid HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:34 UTC	336	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:34 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //rtb.mfadsrvr.com/sync?ssp=bidswitch&bidswitch_ssp_id=themediagrid&bsw_user_id=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=&gdpr_consent=&us_privacy=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50495	162.19.138.120	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	555	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:34 UTC	378	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://pjnewsletter.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:33 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:34 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 75 70 53 44 78 34 62 6d 76 57 68 37 64 67 6f 39 4a 52 7a 65 50 67 3d 3d 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"lb":"upSDx4bmvWh7dgo9JRzePg=="}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50494	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	983	OUT	GET /bounce HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:34 UTC	348	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:34 GMT vary: Accept-Encoding access-control-allow-origin: https://pjnewsletter.com vary: Origin access-control-allow-credentials: true content-type: text/plain;charset=utf-8 transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:34 UTC	36	IN	Data Raw: 31 45 0d 0a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 7d 0d 0a Data Ascii: 1E{"bounce":{"setCookie":false}}
2024-05-24 06:27:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50496	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	966	OUT	GET /s/v3/pr?exlist=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rbd_rx_n-baidu_n-Beeswax_cnv_an-db5_3lift_n-Outbrain Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:34 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:34 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 2114 Connection: close x-amz-rid: 90MC9GW4366Q9Q9HW7MB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:34 UTC	2114	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 62 39 32 39 38 30 33 36 2d 31 39 63 62 2d 34 65 63 31 2d 61 30 61 30 2d 35 37 37 65 33 31 30 61 65 33 63 62 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 74 61 67 2d 73 79 73 2e 63 6f 6d 2f 6d 61 74 63 68 2f 3f 69 6e 74 5f 69 64 3d 31 31 33 26 63 61 6c 6c 62 61 63 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="b9298036-19cb-4ec1-a0a0-577e310ae3cb"> body { background-color:transparent } </style></head><body><img width="1" height="1" src="https://onetag-sys.com/match/?int_id=113&callbac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50500	35.244.193.51	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	475	OUT	GET /v1/envelope?pid=0010b00002PIxPJAA1&src=aps&ver=1.10.0 HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212620189715653%3As1%3D1716532026806%3Ats%3D1716532026806
2024-05-24 06:27:34 UTC	257	IN	HTTP/1.1 200 OK cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Fri, 24 May 2024 06:27:34 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:34 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50499	13.32.27.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	869	OUT	GET /supply/v5?sk=d_mapping&pk=adapex&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F&bid=vlKhcFSltBGbx%23biNTRb&at=Jewish%20Voters%20Blast%20Biden%20with%20Eye-Opening%20Move%20-%20This%20Could%20Be%20an%20Election%20Game-Changer&sw=1280&sh=1024&qp=utm_medium%3Demail%26utm_source%3Dactengage HTTP/1.1 Host: yield-manager.browsiprod.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:35 UTC	338	IN	HTTP/1.1 204 No Content Connection: close Date: Fri, 24 May 2024 06:27:34 GMT Access-Control-Allow-Origin: * Server: akka-http/10.2.1 X-Cache: Miss from cloudfront Via: 1.1 fdc45b521af7652438141328494a79d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: yWodft6837Mnmsom4_EZFuDsI8bhBeYTejGoQlOV43HE1X4-2Cw5Rg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50507	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	1010	OUT	GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Dopx%26refUrl%3D%26vid%3D65320528243595336326404779000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; pd=v2\|1716532030\|vMgavPkWgyiK; univ_id=537072971\|264441c2-0e4b-4098-920f-1c8a6b45a578\|1716532039673392
2024-05-24 06:27:34 UTC	665	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=16c78824-dc40-4aa6-a236-fc5e0972a55a\|1716532028; Version=1; Expires=Sat, 24-May-2025 06:27:34 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://contextual.media.net/cksync.html?cs=8&vsid=3595336326404779000V10&type=opx&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b Date: Fri, 24 May 2024 06:27:34 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50498	35.166.89.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	645	OUT	POST /events/v2/supply?p=vlKhcFSltBGbx HTTP/1.1 Host: events.browsiprod.com Connection: keep-alive Content-Length: 429 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:34 UTC	429	OUT	Data Raw: 5b 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6e 6f 77 22 3a 31 37 31 36 35 33 32 30 35 32 2c 22 65 74 22 3a 22 69 6e 69 74 69 61 6c 5f 68 69 74 22 2c 22 74 6f 22 3a 32 2c 22 72 65 73 22 3a 22 31 32 38 30 78 31 30 32 34 22 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 70 22 3a 22 68 65 61 64 22 2c 22 74 61 22 3a 74 72 75 65 2c 22 73 72 63 22 3a 22 62 70 74 5f 63 64 6e 2e 62 72 6f 77 73 69 70 72 6f 64 2e 63 6f 6d 22 2c 22 65 78 22 3a 66 61 6c 73 Data Ascii: [{"events":[{"now":1716532052,"et":"initial_hit","to":2,"res":"1280x1024","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","tp":"head","ta":true,"src":"bpt_cdn.browsiprod.com","ex":fals
2024-05-24 06:27:35 UTC	178	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:35 GMT Connection: close Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50504	92.123.16.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	659	OUT	GET /pubcid.php?itype=HB&cb=window.advBidxc.mnetCoRtusId HTTP/1.1 Host: hbx.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:35 UTC	373	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 58753 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=1800 Expires: Fri, 24 May 2024 06:57:35 GMT Date: Fri, 24 May 2024 06:27:35 GMT Connection: close
2024-05-24 06:27:35 UTC	3373	IN	Data Raw: 74 72 79 7b 20 77 69 6e 64 6f 77 2e 5f 5f 6d 4e 50 75 62 43 69 64 43 42 20 3d 20 20 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 6e 65 74 43 6f 52 74 75 73 49 64 20 3b 2f 2a 0a 20 20 20 20 2a 20 54 68 69 73 20 53 6f 75 72 63 65 20 43 6f 64 65 20 46 6f 72 6d 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 4d 6f 7a 69 6c 6c 61 20 50 75 62 6c 69 63 0a 20 20 20 20 2a 20 4c 69 63 65 6e 73 65 2c 20 76 2e 20 32 2e 30 2e 20 49 66 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4d 50 4c 20 77 61 73 20 6e 6f 74 20 64 69 73 74 72 69 62 75 74 65 64 20 77 69 74 68 20 74 68 69 73 20 66 69 6c 65 2c 0a 20 20 20 20 2a 20 59 6f 75 20 63 61 6e 20 6f 62 74 61 69 6e 20 6f 6e 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 Data Ascii: try{ window.__mNPubCidCB = window.advBidxc.mnetCoRtusId ;/* * This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this file, * You can obtain one at https://gith
2024-05-24 06:27:35 UTC	16384	IN	Data Raw: 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 29 2c 6f 3d 6e 28 31 35 29 2c 69 3d 6e 28 32 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 2e 66 28 74 2c 65 2c 69 28 31 2c 6e 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 3d 6e 2c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d Data Ascii: t.exports=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}},function(t,e,n){var r=n(9),o=n(15),i=n(24);t.exports=r?function(t,e,n){return o.f(t,e,i(1,n))}:function(t,e,n){return t[e]=n,t}},function(t,e,n){var r=
2024-05-24 06:27:35 UTC	8192	IN	Data Raw: 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 46 75 6e 63 74 69 6f 6e 28 74 29 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 65 29 7d 2c 72 28 78 29 2c 78 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 65 6c 65 74 65 20 62 5b 74 5d 7d 2c 22 70 72 6f 63 65 73 73 22 3d 3d 63 28 79 29 3f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 79 2e 6e 65 78 74 54 69 63 6b 28 5f 28 74 29 29 7d 3a 67 26 26 67 2e 6e 6f 77 3f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 2e 6e 6f 77 28 5f 28 74 29 29 7d 3a 6d 26 26 21 70 3f 28 69 3d 28 6f 3d 6e 65 77 20 6d 29 2e 70 6f 72 74 32 2c 6f 2e 70 6f 72 74 31 2e 6f 6e 6d 65 73 73 61 67 65 3d 53 2c 72 3d 66 28 69 2e 70 6f 73 74 4d 65 73 73 61 67 65 2c 69 2c 31 29 29 3a 21 75 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7c Data Ascii: ion"==typeof t?t:Function(t)).apply(void 0,e)},r(x),x},h=function(t){delete b[t]},"process"==c(y)?r=function(t){y.nextTick(_(t))}:g&&g.now?r=function(t){g.now(_(t))}:m&&!p?(i=(o=new m).port2,o.port1.onmessage=S,r=f(i.postMessage,i,1)):!u.addEventListener\|
2024-05-24 06:27:35 UTC	16384	IN	Data Raw: 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 73 65 74 3a 6e 7d 29 2c 6f 74 28 65 2c 74 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 28 74 68 69 73 29 2e 74 61 67 7d 29 29 2c 6b 28 57 2c 22 77 69 74 68 6f 75 74 53 65 74 74 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 74 28 41 28 74 29 2c 74 29 7d 29 29 2c 4f 2e 66 3d 63 74 2c 50 2e 66 3d 75 74 2c 43 2e 66 3d 66 74 2c 77 2e 66 3d 5f 2e 66 3d 73 74 2c 53 2e 66 3d 6c 74 2c 49 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 74 28 44 28 74 29 2c 74 29 7d 2c 61 26 26 28 59 28 57 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 Data Ascii: {configurable:!0,set:n}),ot(e,t)}).prototype,"toString",(function(){return B(this).tag})),k(W,"withoutSetter",(function(t){return ot(A(t),t)})),O.f=ct,P.f=ut,C.f=ft,w.f=_.f=st,S.f=lt,I.f=function(t){return ot(D(t),t)},a&&(Y(W.prototype,"description",{conf
2024-05-24 06:27:35 UTC	8192	IN	Data Raw: 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3d 6f 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 74 7d 2c 6f 28 65 2c 6e 29 7d 74 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 31 38 37 29 3b 76 61 72 20 72 3d 6e 28 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 2e 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 31 29 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 7d 2c 7b 73 65 74 50 72 6f 74 6f 74 79 70 65 Data Ascii: ,n){return t.exports=o=r\|\|function(t,e){return t.__proto__=e,t},o(e,n)}t.exports=o},function(t,e,n){var r=n(186);t.exports=r},function(t,e,n){n(187);var r=n(5);t.exports=r.Object.setPrototypeOf},function(t,e,n){n(1)({target:"Object",stat:!0},{setPrototype
2024-05-24 06:27:35 UTC	6228	IN	Data Raw: 65 2c 6f 3d 6e 2e 72 65 6a 65 63 74 2c 69 3d 6a 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6d 28 65 2e 72 65 73 6f 6c 76 65 29 2c 69 3d 5b 5d 2c 75 3d 30 2c 61 3d 31 3b 77 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 63 3d 75 2b 2b 2c 66 3d 21 31 3b 69 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 61 2b 2b 2c 6e 2e 63 61 6c 6c 28 65 2c 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 7c 7c 28 66 3d 21 30 2c 69 5b 63 5d 3d 74 2c 2d 2d 61 7c 7c 72 28 69 29 29 7d 29 2c 6f 29 7d 29 29 2c 2d 2d 61 7c 7c 72 28 69 29 7d 29 29 3b 72 65 74 75 72 6e 20 69 2e 65 72 72 6f 72 26 26 6f 28 69 2e 76 61 6c 75 65 29 2c 6e 2e 70 72 6f 6d 69 73 65 7d 2c 72 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 Data Ascii: e,o=n.reject,i=j((function(){var n=m(e.resolve),i=[],u=0,a=1;w(t,(function(t){var c=u++,f=!1;i.push(void 0),a++,n.call(e,t).then((function(t){f\|\|(f=!0,i[c]=t,--a\|\|r(i))}),o)})),--a\|\|r(i)}));return i.error&&o(i.value),n.promise},race:function(t){var e=this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50514	70.42.32.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	705	OUT	GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:35 UTC	656	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 165 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=b7ijDHbsKeDu3zUfR7gi; Path=/; Domain=zemanta.com; Expires=Sat, 24 May 2025 06:27:34 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 24 May 2024 06:27:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-24 06:27:35 UTC	165	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 6d 65 64 69 61 6e 65 74 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 31 25 32 36 74 79 70 65 25 33 44 7a 65 6d 25 32 36 6f 76 73 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 70 75 69 64 3d 25 32 34 25 37 42 56 53 49 44 25 37 44 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50511	178.250.1.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	939	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=OS0wsV8xTld3RTNqUWpHYkdxMFFwQkJPSkE4c01mWWNJZlAwMWQ0Z2wlMkJRMjVaZFdiR2QyWjE5RnRHSDZOMml6VnQ1TEw
2024-05-24 06:27:35 UTC	457	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 24 May 2024 06:27:35 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 server-processing-duration-in-ticks: 96932 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50512	18.192.200.108	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	675	OUT	GET /universal/v1?supply_id=zKJmsEAd HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:35 UTC	83	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50508	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	912	OUT	GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Dr1%26refUrl%3D%26vid%3D65320528243595336326404779000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-24 06:27:35 UTC	951	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:35 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Dr1%26refUrl%3D%26vid%3D65320528243595336326404779000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222057.4%22%7D; path=/; expires=Sat, 24 May 2025 06:27:35 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://image8.pubmatic.com/AdServer/ImgSync?p=159277&pu=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2057.4%2F%23PMUID%3Fzcc%3D0%26sspret%3D1&rndcb=5183422713 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50510	18.194.143.242	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	847	OUT	GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Ddxu%26refUrl%3D%26vid%3D65320528243595336326404779000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=hdnDQ8rd1SaooL5; matcheyeota=5
2024-05-24 06:27:35 UTC	790	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 24 May 2024 06:27:34 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=8&vsid=3595336326404779000V10&type=dxu&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=hdnDQ8rd1SaooL5 Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-001c45a0648e2a03d@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=hdnDQ8rd1SaooL5; Domain=.w55c.net; Expires=Tue, 24 Jun 2025 06:27:35 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchmedianet=5; Domain=.w55c.net; Expires=Sun, 23 Jun 2024 06:27:35 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50503	208.93.169.131	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	1086	OUT	GET /bh/rtset?pid=560210&ev=1&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3595336326404779000V10%26type%3Dppt%26refUrl%3D%26vid%3D65320528243595336326404779000V10%26axid_e%3D%26ovsid%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=Mfm5DWu5r7XL; VP=part_Mfm5DWu5r7XL; pb_rtb_ev=3-1rjd\|7dN.0.AAJTiE7MoGcAABTuYnJhWg; pb_rtb_ev_part=3-1rjd\|7dN.0.AAJTiE7MoGcAABTuYnJhWg; INGRESSCOOKIE=55f4456c6623a6e0
2024-05-24 06:27:35 UTC	969	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-77c5966d9-fwbcc cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=Mfm5DWu5r7XL;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 19-May-2025 06:27:35 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_Mfm5DWu5r7XL;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 19-May-2025 06:27:35 GMT;SameSite=None;Partitioned location: https://contextual.media.net/cksync.html?cs=8&vsid=3595336326404779000V10&type=ppt&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=Mfm5DWu5r7XL&ev=1&pid=560210 transfer-encoding: chunked server: Jetty(10.0.14) connection: close
2024-05-24 06:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50505	178.250.1.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:34 UTC	762	OUT	GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=&j=window.advBidxc.mnetRtusId HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=OS0wsV8xTld3RTNqUWpHYkdxMFFwQkJPSkE4c01mWWNJZlAwMWQ0Z2wlMkJRMjVaZFdiR2QyWjE5RnRHSDZOMml6VnQ1TEw
2024-05-24 06:27:35 UTC	551	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Fri, 24 May 2024 06:27:34 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 set-cookie: cto_bundle=IJf-ql83SWVuMEVSeUZYc1ZidFp0RjUzd21MSUclMkYlMkI0cjM4TUo2eTNsQSUyRmQlMkJ1RWhjZ1R2cldINWJGNVVJJTJCV2tRY3NzZw; expires=Wed, 18 Jun 2025 06:27:35 GMT; domain=criteo.com; path=/; secure; samesite=none; Partitioned transfer-encoding: chunked server-processing-duration-in-ticks: 4799260 strict-transport-security: max-age=31536000; preload; connection: close
2024-05-24 06:27:35 UTC	99	IN	Data Raw: 35 38 0d 0a 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 6e 65 74 52 74 75 73 49 64 28 7b 22 73 74 61 74 75 73 22 3a 22 4f 4b 22 2c 22 75 73 65 72 69 64 22 3a 22 75 2d 47 73 4e 2d 31 35 72 5f 53 31 59 62 6a 50 76 34 61 2d 65 69 62 51 30 4f 68 46 68 57 37 48 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 58window.advBidxc.mnetRtusId({"status":"OK","userid":"u-GsN-15r_S1YbjPv4a-eibQ0OhFhW7H"});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50502	18.197.7.178	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	814	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=themediagrid&bsw_user_id=120ce5db-d35e-4f16-8347-f58a51fd3b1b&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9; tuuid_lu=1716532026; ssh=!mgid=1716532026
2024-05-24 06:27:35 UTC	426	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 24 May 2024 06:27:35 GMT Location: //x.bidswitch.net/sync?dsp_id=250&expires=14&user_id=f2c9834a-eb80-459e-8abc-438c425949b9&ssp=themediagrid Set-Cookie: ssh=!bidswitch=1716532055!mgid=1716532026; path=/; expires=Sat, 24-May-2025 06:27:35 GMT; domain=.mfadsrvr.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50515	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	1031	OUT	POST /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 1136 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:35 UTC	1136	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 61 39 32 63 65 31 34 2d 37 36 31 38 2d 34 30 63 30 2d 61 37 61 62 2d 66 31 30 66 39 32 65 36 31 63 34 64 22 2c 22 72 65 71 75 65 73 74 43 6f 75 6e 74 22 3a 31 2c 22 72 6f 6c 65 22 3a 22 6c 65 61 64 65 72 22 2c 22 63 61 63 68 65 49 64 22 3a 22 33 37 30 34 39 39 32 39 33 32 38 33 36 38 33 36 22 2c 22 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 73 6f 75 72 63 65 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 36 35 22 2c 22 70 61 72 74 6e 65 72 22 3a 35 37 39 2c 22 76 22 3a 22 31 2e 30 2e 36 35 22 2c 22 6f 22 3a 22 61 70 69 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 Data Ascii: {"requests":[{"requestId":"2a92ce14-7618-40c0-a7ab-f10f92e61c4d","requestCount":1,"role":"leader","cacheId":"3704992932836836","refresh":true,"sourceVersion":"1.0.65","partner":579,"v":"1.0.65","o":"api","tml":"https://pjnewsletter.com/jewish-americans-se
2024-05-24 06:27:35 UTC	581	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:35 GMT vary: Accept-Encoding p3p: CP="CAO PSA OUR" set-cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#5; Path=/; Domain=id5-sync.com; Expires=Thu, 22 Aug 2024 06:27:35 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://pjnewsletter.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:35 UTC	655	IN	Data Raw: 32 38 38 0d 0a 7b 22 67 65 6e 65 72 69 63 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 68 39 38 72 70 72 56 49 35 6f 32 35 78 69 58 6f 6d 4c 58 73 36 6b 73 59 73 4f 41 35 6f 5f 6b 4d 4d 76 61 42 4f 41 4f 4f 63 45 6f 6d 65 37 62 36 6c 47 76 4d 5a 61 4a 4c 39 50 58 44 6b 38 4a 46 75 6f 47 73 56 54 63 67 41 7a 7a 75 4f 77 4e 50 44 79 44 44 2d 78 72 37 59 6b 7a 61 73 31 37 46 35 52 36 35 45 48 63 4a 61 51 34 64 62 67 76 32 74 30 38 74 79 35 61 55 34 31 63 55 4a 49 66 6d 75 54 39 50 4e 6d 43 47 55 57 36 42 67 61 5a 78 30 59 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 34 54 30 36 3a 32 37 3a 30 39 2e 37 30 38 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 Data Ascii: 288{"generic":{"signature":"ID5_Ah98rprVI5o25xiXomLXs6ksYsOA5o_kMMvaBOAOOcEome7b6lGvMZaJL9PXDk8JFuoGsVTcgAzzuOwNPDyDD-xr7Ykzas17F5R65EHcJaQ4dbgv2t08ty5aU41cUJIfmuT9PNmCGUW6BgaZx0Y","created_at":"2024-05-24T06:27:09.708Z","id5_consent":true,"original_uid
2024-05-24 06:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50524	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	1589	OUT	POST /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive Content-Length: 3256 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:35 UTC	3256	OUT	Data Raw: 5b 22 26 63 6f 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 6e 69 64 3d 35 39 63 39 31 34 38 36 32 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 6f 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 26 6e 63 69 64 3d 36 34 64 64 65 62 39 35 34 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 63 6f 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 26 6e 61 73 69 64 3d 36 35 30 61 66 66 63 32 64 30 31 30 36 36 64 38 39 30 30 37 31 64 37 32 26 6f 66 70 72 3d 26 65 3d 76 70 61 69 64 49 6e 69 74 41 64 54 69 6d 65 6f 75 74 26 76 69 3d 30 26 64 31 3d 76 70 61 69 64 26 70 6c 74 3d 32 22 2c 22 26 63 6f 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 Data Ascii: ["&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&nasid=650affc2d01066d890071d72&ofpr=&e=vpaidInitAdTimeout&vi=0&d1=vpaid&plt=2","&copid=64db4ddc8904
2024-05-24 06:27:35 UTC	251	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:35 GMT access-control-allow-origin: * content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50521	70.42.32.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	660	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:35 UTC	645	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 154 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=0Uof2AQs2tLTQFgGP76j; Path=/; Domain=zemanta.com; Expires=Sat, 24 May 2025 06:27:35 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 24 May 2024 06:27:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-24 06:27:35 UTC	154	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 61 6d 61 7a 6f 6e 5f 74 61 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 25 32 46 73 25 32 46 65 63 6d 33 25 33 46 65 78 25 33 44 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 25 32 36 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50520	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	713	OUT	GET /cookie-sync/amzn?redirect=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbeeswax.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AAJTiE7MoGcAABTuYnJhWg
2024-05-24 06:27:35 UTC	396	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:35 GMT location: https://s.amazon-adsystem.com/ecm3?id=AAJTiE7MoGcAABTuYnJhWg&ex=beeswax.com Server: gunicorn set-cookie: bito=AAJTiE7MoGcAABTuYnJhWg; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:35 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50518	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	668	OUT	GET /match/?int_id=113&callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:35 UTC	277	IN	HTTP/1.1 204 No Content p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50522	35.214.168.80	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	654	OUT	GET /ju/cs/amazon?callback=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: trace-eu.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:35 UTC	571	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=baidu.com&id=22210ca7d63142b029ictt00lwkav6wt Set-Cookie: __mguid_=22210ca7d63142b029ictt00lwkav6wt; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Fri, 24 May 2024 06:27:35 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:35 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50523	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	2216	OUT	GET /gampad/ads?iu=%2F170737076%2C22652678936%2C187271864%2FVideo%2Faniview.com%2Faniview.pjnewsletter.com&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&env=instream&ad_type=audio_video&correlator=3447120804420273&tfcd=0&npa=0&gdfp_req=1&output=xml_vast4&sz=640x480&max_ad_duration=60000&unviewed_position_start=1&vpa=auto&vpos=preroll&cust_params=posB%3D2.1&plcmt=2&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=2793355114&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053494&cooki [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:36 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:36 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50534	70.42.32.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	750	OUT	GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=b7ijDHbsKeDu3zUfR7gi
2024-05-24 06:27:35 UTC	602	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=b7ijDHbsKeDu3zUfR7gi P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=b7ijDHbsKeDu3zUfR7gi; Path=/; Domain=zemanta.com; Expires=Sat, 24 May 2025 06:27:35 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 24 May 2024 06:27:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-24 06:27:35 UTC	111	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 61 6d 70 3b 74 79 70 65 3d 7a 65 6d 26 61 6d 70 3b 6f 76 73 69 64 3d 62 37 69 6a 44 48 62 73 4b 65 44 75 33 7a 55 66 52 37 67 69 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=b7ijDHbsKeDu3zUfR7gi">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50526	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	2235	OUT	GET /gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2505816846940266&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1343627374&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716 [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:36 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:36 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50527	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	2154	OUT	GET /gampad/ads?iu=%2F22059416475%2C22652678936%2C187271864%2Fpjnewsletter.com_AV_DFP_MCM&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=1983300998189756&cust_params=ps_floor%3D1.5&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=472324108&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053602&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3D [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:36 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:36 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50528	63.33.74.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	678	OUT	GET /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=72aac350df2b4a40201cac1fd18dfe1f; _cc_cc="ACZ4nGNQMDdKTEw2NjVISTNKMkk0MTAyMExOTDZMSzG0SElLNUxjAIK0AGP7r%2F%2F%2F%2F%2BdngAG%2Bn29XGzJ2yTL8Z2RkuPfBEsb8sXEKC4y9%2FE8hjHnu6CFmGHv3vssCMPbhxXPgytvXPeWGsRv%2Ba8KYTx7fRFjUpQVjXjr1iA3GfrcEYcqbmQeYYGwARrNE%2FA%3D%3D"; _cc_aud="ABR4nGNgYGBICzC2Z4ABRgaGWQuBNAAcfAJl"
2024-05-24 06:27:35 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 24 May 2024 06:27:35 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 484 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-05-24 06:27:35 UTC	484	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 6d 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 30 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/map</td></tr><tr><th>STATUS:</th><td>40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50525	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	2131	OUT	GET /gampad/ads?iu=%2F7103%2C22652678936%2C187271864%2FSMG_Aniview%2Fpreroll%2Fsyndication_2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=215194485326584&vpa=auto&vpmute=1&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=149136882&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053612&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFRe [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:36 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:36 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50529	141.95.33.120	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	349	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:35 UTC	309	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:35 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:35 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 6d 63 48 43 59 4e 46 6c 54 4b 6e 67 4a 2b 39 45 41 51 61 44 39 77 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"mcHCYNFlTKngJ+9EAQaD9w=="}
2024-05-24 06:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50530	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	777	OUT	GET /bounce HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#4; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:35 UTC	239	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:35 GMT vary: Accept-Encoding content-type: text/plain;charset=utf-8 transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:35 UTC	36	IN	Data Raw: 31 45 0d 0a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 7d 0d 0a Data Ascii: 1E{"bounce":{"setCookie":false}}
2024-05-24 06:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50533	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	911	OUT	GET /cksync.html?cs=8&vsid=3595336326404779000V10&type=rkt&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=5141210831119936251 HTTP/1.1 Host: contextual.media.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	643	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-rk=5141210831119936251~~8;Expires=Fri, 23 May 2025 06:27:35 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-05-24 06:27:36 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50532	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	2126	OUT	GET /gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1605716148&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=A58FA6F5-8BF2-43FD-A8AB-96757652969B&nel=1&eid=44751890%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532053647&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3 [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:36 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:36 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50519	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	781	OUT	GET /usersync2/rmpssp?sub=amazon&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&gdpr=0 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-24 06:27:35 UTC	854	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:35 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222069.5%22%7D; path=/; expires=Sat, 24 May 2025 06:27:35 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://image8.pubmatic.com/AdServer/ImgSync?p=159277&pu=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2069.5%2F%23PMUID%3Fzcc%3D0%26sspret%3D1&rndcb=472958919 etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50543	74.119.117.16	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	956	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=IJf-ql83SWVuMEVSeUZYc1ZidFp0RjUzd21MSUclMkYlMkI0cjM4TUo2eTNsQSUyRmQlMkJ1RWhjZ1R2cldINWJGNVVJJTJCV2tRY3NzZw
2024-05-24 06:27:35 UTC	556	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 24 May 2024 06:27:34 GMT server: Kestrel cache-control: no-cache expires: Fri, 24 May 2024 00:00:00 GMT location: https://contextual.media.net/cksync.php?cs=1&type=crt&ovsid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70&gdpr=0&gdpr_consent=&us_privacy=&gpp= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 621788 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50538	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	920	OUT	GET /cksync.html?cs=8&vsid=3595336326404779000V10&type=ppt&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=Mfm5DWu5r7XL&ev=1&pid=560210 HTTP/1.1 Host: contextual.media.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	635	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-p=Mfm5DWu5r7XL~~8;Expires=Fri, 09 May 2025 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-05-24 06:27:36 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50542	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	783	OUT	GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCO6Y19ep8f08EAU4AVoGZXllb3RhYAI.
2024-05-24 06:27:35 UTC	547	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:35 GMT Content-Length: 199 Connection: close server: Kestrel location: https://cs.media.net/cksync?cs=1&type=ttd&ovsid=264441c2-0e4b-4098-920f-1c8a6b45a578 set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCNL8utOq8f08EAU4AVoHOG0zM3prNGAC; expires=Sat, 24 May 2025 06:27:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:35 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 22 3e 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://cs.media.net/cksync?cs=1&type=ttd&ovsid=264441c2-0e4b-4098-920f-1c8a6b45a578">https://cs.media.net/cksync?cs=1&type=ttd&ovsid=264441c2-0e4b-4098-920f-1c8a6b45a578</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50537	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	825	OUT	GET /cksync.html?cs=8&vsid=3595336326404779000V10&type=opx&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8;Expires=Fri, 23 May 2025 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-05-24 06:27:36 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50539	37.252.173.215	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	1543	OUT	GET /getuid?https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]taXh6!84P)[Q_Dzjkr9D+qip/FbMQ.6CHb$L4V1GuoaFf52-ovfn-fn8^WQ.QIa1EipQ!wNU3k^k/US@n$G2lWU]rmB0Z+!c?GY`._Co?0z*I!1^0gb.<6Eq?k=QSE'I_$9#r%1+EmE=5':e6dE[/a+N(/k@XJ4kMAKNN2Wm:4=sB!4aLolb1@W; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoyMFoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==
2024-05-24 06:27:36 UTC	1452	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://aax-eu.amazon-adsystem.com/s/ecm3?id=4426393169609033625&ex=appnexus.com&gdpr=0 AN-X-Request-Uuid: e56203af-21cf-46a8-883b-01073998b4ab Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:36 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:36 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50541	76.223.111.18	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	811	OUT	GET /getuid?redir=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3671706280332458943464; tluid=3671706280332458943464
2024-05-24 06:27:36 UTC	681	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:36 GMT Content-Length: 0 Connection: close Location: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=3lift.com&id=3671706280332458943464 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3671706280332458943464; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 22 Aug 2024 06:27:36 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3671706280332458943464; Max-Age=7776000; Expires=Thu, 22 Aug 2024 06:27:36 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50544	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	3203	OUT	GET /AdServer/ImgSync?p=159277&pu=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2057.4%2F%23PMUID%3Fzcc%3D0%26sspret%3D1&rndcb=5183422713 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:36 UTC	925	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://sync.1rx.io/usersync3/pubmatic/2057.4/7F542745-2D60-41EB-9A96-52B90C82DF34?zcc=0&sspret=1 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=159277^https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2057.4%2F%23PMUID%3Fzcc%3D0%26sspret%3D1^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=159277:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=8; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:35 GMT Content-Length: 124 Connection: close
2024-05-24 06:27:36 UTC	124	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 33 2f 70 75 62 6d 61 74 69 63 2f 32 30 35 37 2e 34 2f 37 46 35 34 32 37 34 35 2d 32 44 36 30 2d 34 31 45 42 2d 39 41 39 36 2d 35 32 42 39 30 43 38 32 44 46 33 34 3f 7a 63 63 3d 30 26 61 6d 70 3b 73 73 70 72 65 74 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.1rx.io/usersync3/pubmatic/2057.4/7F542745-2D60-41EB-9A96-52B90C82DF34?zcc=0&sspret=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50545	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	803	OUT	GET /cksync.php?cs=8&vsid=3595336326404779000V10&type=dxu&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=hdnDQ8rd1SaooL5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-xu=hdnDQ8rd1SaooL5~~8;Expires=Fri, 23 May 2025 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:36 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50546	92.123.16.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:35 UTC	760	OUT	GET /cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEGeUdGikQC7kKtONtMpEWjs&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8;Expires=Fri, 07 Jun 2024 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:36 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50555	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	896	OUT	GET /idsync/ex/receive?partner_id=3185&partner_device_id=AU1D-0100-001716532054-VWROEXDT-D1CK&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001716532054-VWROEXDT-D1CK%26tapad_id%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716532031795; TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd; TapAd_3WAY_SYNCS=
2024-05-24 06:27:36 UTC	1409	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:36 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716532031795;Expires=Tue, 23 Jul 2024 06:27:36 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd;Expires=Tue, 23 Jul 2024 06:27:36 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 23 Jul 2024 06:27:36 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=1c74b149-6627-4305-8e39-2d356a63f8cd%252Chttps%25253A%25252F%25252Fids.ad.gt%25252Fapi%25252Fv1%25252Ftapad_match%25253Fid%25253DAU1D-0100-001716532054-VWROEXDT-D1CK%252526tapad_id%25253D1c74b149-6627-4305-8e39-2d356a63f8cd%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50551	104.22.52.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	664	OUT	GET /hadron.js?partner_id=405&sync=1&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage HTTP/1.1 Host: cdn.hadronid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:36 UTC	502	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:36 GMT Content-Type: application/javascript Content-Length: 56077 Connection: close Cf-Bgj: minify ETag: "4f8d7eccb8b77bff110a91871ebadcc0" Last-Modified: Thu, 07 Mar 2024 15:57:22 GMT x-amz-id-2: wVIO1wrs31x1jKRIz3dKPn3IKJaxmFZdB4TaOgRyJwNYeBol3+8I/Y1HD2dEOHBU8sCH74De62g= x-amz-request-id: GPA71GZPJYF3GMCR Cache-Control: max-age=432000 CF-Cache-Status: HIT Age: 5474 Accept-Ranges: bytes Server: cloudflare CF-RAY: 888b3886f91b42db-EWR
2024-05-24 06:27:36 UTC	867	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 49 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 4a 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 49 5b 65 5d 2e 63 61 6c 6c 28 4a 2e 65 78 70 6f 72 74 73 2c 4a 2c 4a 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 4a 2e 6c 3d 21 30 2c 4a 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 49 2c 6e 2e 63 3d 69 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 65 29 7b 6e 2e 6f 28 49 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 49 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=fun
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 49 2c 69 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 69 29 3b 63 6f 6e 73 74 20 65 3d 28 49 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 64 61 74 61 3a 5b 5d 2c 61 64 64 44 61 74 61 3a 28 49 2c 69 29 3d 3e 7b 65 2e 64 61 74 61 2e 70 75 73 68 28 7b 6b 65 79 3a 49 2c 76 61 6c 75 65 3a 69 7d 29 2c 65 2e 61 64 64 65 64 5b 49 5d 3d 21 30 7d 2c 61 64 64 65 64 3a 7b 7d 7d 3b 6c 65 74 20 4a 3d 2d 31 3b 63 6f 6e 73 74 20 73 3d 6a 3d 3e 7b 69 66 28 4a 2b 2b 2c 4a 3e 3d 69 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 65 2e 64 61 74 61 29 3b 63 6f 6e 73 74 20 79 Data Ascii: .hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e.data.push({key:I,value:i}),e.added[I]=!0},added:{}};let J=-1;const s=j=>{if(J++,J>=i.length)return void n(e.data);const y
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 3d 5b 22 30 31 22 2c 22 31 34 22 2c 22 32 37 22 2c 22 33 61 22 2c 22 34 64 22 2c 22 35 67 22 2c 22 36 6a 22 2c 22 37 6d 22 2c 22 38 70 22 2c 22 39 73 22 2c 22 61 76 22 2c 22 62 79 22 2c 22 63 31 22 2c 22 64 34 22 2c 22 65 37 22 2c 22 66 61 22 2c 22 67 64 22 2c 22 68 67 22 2c 22 69 6a 22 2c 22 6a 6d 22 2c 22 6b 70 22 2c 22 6c 73 22 2c 22 6d 76 22 2c 22 6e 79 22 2c 22 6f 31 22 2c 22 70 34 22 2c 22 71 37 22 2c 22 72 61 22 2c 22 73 64 22 2c 22 74 67 22 5d 3b 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2e 73 70 6c 69 74 28 22 22 29 29 2e 72 65 64 Data Ascii: =["01","14","27","3a","4d","5g","6j","7m","8p","9s","av","by","c1","d4","e7","fa","gd","hg","ij","jm","kp","ls","mv","ny","o1","p4","q7","ra","sd","tg"];(Object.create(null),"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".split("")).red
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 31 39 4c 43 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 70 74 49 6e 31 39 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 64 47 63 69 66 53 77 69 65 43 49 36 65 79 4a 76 49 6a 70 37 49 6d 73 69 4f 6e 73 69 65 69 49 36 65 79 49 30 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6f 5a 79 4a 39 66 58 31 39 66 58 30 73 49 6d 73 69 4f 6e 73 69 62 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 35 35 49 6e 31 39 4c 43 4a 72 49 Data Ascii: 19LCJpIjp7Im8iOnsidCI6eyJrIjp7InkiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImptIn19fX19fSwidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoidGcifSwieCI6eyJvIjp7ImsiOnsieiI6eyI0Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJoZyJ9fX19fX0sImsiOnsibSI6eyJnIjp7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6Im55In19LCJrI
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 6b 49 6e 31 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 70 49 6a 70 37 49 6d 34 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 31 39 4c 43 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 69 77 69 65 53 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d Data Ascii: 7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjRkIn19fX19fX19fSwieiI6eyJpIjp7Im4iOnsiayI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX19LCJrIjp7IngiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIiwieSI6eyJxIjp7Im8iOnsibyI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIn19fX19fX19fX0sIm
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 66 53 77 69 62 79 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 73 63 79 4a 39 66 58 31 39 66 58 31 39 4c 43 49 30 49 6a 70 37 49 6e 55 69 4f 6e 73 69 4d 43 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 55 33 49 6e 31 39 66 58 31 39 4c 43 49 31 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 53 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 78 4e 79 4a 39 66 58 31 39 4c 43 49 35 49 6a 70 37 49 6d 6f 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 Data Ascii: fSwibyI6eyJ6Ijp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJscyJ9fX19fX19LCI0Ijp7InUiOnsiMCI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6ImU3In19fX19LCI1Ijp7InUiOnsidSI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJxNyJ9fX19LCI5Ijp7ImoiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjR
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 6e 73 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 6f 69 4f 6e 73 69 4d 43 49 36 65 79 4a 79 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 53 77 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 Data Ascii: nsiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX19fX19fX19fX0sImoiOnsiMCI6eyJyIjp7InoiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fSwiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX0sIngiOnsi
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 49 78 49 6a 70 37 49 6d 73 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 4d 69 4f 6e 73 69 4d 43 49 36 65 79 4a 35 49 6a 70 37 49 6d 73 69 4f 6e 73 69 63 79 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 54 63 69 66 58 31 39 66 58 31 39 66 53 77 69 61 79 49 36 65 79 4a 34 49 6a 70 37 49 6d 38 69 4f 6e 73 69 61 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 6e 31 39 66 58 31 39 66 58 30 73 49 6e 51 69 4f 6e 73 69 61 53 49 36 65 79 4a 72 49 6a 70 37 49 Data Ascii: IxIjp7ImsiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fX19fX19fX0sInMiOnsiMCI6eyJ5Ijp7ImsiOnsicyI6eyJrIjp7InQiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoicTcifX19fX19fSwiayI6eyJ4Ijp7Im8iOnsiaSI6eyJnIjp7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIn19fX19fX0sInQiOnsiaSI6eyJrIjp7I
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 32 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 63 69 4f 6e 73 69 4d 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 67 69 4f 6e 73 69 62 79 49 36 65 79 49 77 49 6a 70 37 49 6e 4d 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 44 51 69 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 7a 45 69 4c 43 4a 76 49 6a 70 37 49 6d 77 69 4f 6e 73 69 62 79 49 36 65 79 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 5a 79 49 36 65 79 4a 79 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d Data Ascii: cdTAwMDAiOnt9LCJtZXRhIjoic2QifX19fX19fX19fX19fX0sInciOnsiMCI6eyJnIjp7IngiOnsibyI6eyIwIjp7InMiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZDQifX19fX19fX0sIngiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibzEiLCJvIjp7ImwiOnsibyI6eyJpIjp7Im8iOnsiZyI6eyJyIjp7Ilx1MDAwMCI6e30sIm
2024-05-24 06:27:36 UTC	1369	IN	Data Raw: 61 69 49 36 65 79 4a 7a 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 63 53 49 36 65 79 4a 76 49 6a 70 37 49 6e 51 69 4f 6e 73 69 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 6e 6b 69 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6d 59 53 4a 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 4d 43 49 36 65 79 4a 32 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 61 53 49 36 65 79 49 Data Ascii: aiI6eyJzIjp7Im8iOnsidCI6eyJ6Ijp7InUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwicSI6eyJvIjp7InQiOnsibSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibnkifX19fSwidCI6eyJxIjp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJmYSJ9fX0sIngiOnsiMCI6eyJ2Ijp7InoiOnsiaSI6eyI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50548	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	661	OUT	GET /cm-notify?pi=medianet HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=i9x1WdSEmrI6qigqPMbF_1716532027493; ts=1716532027
2024-05-24 06:27:36 UTC	443	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:36 GMT vary: Accept-Encoding location: https://contextual.media.net/cksync.php?cs=1&vsid=%7BMedia.net_User_id%7D&type=rbh&ovsid=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=medianet cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 24 May 2024 06:27:36 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50550	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	1133	OUT	GET /i/579/8.gif?o=api&id5id=ID5GCXlQwA6TIr5I2oPS-HCzJYkNfHooxCNfIbq27tYAtGhKb7pbItrgiUEls4JuzP_&gdpr_consent=undefined&gdpr=false HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#5
2024-05-24 06:27:36 UTC	1885	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#6; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:36 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:36 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Fri, 24-May-2024 06:32:36 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=579; Max-Age=300; Expires=Fri, 24-May-2024 06:32:36 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=7; Max-Age=300; Expires=Fri, 24-May-2024 06:32:36 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=2; Max-Age=300; Expires=Fri, 24-May-2024 06:32:36 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Fri, 24-May-2024 06:32:36 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:36 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50556	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	776	OUT	GET /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#5
2024-05-24 06:27:36 UTC	240	IN	HTTP/1.1 400 Bad Request date: Fri, 24 May 2024 06:27:36 GMT vary: Accept-Encoding content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:36 UTC	414	IN	Data Raw: 31 39 32 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 22 72 65 71 75 65 73 74 5f 66 6f 72 6d 61 74 5f 69 6e 76 61 6c 69 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 32 43 6f 6e 74 72 6f 6c 6c 65 72 2e 6d 75 6c 74 69 70 6c 65 78 46 65 74 63 68 56 33 28 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 77 65 62 2e 6d 75 6c 74 69 Data Ascii: 192{"error":{"code":"request_format_invalid","message":"Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.multiplexFetchV3(io.id5.fetch.request.web.multi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50554	185.64.191.210	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	3200	OUT	GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001716532054-VWROEXDT-D1CK HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:36 UTC	429	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 24 May 2024 06:27:36 GMT Transfer-Encoding: chunked Connection: close Location: https://ids.ad.gt/api/v1/pbm_match?pbm=7F542745-2D60-41EB-9A96-52B90C82DF34&id=AU1D-0100-001716532054-VWROEXDT-D1CK P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-24 06:27:36 UTC	53	IN	Data Raw: 32 61 0d 0a 43 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 2aContent-type: text/html; charset=utf-80

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50559	70.42.32.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	699	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=0Uof2AQs2tLTQFgGP76j
2024-05-24 06:27:36 UTC	610	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 119 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=outbrain.com&id=0Uof2AQs2tLTQFgGP76j&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=0Uof2AQs2tLTQFgGP76j; Path=/; Domain=zemanta.com; Expires=Sat, 24 May 2025 06:27:36 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 24 May 2024 06:27:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-24 06:27:36 UTC	119	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 65 63 6d 33 3f 65 78 3d 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 26 61 6d 70 3b 69 64 3d 30 55 6f 66 32 41 51 73 32 74 4c 54 51 46 67 47 50 37 36 6a 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://aax-eu.amazon-adsystem.com/s/ecm3?ex=outbrain.com&id=0Uof2AQs2tLTQFgGP76j&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50547	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	750	OUT	GET /sync?dsp_id=250&expires=14&user_id=f2c9834a-eb80-459e-8abc-438c425949b9&ssp=themediagrid HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:36 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50540	3.121.157.160	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	741	OUT	GET /sync?ssp=medianet&ssp_user_id=3595336326404779000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532025; tuuid=f2c9834a-eb80-459e-8abc-438c425949b9; tuuid_lu=1716532026; ssh=!mgid=1716532026
2024-05-24 06:27:36 UTC	408	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 24 May 2024 06:27:36 GMT Location: //contextual.media.net/cksync.php?type=mf&ovsid=f2c9834a-eb80-459e-8abc-438c425949b9&cs=1 Set-Cookie: ssh=!medianet=1716532056!mgid=1716532026; path=/; expires=Sat, 24-May-2025 06:27:36 GMT; domain=.mfadsrvr.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50553	3.33.220.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	811	OUT	GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001716532054-VWROEXDT-D1CK&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCO6Y19ep8f08EAU4AVoGZXllb3RhYAI.
2024-05-24 06:27:36 UTC	577	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:36 GMT Content-Length: 259 Connection: close server: Kestrel location: https://ids.ad.gt/api/v1/t_match?tdid=264441c2-0e4b-4098-920f-1c8a6b45a578&id=AU1D-0100-001716532054-VWROEXDT-D1CK set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCISBodmq8f08EAU4AVoHOGdreGI2bmAC; expires=Sat, 24 May 2025 06:27:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:36 UTC	259	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 73 2e 61 64 2e 67 74 2f 61 70 69 2f 76 31 2f 74 5f 6d 61 74 63 68 3f 74 64 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 69 64 3d 41 55 31 44 2d 30 31 30 30 2d 30 30 31 37 31 36 35 33 32 30 35 34 2d 56 57 52 4f 45 58 44 54 2d 44 31 43 4b 22 3e 68 74 74 70 73 3a 2f 2f 69 64 73 2e 61 64 2e 67 74 2f 61 70 69 2f 76 31 2f 74 5f 6d 61 74 63 68 3f 74 64 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 69 64 3d 41 55 31 44 2d 30 31 30 30 2d 30 30 31 37 31 36 35 33 32 30 35 34 2d 56 57 52 4f 45 58 44 54 2d 44 31 43 4b Data Ascii: Redirecting to: <a href="https://ids.ad.gt/api/v1/t_match?tdid=264441c2-0e4b-4098-920f-1c8a6b45a578&id=AU1D-0100-001716532054-VWROEXDT-D1CK">https://ids.ad.gt/api/v1/t_match?tdid=264441c2-0e4b-4098-920f-1c8a6b45a578&id=AU1D-0100-001716532054-VWROEXDT-D1CK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50552	185.89.210.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	1485	OUT	GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&adnxs_id=$UID&gdpr=0 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; receive-cookie-deprecation=1; uuid2=4426393169609033625; anj=dTM7k!M4/Afm^c0ghqdmU(7TMVHz0j!]taXh6!84P)[Q_Dzjkr9D+qip/FbMQ.6CHb$L4V1GuoaFf52-ovfn-fn8^WQ.QIa1EipQ!wNU3k^k/US@n$G2lWU]rmB0Z+!c?GY`._Co?0zI!1^0gb.<6Eq?k=QSE'I_$9#r%1+EmE=5':e6dE[/a+N(/k@XJ4kMAKNN2Wm:4=sB!4aLolb1@W; uids=eyJ0ZW1wVUlEcyI6eyJjb25uZWN0YWQiOnsidWlkIjoiN2U0M2EyYWMtM2QxZC00MWYwLWE3ODUtYzM0NGFiZmVkNTgyIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTBaIn0sInJ1Ymljb24iOnsidWlkIjoiTFdLQVVOSEwtRC1CRllEIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjJUMDY6Mjc6MTZaIn0sImFteCI6eyJ1aWQiOiJiZmZkNjlmMy1mMjRkLTQ5YzctOGFmZi1iMzBiYjFlNGY1NTkiLCJleHBpcmVzIjoiMjAyNC0wOC0yMlQwNjoyNzoyMFoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yNFQwNjoyNzoxMFoifQ==
2024-05-24 06:27:36 UTC	1471	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 24 May 2024 06:27:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&adnxs_id=4426393169609033625&gdpr=0 AN-X-Request-Uuid: 7c7ede17-fd0a-4a5e-ab42-d68d3eee1350 Set-Cookie: XANDR_PANID=kVAYpAaTOxEiRH9XPGll5aHb2WQ5dmjffeylVqwxs5lWL9N_XoTmduPtEVTVB8gr_Ci4liwHs75ENMGKSJr9q7hqRdtDYYIOcmD1Lq13SU8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:36 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 12-May-2034 06:27:36 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4426393169609033625; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50564	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	643	OUT	GET /ecm3?id=AAJTiE7MoGcAABTuYnJhWg&ex=beeswax.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:36 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2ABKE2ERPVETTXRZD38W Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50562	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	727	OUT	GET /cksync.php?cs=1&type=zem&ovsid=b7ijDHbsKeDu3zUfR7gi HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ze=b7ijDHbsKeDu3zUfR7gi~~1;Expires=Sat, 24 May 2025 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:36 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50563	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	758	OUT	GET /s/ecm3?id=4426393169609033625&ex=appnexus.com&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:36 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VCJQAF22FZJ20506CEXX Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50565	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	781	OUT	GET /cksync.php?cs=1&type=crt&ovsid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70&gdpr=0&gdpr_consent=&us_privacy=&gpp= HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1;Expires=Sun, 23 Jun 2024 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1716532056;Expires=Sun, 23 Jun 2024 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:36 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50566	185.64.190.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	3162	OUT	GET /AdServer/ImgSync?p=159277&pu=https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2069.5%2F%23PMUID%3Fzcc%3D0%26sspret%3D1&rndcb=472958919 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; KRTBCOOKIE_57=22776-4426393169609033625&KRTB&23339-4426393169609033625; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_153=19420-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j&KRTB&23462-rgbTA6sD0gK1U9RSoALLBa1Wg1W1CYcHrAQpIk4j; KRTBCOOKIE_1101=23040-7372448948567406736&KRTB&23369-7372448948567406736; KRTBCOOKIE_18=22947-5141210831119936251; KRTBCOOKIE_466=16530-120ce5db-d35e-4f16-8347-f58a51fd3b1b; DPSync3=1717718400%3A197_245_241_227_201_226_219; SyncRTB3=1717718400%3A251_233_13_55_166_214_22_234_254_249_165_264_56_238_220_176_8_266_88_3_99_161_243_21_54_81_46_71%7C1717113600%3A223_15_2%7C1719100800%3A203%7C1717804800%3A35%7C1717372800%3A63%7C1721692800%3A69; KRTBCOOKIE_1323=23480-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23485-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9&KRTB&23575-OPU5e4b6cf71f8b4b7f83d6eb6392d1b3e9; KRTBCOOKIE_377=6 [TRUNCATED]
2024-05-24 06:27:36 UTC	925	IN	HTTP/1.1 302 Found Cache-Control: private,max-age=86400 Content-Type: text/html; charset=utf-8 Location: https://sync.1rx.io/usersync3/pubmatic/2069.5/7F542745-2D60-41EB-9A96-52B90C82DF34?zcc=0&sspret=1 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=159277^https%3A%2F%2Fsync.1rx.io%2Fusersync3%2Fpubmatic%2F2069.5%2F%23PMUID%3Fzcc%3D0%26sspret%3D1^0^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=159277:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=7F542745-2D60-41EB-9A96-52B90C82DF34; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=8; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 24 May 2024 06:27:36 GMT Content-Length: 124 Connection: close
2024-05-24 06:27:36 UTC	124	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 33 2f 70 75 62 6d 61 74 69 63 2f 32 30 36 39 2e 35 2f 37 46 35 34 32 37 34 35 2d 32 44 36 30 2d 34 31 45 42 2d 39 41 39 36 2d 35 32 42 39 30 43 38 32 44 46 33 34 3f 7a 63 63 3d 30 26 61 6d 70 3b 73 73 70 72 65 74 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.1rx.io/usersync3/pubmatic/2069.5/7F542745-2D60-41EB-9A96-52B90C82DF34?zcc=0&sspret=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50567	92.123.16.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	731	OUT	GET /cksync?cs=1&type=ttd&ovsid=264441c2-0e4b-4098-920f-1c8a6b45a578 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1
2024-05-24 06:27:36 UTC	571	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1;Expires=Fri, 07 Jun 2024 06:27:36 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:36 GMT Connection: close
2024-05-24 06:27:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:36 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50568	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:36 UTC	751	OUT	GET /s/ecm3?ex=3lift.com&id=3671706280332458943464 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:37 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: P6T5Y5VSX54NCZ6Z9V12 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50580	69.166.1.66	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	746	OUT	GET /us?https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&uid=[UID]&gdpr=0 HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uis=1f42063c-1e64-4491-87eb-aa2cbcbeb39f; HAPLB8G=s85189\|ZlAzS
2024-05-24 06:27:37 UTC	805	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:37 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-189 x-xss-protection: 0 location: https://ids.ad.gt/api/v1/son_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&uid=1f42063c-1e64-4491-87eb-aa2cbcbeb39f&gdpr=0 set-cookie: __uis=1f42063c-1e64-4491-87eb-aa2cbcbeb39f; expires=Sun, 23 Jun 2024 06:27:36 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85189\|ZlAzX; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50571	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	658	OUT	GET /s/ecm3?ex=baidu.com&id=22210ca7d63142b029ictt00lwkav6wt HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:37 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: S7G8EMKAZ1TMP5ECPB1K Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50586	172.240.45.70	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	1957	OUT	POST /api/adserver/s2s?auc_id=244578ccbebd41e3744959cc05d9b210&wpm=&ssrtb=&pbjs=&tms=&AV_C_USER_ID=1716532025945-172031150014-000201-002-004790&AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=6532055257&wfc=1&tgt=0&&AV_VI=0&AV_VID=489.359375&d4=3&d5=31&AV_PLCMT=2&AV_PLACEMENT=3&AV_PLAYBACKMETHOD=6&AV_IRISID=&AV_IRISIDCTX=&ms2s=1 H [TRUNCATED] Host: s2s.aniview.com Connection: keep-alive Content-Length: 753 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:37 UTC	753	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 74 69 74 6c 65 22 3a 22 42 75 79 20 50 61 74 72 69 6f 74 20 47 65 61 72 20 48 65 72 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 31 2e 61 76 70 6c 61 79 65 72 2e 63 6f 6d 2f 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 2f 76 69 64 65 6f 73 2f 36 35 Data Ascii: {"site":{"page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","domain":"pjnewsletter.com","content":{"title":"Buy Patriot Gear Here","url":"https://content1.avplayer.com/64db4ddc8904509d8303ce64/videos/65
2024-05-24 06:27:37 UTC	975	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:37 GMT content-type: application/json transfer-encoding: chunked vary: Accept-Encoding access-control-allow-origin: https://pjnewsletter.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, INDEX access-control-allow-headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With access-control-max-age: 1728000 x-bamboo-c-s: BYPASS x-bamboo-c-skfe: 1 x-bamboo-c-skst: 1 expires: Sun, 12 May 2024 16:40:57 GMT cache-control: no-cache accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 critical-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 alt-svc: h3=":443";ma=60; connection: close
2024-05-24 06:27:37 UTC	5839	IN	Data Raw: 31 36 43 37 0d 0a 7b 22 69 64 22 3a 20 22 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 22 2c 22 62 69 64 69 64 22 3a 20 22 64 32 65 65 63 39 61 64 61 37 35 36 62 37 31 36 36 36 34 63 62 34 39 34 64 36 64 33 32 30 62 33 22 2c 22 63 75 72 22 3a 20 22 55 53 44 22 2c 22 73 65 61 74 62 69 64 22 3a 20 5b 7b 22 73 65 61 74 22 3a 20 22 22 2c 22 62 69 64 22 3a 20 5b 7b 22 69 64 22 3a 20 22 64 32 65 65 63 39 61 64 61 37 35 36 62 37 31 36 36 36 34 63 62 34 39 34 64 36 64 33 32 30 62 33 5f 61 64 73 73 65 72 76 6e 67 73 32 73 37 66 62 64 35 62 36 34 35 6a 78 35 32 5f 36 37 36 33 39 33 39 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 22 2c 22 69 6d 70 69 64 22 3a 20 22 64 32 65 65 63 39 61 64 61 37 35 36 62 37 31 36 36 36 Data Ascii: 16C7{"id": "244578ccbebd41e3744959cc05d9b210","bidid": "d2eec9ada756b716664cb494d6d320b3","cur": "USD","seatbid": [{"seat": "","bid": [{"id": "d2eec9ada756b716664cb494d6d320b3_adsservngs2s7fbd5b645jx52_6763939_[AVC_WFCYCLE]","impid": "d2eec9ada756b71666
2024-05-24 06:27:37 UTC	5440	IN	Data Raw: 31 35 33 38 0d 0a 75 7a 7a 6f 6f 6c 61 2e 63 6f 6d 2f 63 6f 6f 6b 69 65 73 79 6e 63 2f 73 73 70 2f 61 64 6d 69 78 65 72 3f 75 69 64 3d 63 33 66 32 64 63 65 64 37 37 64 38 34 66 35 33 39 30 35 38 38 39 62 66 34 32 31 37 33 63 33 38 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 6d 2e 74 72 61 66 6d 61 67 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 31 70 78 2d 6d 61 74 63 68 69 6e 67 2d 67 6f 32 6e 65 74 2e 67 69 66 3f 69 64 3d 63 33 66 32 64 63 65 64 37 37 64 38 34 66 35 33 39 30 35 38 38 39 62 66 34 32 31 37 33 63 33 38 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 Data Ascii: 1538uzzoola.com/cookiesync/ssp/admixer?uid=c3f2dced77d84f53905889bf42173c38...</Impression><Impression><![CDATA[https://m.trafmag.com/images/1px-matching-go2net.gif?id=c3f2dced77d84f53905889bf42173c38...</Impression><Impression><![CDATA[https://ssum-sec
2024-05-24 06:27:37 UTC	1365	IN	Data Raw: 35 34 45 0d 0a 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 74 65 73 74 3d 35 26 64 36 34 3d 64 32 65 65 63 39 61 64 61 37 35 36 62 37 31 36 36 36 34 63 62 34 39 34 64 36 64 33 32 30 62 33 26 64 36 33 3d 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 26 61 61 66 61 69 64 3d 26 70 72 6f 74 6f 3d 68 74 74 70 73 26 75 69 64 3d 31 37 31 36 35 33 32 30 32 35 39 34 35 2d 31 37 32 30 33 31 31 35 30 30 31 34 2d 30 30 30 32 30 31 2d 30 30 32 2d 30 30 34 37 39 30 26 73 74 61 67 69 64 3d 36 35 30 30 30 36 31 62 33 31 37 61 65 63 61 63 30 62 30 36 34 62 33 34 26 73 74 70 6c 69 64 3d 36 35 30 30 30 36 31 62 61 34 32 31 31 62 34 66 61 65 30 61 34 31 32 34 26 64 33 35 3d 26 64 33 36 3d 36 2e 32 2e 32 31 32 26 63 62 3d 31 Data Ascii: 54E04509d8303ce64&test=5&d64=d2eec9ada756b716664cb494d6d320b3&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=1
2024-05-24 06:27:37 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 3d 26 64 35 36 3d 26 64 38 36 3d 26 64 38 37 3d 26 64 38 38 3d 26 64 38 39 3d 26 64 39 30 3d 26 61 70 70 70 6b 67 3d 26 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 25 37 43 36 35 37 39 61 38 38 33 61 34 66 32 64 62 30 64 30 30 30 62 38 62 64 39 26 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 25 37 43 35 39 63 39 31 34 38 36 32 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 25 37 43 36 34 64 64 65 62 39 35 34 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 68 3d 65 63 37 63 35 33 66 30 66 33 35 61 30 37 32 61 63 61 30 35 35 65 66 64 37 65 62 32 38 33 31 35 66 39 64 33 64 34 Data Ascii: 1A86=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb9540829a4d45051144&h=ec7c53f0f35a072aca055efd7eb28315f9d3d4
2024-05-24 06:27:37 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 25 32 39 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 69 70 68 61 73 68 3d 31 36 34 36 39 31 35 37 33 30 26 69 64 66 61 3d 26 76 61 73 74 3d 34 26 73 65 61 74 3d 63 30 66 61 61 33 36 31 2d 66 30 30 63 2d 34 34 63 36 2d 39 61 34 34 2d 61 62 66 39 65 33 33 34 64 62 38 31 26 76 61 73 74 63 72 69 64 3d 26 76 61 73 74 61 64 69 64 3d 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 3e 3c Data Ascii: 1A86ows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&iphash=1646915730&idfa=&vast=4&seat=c0faa361-f00c-44c6-9a44-abf9e334db81&vastcrid=&vastadid=...</Tracking><Tracking event=\"complete\"><
2024-05-24 06:27:37 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 43 5f 44 54 5d 26 64 34 3d 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 26 64 35 3d 5b 41 56 43 5f 54 49 4d 45 50 41 53 53 5d 26 6f 66 70 72 3d 32 26 64 32 30 3d 61 76 26 69 6d 69 64 3d 64 32 65 65 63 39 61 64 61 37 35 36 62 37 31 36 36 36 34 63 62 34 39 34 64 36 64 33 32 30 62 33 5f 61 64 73 73 65 72 76 6e 67 73 32 73 37 66 62 64 35 62 36 34 35 6a 78 35 32 5f 36 37 36 33 39 33 39 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 26 65 3d 63 6f 6d 70 6c 65 74 65 26 61 64 3d 5b 41 56 5f 41 44 44 55 52 41 54 49 4f 4e 5d 26 76 69 3d 5b 41 56 5f 56 49 45 57 41 42 49 4c 49 54 59 5d 26 64 37 31 3d 5b 41 56 43 5f 41 44 49 44 5d 26 64 37 33 3d 5b 41 56 43 5f 44 54 5d 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 5c Data Ascii: 1A86C_DT]&d4=[AVC_WFCYCLE]&d5=[AVC_TIMEPASS]&ofpr=2&d20=av&imid=d2eec9ada756b716664cb494d6d320b3_adsservngs2s7fbd5b645jx52_6763939_[AVC_WFCYCLE]&e=complete&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]...</Tracking><Tracking event=\
2024-05-24 06:27:37 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 25 32 46 4e 59 25 32 46 35 31 32 38 35 38 31 26 61 6d 2d 75 69 64 3d 63 33 66 32 64 63 65 64 37 37 64 38 34 66 35 33 39 30 35 38 38 39 62 66 34 32 31 37 33 63 33 38 26 64 65 76 69 63 65 3d 32 38 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 70 72 6f 66 69 6c 65 3d 31 30 42 31 36 38 38 38 2d 46 43 42 46 2d 34 43 39 44 2d 39 30 45 44 2d 46 37 30 43 41 43 43 45 33 39 32 39 26 7a 6f 6e 65 3d 35 42 38 31 31 31 42 42 2d 30 32 44 41 2d 34 31 30 33 2d 38 31 46 39 2d 35 33 42 30 38 31 43 43 39 32 37 46 26 73 69 74 65 3d 45 32 31 41 36 30 30 32 2d 41 42 38 36 2d 34 34 37 36 2d 38 30 39 41 2d 32 30 46 44 43 38 46 36 32 30 31 32 26 72 75 6c 65 3d 45 39 36 43 41 33 35 35 2d 41 41 39 44 2d 34 41 32 35 2d 42 32 45 38 2d 31 43 46 35 43 46 37 43 45 Data Ascii: 1A86%2FNY%2F5128581&am-uid=c3f2dced77d84f53905889bf42173c38&device=28&ip=8.46.123.175&profile=10B16888-FCBF-4C9D-90ED-F70CACCE3929&zone=5B8111BB-02DA-4103-81F9-53B081CC927F&site=E21A6002-AB86-4476-809A-20FDC8F62012&rule=E96CA355-AA9D-4A25-B2E8-1CF5CF7CE
2024-05-24 06:27:37 UTC	114	IN	Data Raw: 36 37 0d 0a 2c 5c 22 66 72 5c 22 3a 30 2e 31 39 7d 5d 5d 3e 3c 2f 50 6c 61 79 65 72 53 65 74 74 69 6e 67 73 3e 3c 2f 41 64 53 65 72 76 69 6e 67 44 61 74 61 3e 3c 2f 45 78 74 65 6e 73 69 6f 6e 3e 3c 2f 45 78 74 65 6e 73 69 6f 6e 73 3e 3c 2f 57 72 61 70 70 65 72 3e 3c 2f 41 64 3e 3c 2f 56 41 53 54 3e 22 7d 5d 7d 5d 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 67,\"fr\":0.19}...</PlayerSettings></AdServingData></Extension></Extensions></Wrapper></Ad></VAST>"}]}]}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50581	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	659	OUT	GET /cookie-sync/id5?us_privacy= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AAJTiE7MoGcAABTuYnJhWg
2024-05-24 06:27:37 UTC	418	IN	HTTP/1.1 303 See Other Date: Fri, 24 May 2024 06:27:37 GMT location: https://id5-sync.com/k/155.gif?puid=AAJTiE7MoGcAABTuYnJhWg&id5AccountNum=155&numCascadesAllowed=9 Server: gunicorn set-cookie: bito=AAJTiE7MoGcAABTuYnJhWg; Domain=bidr.io; expires=Mon, 23 Jun 2025 02:27:37 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50577	3.33.220.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	1015	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=1c74b149-6627-4305-8e39-2d356a63f8cd%252Chttps%25253A%25252F%25252Fids.ad.gt%25252Fapi%25252Fv1%25252Ftapad_match%25253Fid%25253DAU1D-0100-001716532054-VWROEXDT-D1CK%252526tapad_id%25253D1c74b149-6627-4305-8e39-2d356a63f8cd%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRgBIAEoAjILCNL8utOq8f08EAU4AVoHOG0zM3prNGAC
2024-05-24 06:27:37 UTC	817	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:37 GMT Content-Length: 683 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=1c74b149-6627-4305-8e39-2d356a63f8cd%2Chttps%253A%252F%252Fids.ad.gt%252Fapi%252Fv1%252Ftapad_match%253Fid%253DAU1D-0100-001716532054-VWROEXDT-D1CK%2526tapad_id%253D1c74b149-6627-4305-8e39-2d356a63f8cd%2C set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRIUCgV0YXBhZBILCMini7SU8f08EAUYASABKAIyCwj4nY7hqvH9PBAFOAFaBXRhcGFkYAI.; expires=Sat, 24 May 2025 06:27:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:37 UTC	683	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 74 74 64 5f 70 75 69 64 3d 31 63 37 34 62 31 34 39 2d 36 36 32 37 2d 34 33 30 35 2d 38 65 33 39 2d 32 64 33 35 36 61 36 33 66 38 63 64 25 32 43 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 69 64 73 2e 61 64 2e 67 74 25 32 35 32 46 61 70 69 25 32 35 32 46 76 31 25 32 35 32 46 74 61 70 61 64 5f 6d 61 74 63 68 25 32 35 33 46 69 64 25 32 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=1c74b149-6627-4305-8e39-2d356a63f8cd%2Chttps%253A%252F%252Fids.ad.gt%252Fapi%252Fv1%252Ftapad_match%253Fid%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50589	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	821	OUT	POST /cdb?ptv=144&profileId=185&av=36&wv=8.48.0&cb=59407579047 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 2238 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=IJf-ql83SWVuMEVSeUZYc1ZidFp0RjUzd21MSUclMkYlMkI0cjM4TUo2eTNsQSUyRmQlMkJ1RWhjZ1R2cldINWJGNVVJJTJCV2tRY3NzZw
2024-05-24 06:27:37 UTC	2238	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 32 39 36 37 65 64 38 39 66 65 62 32 37 34 62 22 2c 22 69 6d 70 69 64 22 3a 22 61 76 5f 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 2d 36 35 32 66 37 63 38 34 64 66 37 64 35 38 61 34 65 62 30 30 39 37 39 37 5f 33 33 22 2c 22 7a 6f 6e 65 69 64 22 3a 31 36 33 36 37 32 30 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 69 64 22 3a 6e Data Ascii: {"publisher":{"url":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage"},"slots":[{"slotid":"2967ed89feb274b","impid":"av_64ddec09ef5e241fc1061287-652f7c84df7d58a4eb009797_33","zoneid":1636720,"transactionid":n
2024-05-24 06:27:37 UTC	533	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:36 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com set-cookie: cto_bundle=xBPAQV82Qk1WSHYlMkZ5SjdhUUV0b3NjTlh4bmo1TWg1dlc5dnJDcHFsSCUyQlNuRWZxd0UwZ1h1ZiUyRnpRd1RzJTJGM1IlMkZ6STdJQQ; expires=Wed, 18 Jun 2025 06:27:37 GMT; domain=criteo.com; secure; samesite=none; Partitioned vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50587	18.195.237.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	689	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1760 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:37 UTC	1760	OUT	Data Raw: 7b 22 69 64 22 3a 22 61 38 35 33 39 38 66 39 2d 32 61 34 37 2d 34 66 63 62 2d 38 64 32 33 2d 62 32 61 65 63 66 65 65 35 31 32 39 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 37 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e Data Ascii: {"id":"a85398f9-2a47-4fcb-8d23-b2aecfee5129","at":1,"cur":["USD"],"tmax":7000,"site":{"domain":"pjnewsletter.com","page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","ref":null,"publisher":{"domain":"pjn
2024-05-24 06:27:37 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 462 Connection: close Set-Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121; Max-Age=2592000; Expires=Sun, 23 Jun 2024 06:27:37 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true
2024-05-24 06:27:37 UTC	462	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 70 72 2d 62 68 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 79 6e 63 2f 73 68 61 72 65 74 68 72 6f 75 67 68 2f 39 61 64 32 61 39 33 61 2d 64 34 64 30 2d 34 34 33 30 2d 38 38 65 37 2d 37 66 65 33 38 65 63 31 64 31 32 31 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 2e 62 69 6e 67 2e 63 6f 6d 2f 63 2e 67 69 66 3f 52 65 64 33 3d 53 54 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://pr-bh.ybp.yahoo.com/sync/sharethrough/9ad2a93a-d4d0-4430-88e7-7fe38ec1d121?gdpr=0&gdpr_consent=","https://c.bing.com/c.gif?Red3=ST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50588	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	607	OUT	POST /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive Content-Length: 3131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:37 UTC	3131	OUT	Data Raw: 7b 22 62 69 64 73 22 3a 5b 7b 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 61 76 5f 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 2d 36 35 61 31 33 37 30 39 39 37 63 37 65 30 39 38 35 66 30 38 61 62 35 64 5f 33 36 22 2c 22 62 69 64 49 64 22 3a 22 32 37 34 66 64 33 65 65 63 64 64 34 35 62 65 22 2c 22 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 22 3a 22 32 36 31 39 34 35 30 39 37 36 66 31 36 61 34 22 2c 22 67 70 69 64 22 3a 22 2f 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 2f 36 35 30 30 30 36 31 62 33 31 37 61 65 63 61 63 30 62 30 36 34 62 33 34 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 75 62 49 64 22 3a 22 35 37 65 36 31 38 31 35 30 63 37 30 64 39 30 22 2c 22 63 6f 6e 74 65 78 74 22 Data Ascii: {"bids":[{"adUnitCode":"av_64ddec09ef5e241fc1061287-65a1370997c7e0985f08ab5d_36","bidId":"274fd3eecdd45be","bidderRequestId":"2619450976f16a4","gpid":"/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com","pubId":"57e618150c70d90","context"
2024-05-24 06:27:37 UTC	489	IN	HTTP/1.1 200 OK access-control-allow-origin: https://pjnewsletter.com access-control-allow-headers: content-type, origin, referer, user-agent access-control-allow-credentials: true p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:37 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50595	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	656	OUT	GET /s/ecm3?ex=outbrain.com&id=0Uof2AQs2tLTQFgGP76j&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:37 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: CPX6A59VHEE8N2ASH62C Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50599	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	995	OUT	GET /cksync.php?cs=1&vsid=%7BMedia.net_User_id%7D&type=rbh&ovsid=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=medianet HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1
2024-05-24 06:27:37 UTC	653	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rbh=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA~~1;Expires=Sat, 24 May 2025 06:27:37 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:37 GMT Connection: close
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:37 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50596	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	1098	OUT	GET /cksync.php?cs=8&vsid=3595336326404779000V10&type=con&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=AQAG_nWwz1cg7gJ5AhDvAQEBAQEBAQCOqEmRzwEBAI6oSZHP&expiration=1716618456&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1
2024-05-24 06:27:37 UTC	657	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-co=AQAG_nWwz1cg7gJ5AhDvAQEBAQEBAQCOqEmRzwEBAI6oSZHP~~8;Expires=Fri, 23 May 2025 06:27:37 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:37 GMT Connection: close
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:37 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50597	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	946	OUT	GET /cksync.php?type=mf&ovsid=f2c9834a-eb80-459e-8abc-438c425949b9&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1
2024-05-24 06:27:37 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mf=f2c9834a-eb80-459e-8abc-438c425949b9~~1;Expires=Sat, 24 May 2025 06:27:37 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:37 GMT Connection: close
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:37 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50591	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	957	OUT	GET /usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3Fid%3DAU1D-0100-001716532054-VWROEXDT-D1CK%26unruly_id%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222069.5%22%7D
2024-05-24 06:27:37 UTC	165	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:37 GMT cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50600	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	888	OUT	GET /usersync3/pubmatic/2057.4/7F542745-2D60-41EB-9A96-52B90C82DF34?zcc=0&sspret=1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222069.5%22%7D
2024-05-24 06:27:37 UTC	177	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:37 GMT content-length: 43 cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache connection: close
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50598	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	848	OUT	GET /usersync3/pubmatic/2069.5/7F542745-2D60-41EB-9A96-52B90C82DF34?zcc=0&sspret=1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%2C%22zdxidn%22%3A%222069.5%22%7D
2024-05-24 06:27:37 UTC	707	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:37 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D; path=/; expires=Sat, 24 May 2025 06:27:37 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003%26ex%3Drhythmone.com connection: close
2024-05-24 06:27:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50610	52.46.155.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	443	OUT	GET /ecm3?id=AAJTiE7MoGcAABTuYnJhWg&ex=beeswax.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:37 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: YFGW4J1EQRFGG148W3Y3 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50603	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	887	OUT	GET /cksync.php?cs=8&vsid=3595336326404779000V10&type=dxu&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=hdnDQ8rd1SaooL5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-c-ts=1716532056; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1
2024-05-24 06:27:38 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-xu=hdnDQ8rd1SaooL5~~8;Expires=Fri, 23 May 2025 06:27:38 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:38 GMT Connection: close
2024-05-24 06:27:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50602	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	909	OUT	GET /cksync.html?cs=8&vsid=3595336326404779000V10&type=opx&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-c-ts=1716532056; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1
2024-05-24 06:27:38 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8;Expires=Fri, 23 May 2025 06:27:38 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:38 GMT Connection: close
2024-05-24 06:27:38 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-05-24 06:27:38 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50604	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	2019	OUT	GET /gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2505816846940266&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1343627374&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716 [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	780	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:38 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50606	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	2000	OUT	GET /gampad/ads?iu=%2F170737076%2C22652678936%2C187271864%2FVideo%2Faniview.com%2Faniview.pjnewsletter.com&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&env=instream&ad_type=audio_video&correlator=3447120804420273&tfcd=0&npa=0&gdfp_req=1&output=xml_vast4&sz=640x480&max_ad_duration=60000&unviewed_position_start=1&vpa=auto&vpos=preroll&cust_params=posB%3D2.1&plcmt=2&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=2793355114&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053494&cooki [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	780	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:38 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50607	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	1910	OUT	GET /gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1605716148&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=A58FA6F5-8BF2-43FD-A8AB-96757652969B&nel=1&eid=44751890%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&dt=1716532053647&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3 [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	780	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:38 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50605	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	1915	OUT	GET /gampad/ads?iu=%2F7103%2C22652678936%2C187271864%2FSMG_Aniview%2Fpreroll%2Fsyndication_2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=215194485326584&vpa=auto&vpmute=1&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=149136882&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053612&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3DALNI_MbX5LJowz4CIQoxFRe [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	780	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:38 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50609	23.212.88.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	844	OUT	GET /cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEGeUdGikQC7kKtONtMpEWjs&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-c-ts=1716532056; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1
2024-05-24 06:27:38 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8;Expires=Fri, 07 Jun 2024 06:27:38 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:38 GMT Connection: close
2024-05-24 06:27:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50608	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	1938	OUT	GET /gampad/ads?iu=%2F22059416475%2C22652678936%2C187271864%2Fpjnewsletter.com_AV_DFP_MCM&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=1983300998189756&cust_params=ps_floor%3D1.5&sdkv=h.3.642.0&osd=2&frm=0&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=472324108&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776495%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&dt=1716532053602&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D1716532015%3AS%3D [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	780	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:38 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50612	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	811	OUT	GET /cksync.php?cs=1&type=zem&ovsid=b7ijDHbsKeDu3zUfR7gi HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-c-ts=1716532056; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1
2024-05-24 06:27:38 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ze=b7ijDHbsKeDu3zUfR7gi~~1;Expires=Sat, 24 May 2025 06:27:38 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:38 GMT Connection: close
2024-05-24 06:27:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50614	23.212.88.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	815	OUT	GET /cksync?cs=1&type=ttd&ovsid=264441c2-0e4b-4098-920f-1c8a6b45a578 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-c-ts=1716532056; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1
2024-05-24 06:27:38 UTC	571	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1;Expires=Fri, 07 Jun 2024 06:27:38 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:38 GMT Connection: close
2024-05-24 06:27:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50613	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:37 UTC	865	OUT	GET /cksync.php?cs=1&type=crt&ovsid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70&gdpr=0&gdpr_consent=&us_privacy=&gpp= HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-c-ts=1716532056; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1
2024-05-24 06:27:38 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1;Expires=Sun, 23 Jun 2024 06:27:38 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1716532058;Expires=Sun, 23 Jun 2024 06:27:38 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:38 GMT Connection: close
2024-05-24 06:27:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50623	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	2130	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive Content-Length: 493 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_6L5Q55KN3H=GS1.1.1716532011.1.0.1716532011.0.0.0; _gid=GA1.2.297082714.1716532012; _gat_UA-71705037-13=1; _ga=GA1.1.1010184661.1716532012; a=Tpmk9wQM7A2pQr9JshmbXmxLS48DTmyP; __gads=ID=da67d6cf617bfbae:T=1716532015:RT=1716532015:S=ALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw; __gpi=UID=00000e2baa71d767:T=1716532015:RT=1716532015:S=ALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q; __eoi=ID=0de722eb110b0792:T=1716532015:RT=1716532015:S=AA-AfjZ_Vg53aFh6S_pt_4oSG5A6; _fbp=fb.1.1716532015327.1074392237; token_QlJAAAAAAAAArRMIRsGBk-hpXXMDyS9EWV8qBEI=BAYAZlAzMQFmUDMxgAGBAcAAIBCTQRzc6TWBIyrSBmfxYDEZLgSr9Hds5ZsTO3lhcO1bwQAg32yN53KdZuAc45yqFd7WziA9ZSdrCCh49MaXiVIdDJY; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1171406%22%3A%7B%22page%22%3A1%7D%2C%22C1604063%22%3A%7B%22page%22%3A1%2C%22time%22%3A%221716532021690%22%7D%7D; _ga_6EDY1BF25J=GS1.1.1716532012.1.1.1716532026.46.0.1618387984; _pubcid=a765ec8d-6663-47cd-ab57-34873e7f277c; _pubcid_cst=zix7LPQsHA%3D%3D; _lr_retry_request=true; _lr_env_src_ats= [TRUNCATED]
2024-05-24 06:27:38 UTC	493	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 32 34 36 37 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 32 34 36 37 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 36 35 33 32 30 30 36 38 30 33 2e 37 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 31 22 2c 22 6a 73 22 3a 22 32 30 32 34 2e 35 2e 30 22 2c 22 74 69 6d 69 6e 67 73 22 3a 31 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 36 39 39 31 33 37 62 34 2d 64 66 32 63 2d 34 38 63 33 2d 62 39 38 39 2d 38 65 65 39 35 39 63 32 61 38 30 30 22 2c Data Ascii: {"resources":[],"referrer":"","eventType":1,"firstPaint":2467.3000000000175,"firstContentfulPaint":2467.3000000000175,"startTime":1716532006803.7,"versions":{"fl":"2024.4.1","js":"2024.5.0","timings":1},"pageloadId":"699137b4-df2c-48c3-b989-8ee959c2a800",
2024-05-24 06:27:38 UTC	373	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:38 GMT Connection: close access-control-allow-origin: https://pjnewsletter.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 888b38930a300cb8-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50627	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	976	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=264441c2-0e4b-4098-920f-1c8a6b45a578&ttd_puid=1c74b149-6627-4305-8e39-2d356a63f8cd%2Chttps%253A%252F%252Fids.ad.gt%252Fapi%252Fv1%252Ftapad_match%253Fid%253DAU1D-0100-001716532054-VWROEXDT-D1CK%2526tapad_id%253D1c74b149-6627-4305-8e39-2d356a63f8cd%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716532031795; TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd; TapAd_3WAY_SYNCS=
2024-05-24 06:27:38 UTC	1212	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:38 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716532031795;Expires=Tue, 23 Jul 2024 06:27:38 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=1c74b149-6627-4305-8e39-2d356a63f8cd;Expires=Tue, 23 Jul 2024 06:27:38 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!3486;Expires=Tue, 23 Jul 2024 06:27:38 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://ids.ad.gt/api/v1/tapad_match?id=AU1D-0100-001716532054-VWROEXDT-D1CK&tapad_id=1c74b149-6627-4305-8e39-2d356a63f8cd Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50624	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	812	OUT	GET /ecm3?ex=cnv.com&id=AQAJpakzu6vM3gIc8dq1AQEBAQEBAQCOqEmULAEBAI6oSZQs&expiration=1716618457&is_secure=true&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:38 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8PHC23ZRKVSTXZK4SKA9 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50621	157.240.251.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	649	OUT	GET /PatriotJournal HTTP/1.1 Host: facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:38 UTC	511	IN	HTTP/1.1 301 Moved Permanently Location: https://www.facebook.com/PatriotJournal Strict-Transport-Security: max-age=15552000; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: 4+yl1V8Zi2IQzogHDcwB2QgZ+vAPIS23Yo+vs1b7eZqQCKETqAg85DDLTcUhRHOrL0EB7nAhw5wFVVEwmXw8IA== Date: Fri, 24 May 2024 06:27:38 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=40, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50619	208.93.169.131	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	873	OUT	GET /bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001716532054-VWROEXDT-D1CK HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=Mfm5DWu5r7XL; VP=part_Mfm5DWu5r7XL; pb_rtb_ev=3-1rjd\|7dN.0.AAJTiE7MoGcAABTuYnJhWg; pb_rtb_ev_part=3-1rjd\|7dN.0.AAJTiE7MoGcAABTuYnJhWg; INGRESSCOOKIE=55f4456c6623a6e0
2024-05-24 06:27:38 UTC	907	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-77c5966d9-fwbcc cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=Mfm5DWu5r7XL;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 19-May-2025 06:27:38 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_Mfm5DWu5r7XL;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 19-May-2025 06:27:38 GMT;SameSite=None;Partitioned location: https://ids.ad.gt/api/v1/ppnt_match?uid=Mfm5DWu5r7XL&ev=1&pid=562316&id=AU1D-0100-001716532054-VWROEXDT-D1CK transfer-encoding: chunked server: Jetty(10.0.14) connection: close
2024-05-24 06:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50611	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	514	OUT	GET /sync?dsp_id=250&expires=14&user_id=f2c9834a-eb80-459e-8abc-438c425949b9&ssp=themediagrid HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1716532031; tuuid=120ce5db-d35e-4f16-8347-f58a51fd3b1b; tuuid_lu=1716532033
2024-05-24 06:27:38 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-05-24 06:27:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50629	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	1875	OUT	GET /pagead/adview?ai=CXO9kLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKUCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohXrQF7fOsOlWDbIjfBfzzjQ4sARx7uq2tjFW_zGLGMlRimOMFkvc7ABOTrgd39BIgF6IyGrU-SBQQIBBgBkgUECAUYBKAGLoAH_MuNvwKoB9m2sQKoB9XJG6gHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBBDhnFjSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpY0J2xiNSlhgOaCSBodHRwczovL21hZG11c2NsZXMuY29tL2FsY28tZnJlZYAKAcgLAdoMEQoLELD3p9jv8Lyg6wESAgEDuBOcG9gTDdAVAZgWAYAXAbIXHAoaCAASFHB1Yi03NjY2Mjc4MzYyODc5MTY2GACyGAkSAotPGC4iAQDoGAE&sigh=4fxazGSgjK8&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864hgB&template_id=3484&cb [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	1215	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x88e88cb06369d81a0000000000000000","2":"0xcb83f4815142d3fb0000000000000000","3":"0xc64accc45770eaa00000000000000000","4":"0x6b5827cdd1bcf3100000000000000000","5":"0x188bc64c4592ed9b0000000000000000"},"debug_key":"10018266130505511963","debug_reporting":true,"destination":"https://madmuscles.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["404527596"],"22":["true"],"4":["05-24"],"6":["true"]},"priority":"500","source_event_id":"17058134112571724385"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 24 May 2024 06:27:38 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50625	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	3275	OUT	GET /pagead/interaction/?ai=CSRdgMDNQZrrcD6eU7_UPu4uiiAOG65bpd9bFhf3eEL_hHhABILjbvStgyQagAZ26zZoDyAEBqQIiF0A1MwcoPqgDAcgDywSqBKoCT9Asl5OXzJvRQQpqX5lWBTLp6TcZQMtO7xJ23rUHI5L095cVIAMYmiLRO_q_nj6XNQTeGk0hEyBjv0f7umT8giBEoRpy-gnw0PBMUkHMBeciYVe2ZIY-1mcXkv7uQ1D45uuroBROJssJv-01I9csc5xFq2oanmjqHbLGXFYIZAuJ0G3jjx4k37sYYUzln4HIJkORcHmkNuYw-zQZXm6zKiLj8GKlT_W8S2e0OsZ8KaUppig19pBIPKhxUj9hP52YJYauPvkKAUjdW9V5a6Ra8ZfIc93RTQSS5KmDt97XxZu5SuB-wIomg_Nt0gwo7KHG27aMC-AykgfeGuGy1KG7EVAZKKm7LYAdNVEXiHqslK1hEIUqXfjN-CWfMRtZjS6qNpnNWnpU2QEK6sAEntqhm5IEiAXMu9rPRqAGAoAHy8WyZagH2baxAqgH1ckbqAemvhuoB47OG6gHk9gbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQKoB-qxsQKoB5m1sQKoB763sQKoB_jCsQKoB_vCsQLYBwHSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpY4pTMiNSlhgOxCQqzjH9vtidcgAoBmAsByAsB2gwRCgsQ8MeSmbKyjrL1ARICAQOqDQJVU8gNAdgTDYgUA9AVAZgWAfgWAYAXAbIYCRICi1QYAiIBAA&sigh=PGMNx01Be6Y&cid=CAQSTwDaQooL90qYTeD_eDZCvFMGKJKs43LLl_5MJWPDpsc8GQ0yq7FGBJ37-7qxH7zXyJj1vccZx7Qu0qedydtnGyIH9vd4AHvNgVgbVP2zSt0 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&s [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 06:27:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50635	174.137.133.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	626	OUT	GET /vtrack?i=Ch8nYJgUC_Q_0_0&event=fail&code=901 HTTP/1.1 Host: rtb2-useast.xaprio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:38 UTC	309	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:38 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store Accept-CH: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model Age: 0 Pragma: no-cache
2024-05-24 06:27:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50632	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	1124	OUT	GET /k/155.gif?puid=AAJTiE7MoGcAABTuYnJhWg&id5AccountNum=155&numCascadesAllowed=9 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#6; cf=gif; cip=579; cnac=7; car=2; gdpr=0\|
2024-05-24 06:27:38 UTC	1907	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|155#1716532058518#-1523889321#AAJTiE7MoGcAABTuYnJhWg\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:38 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://sync.ipredictive.com/d/sync/cookie/generic?partner=id5&cspid=18&cb=&redirect=https%3A%2F%2Fid5-sync.com%2Fc%2F579%2F796%2F6%2F3.gif%3Fpuid%3D%24%7BADELPHIC_CUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:38 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50631	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	1926	OUT	GET /pagead/interaction/?ai=CnAoaLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKgCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohX7wNa7gSedVBxwiJS2UtAzdEoTfvnhXOrm9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOljQnbGI1KWGA7EJdRSug8aIt4mACgGYCwHICwGADAHaDBEKCxCw96fY7_C8oOsBEgIBA6oNAlVTyA0BuBOcG9gTDdAVAZgWAfgWAYAXAbIYCRICi08YLiIBAOgYAQ&sigh=PF0qigZl3Ls&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864g&label=wi [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:38 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 06:27:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50643	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	608	OUT	GET /win?i=dxIO5kQ6FQo_0&p=1716532057.216631&price=4&f=nurlnw HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:38 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:38 GMT Content-Type: text/xml Content-Length: 3316 Connection: close Access-Control-Allow-Origin: https://pjnewsletter.com Cache-Control: no-store Access-Control-Allow-Credentials: true Accept-CH: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model
2024-05-24 06:27:38 UTC	3316	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 3e 3c 41 64 20 69 64 3d 22 32 35 36 34 36 34 22 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 41 64 4b 65 72 6e 65 6c 20 44 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 69 6d 61 33 76 70 61 69 64 3f 76 61 64 5f 66 6f 72 6d 61 74 3d 6c 69 6e 65 61 72 26 63 6f 72 72 65 6c 61 74 6f 72 3d 26 61 64 74 61 67 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><VAST version="4.0"><Ad id="256464"><Wrapper><AdSystem>AdKernel DSP</AdSystem><VASTAdTagURI><![CDATA[https://tpc.googlesyndication.com/ima3vpaid?vad_format=linear&correlator=&adtagurl=https%3A%2F%2Fpubads.g.doubleclic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50642	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	616	OUT	GET /vast-error?i=NzUC32Ixzbw_0&err=901 HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:38 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:38 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store
2024-05-24 06:27:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50647	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	1921	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=93756&t=1716532050&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=843dbc6f5d25456f5a1501d5baf574e7&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=81268114025&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d37=realtime&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb9540829a4d45051144&h=16e4d564531c9563c98a5f610a2dc368771ab44d&cpm=2&rtbbp=2&d9=0000&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&d4=[AVC_WFCYCLE]&d5=[AVC_TIMEPASS]&ofpr=2&d20=av&imid=843dbc6f5d25456f5a1501d5baf574e7_adsservngs2s7fbd5b644svng_6756297_[AVC_WFCYCLE]&e=AdError&prbdres=901 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:39 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:38 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50644	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	813	OUT	GET /csync/RX-b0419578-1025-453b-9458-3b49bf185e5c-003?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3DRX-b0419578-1025-453b-9458-3b49bf185e5c-003%26ex%3Drhythmone.com HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
2024-05-24 06:27:39 UTC	578	IN	HTTP/1.1 302 Found date: Fri, 24 May 2024 06:27:39 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D; path=/; expires=Sat, 24 May 2025 06:27:39 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://s.amazon-adsystem.com/ecm3?id=RX-b0419578-1025-453b-9458-3b49bf185e5c-003&ex=rhythmone.com etag: RXb04195781025453b94583b49bf185e5c003 connection: close
2024-05-24 06:27:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50651	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	1863	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532055260&plt=2&asid=64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C65a1370997c7e0985f08ab5d&ofpr=1%2C1%2C1.25&fpo=%2C%2C&ri=%2C%2C HTTP/1.1 Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:39 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:39 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50649	216.219.92.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	1762	OUT	GET /error.vast.aspx?item=B3A5270B-FA4B-4DE5-9EA3-AF95C1766C2E&cc=US%2FNY%2F5128581&am-uid=c3f2dced77d84f53905889bf42173c38&device=28&ip=8.46.123.175&profile=10B16888-FCBF-4C9D-90ED-F70CACCE3929&zone=5B8111BB-02DA-4103-81F9-53B081CC927F&site=E21A6002-AB86-4476-809A-20FDC8F62012&rule=E96CA355-AA9D-4A25-B2E8-1CF5CF7CE2D1&requestId=1b86c25b-7d31-4194-9b04-49171e93f900&externalRqId=843dbc6f5d25456f5a1501d5baf574e7_adsservngs2s7fbd5b644svng_6579a883a4f2db0d000b8bd9&inst=ADX-INTR-NYC-7&pxl=1&bidsc=2&page=pjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&hp=-208187538&size=Instream&adv=nike.com&dsp=C0FAA361-F00C-44C6-9A44-ABF9E334DB81&ts=638521288505658704&visnew=0&bt=3&carr=CenturyLink&devt=2&osfamily=9&isapp=0&make=Google&mod=Chrome&os=Windows&osv=10&adtype=1&extvisid=1716532025945-172031150014-000201-002-004790&crid=256464&extpubid=64db4ddc8904509d8303ce64&pvid=0f3f9480-3851-4fd4-a2e3-60e7cb7efa56&cet=7&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWe [TRUNCATED] Host: inv-nets-nyc-s1.admixer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: am-uid=c3f2dced77d84f53905889bf42173c38
2024-05-24 06:27:39 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:39 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Keep-Alive: timeout=25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50650	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:38 UTC	711	OUT	GET /s/ecm3?id=LWKAUNHL-D-BFYD&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:39 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: W5CF74YZBX2MGZ15VXXB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50655	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	920	OUT	GET /tr/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&rl=&if=false&ts=1716532056157&sw=1280&sh=1024&v=2.9.156&r=stable&ec=1&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:39 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 06:27:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50656	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	653	OUT	GET /PatriotJournal HTTP/1.1 Host: www.facebook.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:39 UTC	1144	IN	HTTP/1.1 200 OK Vary: Accept-Encoding accept-ch-lifetime: 4838400 accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Link: <https://www.facebook.com/PatriotJournal>; rel="canonical" reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 06:27:39 UTC	1385	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 Data Ascii: content-security-policy-report-only: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net d
2024-05-24 06:27:39 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 06:27:39 UTC	1826	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:27:39 UTC	501	IN	Data Raw: 37 37 32 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 5f 39 64 6c 73 20 5f 5f 66 62 2d 6c 69 67 68 74 2d 6d 6f 64 65 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 64 65 66 61 75 6c 74 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 54 2f 72 2f 61 47 54 33 67 73 6b 7a 57 42 66 2e 69 63 6f 22 20 64 61 74 61 2d 62 61 64 67 65 64 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 44 2f 72 2f 55 4a 6a 30 74 67 6b 2d 52 72 54 2e 69 63 Data Ascii: 7722<!DOCTYPE html><html id="facebook" class="_9dls __fb-light-mode" lang="en" dir="ltr"><head><link data-default-icon="https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico" data-badged-icon="https://static.xx.fbcdn.net/rsrc.php/yD/r/UJj0tgk-RrT.ic
2024-05-24 06:27:39 UTC	1500	IN	Data Raw: 72 74 79 3d 22 61 6c 3a 61 6e 64 72 6f 69 64 3a 61 70 70 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 61 6e 64 72 6f 69 64 3a 70 61 63 6b 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 63 6f 6d 2e 66 61 63 65 62 6f 6f 6b 2e 6b 61 74 61 6e 61 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 61 6e 64 72 6f 69 64 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 66 62 3a 2f 2f 70 72 6f 66 69 6c 65 2f 31 30 30 30 36 39 33 34 33 35 39 39 37 30 36 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 69 6f 73 3a 61 70 70 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 Data Ascii: rty="al:android:app_name" content="Facebook" /><meta property="al:android:package" content="com.facebook.katana" /><meta property="al:android:url" content="fb://profile/100069343599706" /><meta property="al:ios:app_name" content="Facebook" /><meta propert
2024-05-24 06:27:39 UTC	1500	IN	Data Raw: 3b 5f 6e 63 5f 68 74 3d 73 63 6f 6e 74 65 6e 74 2d 68 6f 75 31 2d 31 2e 78 78 26 61 6d 70 3b 6f 68 3d 30 30 5f 41 59 41 6f 32 53 37 57 31 38 31 69 44 70 66 45 41 37 4c 35 57 75 76 5a 75 35 62 62 68 48 61 41 46 75 4d 71 64 4b 37 71 44 56 79 6e 53 77 26 61 6d 70 3b 6f 65 3d 36 36 35 35 46 45 43 30 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: ;_nc_ht=scontent-hou1-1.xx&oh=00_AYAo2S7W181iDpfEA7L5WuvZu5bbhHaAFuMqdK7qDVynSw&oe=6655FEC0" /><meta property="og:locale" content="en_US" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><meta name="robots" content="n
2024-05-24 06:27:39 UTC	1500	IN	Data Raw: 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 36 30 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 38 30 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 30 35 3a 23 45 43 46 33 46 46 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 33 30 3a 23 41 41 43 39 46 46 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 34 30 3a 23 37 37 41 37 46 46 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 36 30 3a 23 31 38 37 37 46 32 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 37 30 3a 23 32 38 35 31 41 33 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 38 30 3a 23 31 44 33 43 37 38 3b 2d 2d 66 64 73 2d 62 75 74 74 6f 6e 2d 74 65 78 74 3a 23 34 34 34 39 35 30 3b 2d 2d 66 64 73 2d 63 6f 6d 6d 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: black-alpha-60:rgba(0, 0, 0, 0.6);--fds-black-alpha-80:rgba(0, 0, 0, 0.8);--fds-blue-05:#ECF3FF;--fds-blue-30:#AAC9FF;--fds-blue-40:#77A7FF;--fds-blue-60:#1877F2;--fds-blue-70:#2851A3;--fds-blue-80:#1D3C78;--fds-button-text:#444950;--fds-comment-backgroun
2024-05-24 06:27:39 UTC	1500	IN	Data Raw: 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 2d 64 61 72 6b 2d 31 3a 23 34 44 42 42 41 36 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 2d 64 61 72 6b 2d 32 3a 23 33 31 41 33 38 44 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 2d 74 69 6e 74 2d 37 30 3a 23 44 32 46 30 45 41 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 2d 74 69 6e 74 2d 39 30 3a 23 46 30 46 41 46 38 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 6f 6d 61 74 6f 3a 23 46 42 37 32 34 42 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 6f 6d 61 74 6f 2d 74 69 6e 74 2d 33 30 3a 23 46 33 38 45 37 42 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 6f 6d 61 74 6f 2d 74 69 6e 74 2d 39 30 3a 23 46 44 45 46 45 44 3b 2d 2d 66 64 73 2d Data Ascii: ;--fds-spectrum-teal-dark-1:#4DBBA6;--fds-spectrum-teal-dark-2:#31A38D;--fds-spectrum-teal-tint-70:#D2F0EA;--fds-spectrum-teal-tint-90:#F0FAF8;--fds-spectrum-tomato:#FB724B;--fds-spectrum-tomato-tint-30:#F38E7B;--fds-spectrum-tomato-tint-90:#FDEFED;--fds-
2024-05-24 06:27:39 UTC	1500	IN	Data Raw: 75 65 3a 23 31 38 37 37 46 32 3b 2d 2d 62 61 73 65 2d 63 68 65 72 72 79 3a 23 46 33 34 32 35 46 3b 2d 2d 62 61 73 65 2d 67 72 61 70 65 3a 23 39 33 36 30 46 37 3b 2d 2d 62 61 73 65 2d 6c 65 6d 6f 6e 3a 23 46 37 42 39 32 38 3b 2d 2d 62 61 73 65 2d 6c 69 6d 65 3a 23 34 35 42 44 36 32 3b 2d 2d 62 61 73 65 2d 70 69 6e 6b 3a 23 46 46 36 36 42 46 3b 2d 2d 62 61 73 65 2d 73 65 61 66 6f 61 6d 3a 23 35 34 43 37 45 43 3b 2d 2d 62 61 73 65 2d 74 65 61 6c 3a 23 32 41 42 42 41 37 3b 2d 2d 62 61 73 65 2d 74 6f 6d 61 74 6f 3a 23 46 42 37 32 34 42 3b 2d 2d 74 65 78 74 2d 62 61 64 67 65 2d 69 6e 66 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 28 32 31 34 2c 20 38 39 25 2c 20 35 32 25 29 3b 2d 2d 74 65 78 74 2d 62 61 64 67 65 2d 73 75 63 63 65 73 73 2d 62 61 63 6b 67 72 Data Ascii: ue:#1877F2;--base-cherry:#F3425F;--base-grape:#9360F7;--base-lemon:#F7B928;--base-lime:#45BD62;--base-pink:#FF66BF;--base-seafoam:#54C7EC;--base-teal:#2ABBA7;--base-tomato:#FB724B;--text-badge-info-background:hsl(214, 89%, 52%);--text-badge-success-backgr
2024-05-24 06:27:39 UTC	1500	IN	Data Raw: 20 62 72 69 67 68 74 6e 65 73 73 28 39 34 25 29 20 63 6f 6e 74 72 61 73 74 28 38 36 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 77 61 72 6e 69 6e 67 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 37 37 25 29 20 73 65 70 69 61 28 32 39 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 32 38 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 30 32 25 29 20 63 6f 6e 74 72 61 73 74 28 31 30 37 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 62 6c 75 65 2d 6c 69 6e 6b 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 33 30 25 29 20 73 65 Data Ascii: brightness(94%) contrast(86%);--filter-warning-icon:invert(77%) sepia(29%) saturate(200%) saturate(200%) saturate(200%) saturate(200%) saturate(200%) saturate(128%) hue-rotate(359deg) brightness(102%) contrast(107%);--filter-blue-link-icon:invert(30%) se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50661	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	1030	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&rl=&if=false&ts=1716532056157&sw=1280&sh=1024&v=2.9.156&r=stable&ec=1&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:39 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x0fa5718854dfdd97","source_keys":["1","2"]},{"key_piece":"0x71da309a42a27891","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 06:27:39 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 06:27:39 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:27:39 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50667	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	780	OUT	POST /vz HTTP/1.1 Host: c.mgid.com Connection: keep-alive Content-Length: 260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:39 UTC	260	OUT	Data Raw: 7b 22 75 73 65 72 44 61 74 61 22 3a 7b 22 70 61 67 65 56 69 65 77 49 64 22 3a 22 31 38 66 61 39 34 37 65 62 31 31 38 35 39 38 32 30 34 64 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 76 69 73 69 62 6c 65 54 69 6d 65 22 3a 34 39 33 33 33 7d 2c 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 75 73 65 72 5f 63 68 61 6e 67 65 5f 74 61 62 5f 6f 72 5f 63 6c 6f 73 65 5f 73 69 74 65 22 2c 22 6d 75 69 64 6e 22 3a 22 6f 34 6e 32 44 58 39 74 54 42 72 6e 22 2c 22 69 6d 70 6c 56 65 72 73 69 6f 6e Data Ascii: {"userData":{"pageViewId":"18fa947eb118598204d","pageUrl":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","visibleTime":49333},"eventName":"user_change_tab_or_close_site","muidn":"o4n2DX9tTBrn","implVersion
2024-05-24 06:27:39 UTC	306	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:39 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b389dc9a50f7f-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50666	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	780	OUT	POST /vz HTTP/1.1 Host: c.mgid.com Connection: keep-alive Content-Length: 750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:39 UTC	750	OUT	Data Raw: 7b 22 77 69 64 67 65 74 44 61 74 61 22 3a 7b 22 63 6f 6d 70 6f 73 69 74 65 49 64 22 3a 31 36 30 34 30 36 33 2c 22 75 6e 69 71 75 65 48 61 73 68 22 3a 22 6c 77 6b 61 75 67 6e 66 6b 61 68 72 7a 39 75 6e 70 71 61 22 2c 22 76 69 73 69 62 6c 65 54 69 6d 65 22 3a 33 34 34 31 34 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 36 36 35 30 33 33 33 33 2d 30 35 35 66 39 22 2c 22 75 75 69 64 22 3a 22 61 31 63 39 61 39 34 34 2d 31 39 39 36 2d 31 31 65 66 2d 39 62 37 36 2d 63 38 34 62 64 36 38 33 37 30 63 30 22 7d 2c 22 74 65 61 73 65 72 73 44 61 74 61 22 3a 5b 7b 22 63 6f 6d 70 6f 73 69 74 65 49 64 22 3a 31 36 30 34 30 36 33 2c 22 73 68 6f 77 48 61 73 68 22 3a 22 69 41 55 4a 79 6a 64 67 38 51 50 43 32 4d 6d 77 63 4a 6e 37 36 61 50 4e 6e 55 2d 33 4a 30 66 68 44 48 6e 4d 41 Data Ascii: {"widgetData":{"compositeId":1604063,"uniqueHash":"lwkaugnfkahrz9unpqa","visibleTime":34414,"sessionId":"66503333-055f9","uuid":"a1c9a944-1996-11ef-9b76-c84bd68370c0"},"teasersData":[{"compositeId":1604063,"showHash":"iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMA
2024-05-24 06:27:39 UTC	306	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:39 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b389dab4a6a4f-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50665	54.163.32.160	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	835	OUT	GET /d/sync/cookie/generic?partner=id5&cspid=18&cb=&redirect=https%3A%2F%2Fid5-sync.com%2Fc%2F579%2F796%2F6%2F3.gif%3Fpuid%3D%24%7BADELPHIC_CUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=31c13c99-d8e7-447c-b9e0-64fdf07947f8\|1716532033710
2024-05-24 06:27:39 UTC	480	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 24 May 2024 06:27:39 GMT Location: https://id5-sync.com/c/579/796/6/3.gif?puid=31c13c99-d8e7-447c-b9e0-64fdf07947f8&gdpr=0&gdpr_consent= Set-Cookie: cu=31c13c99-d8e7-447c-b9e0-64fdf07947f8\|1716532033710; Path=/; Domain=ipredictive.com; Expires=Sat, 24 May 2025 06:27:39 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 1fa1fa64-df5f-456e-a4eb-26819973e180 Content-Length: 132 Connection: Close
2024-05-24 06:27:39 UTC	132	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 63 2f 35 37 39 2f 37 39 36 2f 36 2f 33 2e 67 69 66 3f 70 75 69 64 3d 33 31 63 31 33 63 39 39 2d 64 38 65 37 2d 34 34 37 63 2d 62 39 65 30 2d 36 34 66 64 66 30 37 39 34 37 66 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://id5-sync.com/c/579/796/6/3.gif?puid=31c13c99-d8e7-447c-b9e0-64fdf07947f8&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50669	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	1589	OUT	POST /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive Content-Length: 1432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:39 UTC	1432	OUT	Data Raw: 5b 22 26 63 6f 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 6e 69 64 3d 35 39 63 39 31 34 38 36 32 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 6f 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 26 6e 63 69 64 3d 36 34 64 64 65 62 39 35 34 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 63 6f 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 26 6e 61 73 69 64 3d 36 35 64 63 61 34 33 65 66 31 61 33 39 37 65 37 34 34 30 64 36 32 33 34 26 6f 66 70 72 3d 31 26 65 3d 76 70 61 69 64 49 6e 69 74 41 64 45 72 72 6f 72 26 76 69 3d 30 26 64 31 3d 76 70 61 69 64 26 70 6c 74 3d 32 22 2c 22 26 63 6f 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 Data Ascii: ["&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&nasid=65dca43ef1a397e7440d6234&ofpr=1&e=vpaidInitAdError&vi=0&d1=vpaid&plt=2","&copid=64db4ddc89045
2024-05-24 06:27:39 UTC	251	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:39 GMT access-control-allow-origin: * content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50672	52.46.128.147	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	666	OUT	GET /ecm3?id=RX-b0419578-1025-453b-9458-3b49bf185e5c-003&ex=rhythmone.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:40 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 38KD07N4VWH5MS1FKTQP Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50670	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:39 UTC	791	OUT	POST /csm/events HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 269 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=xBPAQV82Qk1WSHYlMkZ5SjdhUUV0b3NjTlh4bmo1TWg1dlc5dnJDcHFsSCUyQlNuRWZxd0UwZ1h1ZiUyRnpRd1RzJTJGM1IlMkZ6STdJQQ
2024-05-24 06:27:39 UTC	269	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 30 38 33 64 32 65 31 2d 39 64 32 39 2d 34 33 66 37 2d 39 31 62 34 2d 64 65 66 65 62 35 31 64 33 65 30 37 22 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 49 64 22 3a 22 41 64 61 70 74 65 72 42 69 64 53 74 61 72 74 22 2c 22 65 6c 61 70 73 65 64 22 3a 31 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 43 64 62 43 61 6c 6c 53 74 61 72 74 22 2c 22 65 6c 61 70 73 65 64 22 3a 31 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 43 64 62 43 61 6c 6c 45 6e 64 22 2c 22 65 6c 61 70 73 65 64 22 3a 39 34 36 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 41 64 61 70 74 65 72 42 69 64 45 6e 64 22 2c 22 65 6c 61 70 73 65 64 22 3a 39 34 36 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 55 73 65 72 52 65 74 75 72 6e 54 69 6d 65 22 2c 22 65 6c Data Ascii: {"requestId":"6083d2e1-9d29-43f7-91b4-defeb51d3e07","events":[{"eventId":"AdapterBidStart","elapsed":1},{"eventId":"CdbCallStart","elapsed":1},{"eventId":"CdbCallEnd","elapsed":946},{"eventId":"AdapterBidEnd","elapsed":946},{"eventId":"UserReturnTime","el
2024-05-24 06:27:40 UTC	308	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:39 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50688	172.240.45.70	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1703	OUT	GET /api/adserver/s2s?auc_id=244578ccbebd41e3744959cc05d9b210&wpm=&ssrtb=&pbjs=&tms=&AV_C_USER_ID=1716532025945-172031150014-000201-002-004790&AV_TAGID=6500061b317aecac0b064b34&AV_PUBLISHERID=64db4ddc8904509d8303ce64&AV_SECURED=1&AV_LANGUAGE=en&AV_URL=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&AV_CHANNELID=6500054a17fa3a03e7086f47&tgt=0&AV_SUBID=&AV_CDIM1=&AV_CDIM2=&AV_CDIM3=&AV_ABT=5&TRACK_URL=track1.aniview.com&pce=1&npx=1&AV_DETDOMAIN=pjnewsletter.com&AV_DADPOS=3&AV_OPLACEMENT=1&AV_TAG=6500061b317aecac0b064b34&AV_TEMPLATE=6500061ba4211b4fae0a4124&AV_GPID=/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com&d36=6.2.212&responsive=1&sver=4&avtoken=23402&omv=1.0.1&AV_D65=Control&AV_D66=8.5.6&clsid=1aca11cf-8632-4424-b7c5-fee24d33601a&rando=2&scnt=1&AV_WIDTH=540&AV_HEIGHT=303&AV_DNT=0&cb=6532048549&wfc=1&tgt=0&&AV_VI=0&AV_VID=489.359375&d4=2&d5=25&AV_PLCMT=2&AV_PLACEMENT=3&AV_PLAYBACKMETHOD=6&AV_IRISID=&AV_IRISIDCTX=&ms2s=1 HT [TRUNCATED] Host: s2s.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:40 UTC	920	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:40 GMT content-type: application/json transfer-encoding: chunked vary: Accept-Encoding access-control-allow-credentials: true access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, INDEX access-control-allow-headers: Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Bamboo-Token,Event-Id,X-Requested-With access-control-max-age: 1728000 x-bamboo-c-s: BYPASS x-bamboo-c-skfe: 1 x-bamboo-c-skst: 1 expires: Sun, 12 May 2024 16:41:00 GMT cache-control: no-cache accept-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 critical-ch: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 alt-svc: h3=":443";ma=60; connection: close
2024-05-24 06:27:40 UTC	5894	IN	Data Raw: 31 36 46 45 0d 0a 7b 22 69 64 22 3a 20 22 32 34 34 35 37 38 63 63 62 65 62 64 34 31 65 33 37 34 34 39 35 39 63 63 30 35 64 39 62 32 31 30 22 2c 22 62 69 64 69 64 22 3a 20 22 63 66 37 34 38 38 65 33 63 63 65 62 38 65 31 37 61 33 64 38 39 31 62 65 39 33 38 32 33 37 33 64 22 2c 22 63 75 72 22 3a 20 22 55 53 44 22 2c 22 73 65 61 74 62 69 64 22 3a 20 5b 7b 22 73 65 61 74 22 3a 20 22 22 2c 22 62 69 64 22 3a 20 5b 7b 22 69 64 22 3a 20 22 63 66 37 34 38 38 65 33 63 63 65 62 38 65 31 37 61 33 64 38 39 31 62 65 39 33 38 32 33 37 33 64 5f 61 64 73 73 65 72 76 6e 67 73 32 73 37 66 62 64 35 62 36 34 68 38 68 6d 32 5f 36 37 39 31 35 34 30 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 22 2c 22 69 6d 70 69 64 22 3a 20 22 63 66 37 34 38 38 65 33 63 63 65 62 38 65 31 37 61 33 Data Ascii: 16FE{"id": "244578ccbebd41e3744959cc05d9b210","bidid": "cf7488e3cceb8e17a3d891be9382373d","cur": "USD","seatbid": [{"seat": "","bid": [{"id": "cf7488e3cceb8e17a3d891be9382373d_adsservngs2s7fbd5b64h8hm2_6791540_[AVC_WFCYCLE]","impid": "cf7488e3cceb8e17a3
2024-05-24 06:27:40 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 35 33 33 26 63 6f 64 65 3d 63 33 66 32 64 63 65 64 37 37 64 38 34 66 35 33 39 30 35 38 38 39 62 66 34 32 31 37 33 63 33 38 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 74 2e 61 64 78 2e 6f 70 65 72 61 2e 63 6f 6d 2f 73 79 6e 63 3f 76 65 6e 64 6f 72 3d 36 30 30 32 32 26 75 69 64 3d 63 33 66 32 64 63 65 64 37 37 64 38 34 66 35 33 39 30 35 38 38 39 62 66 34 32 31 37 33 63 33 38 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 64 70 6d Data Ascii: 1A86><![CDATA[https://ib.adnxs.com/setuid?entity=533&code=c3f2dced77d84f53905889bf42173c38...</Impression><Impression><![CDATA[https://t.adx.opera.com/sync?vendor=60022&uid=c3f2dced77d84f53905889bf42173c38...</Impression><Impression><![CDATA[https://dpm
2024-05-24 06:27:40 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 37 3d 26 64 38 38 3d 26 64 38 39 3d 26 64 39 30 3d 26 61 70 70 70 6b 67 3d 26 64 33 37 3d 72 65 61 6c 74 69 6d 65 26 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 25 37 43 36 35 37 39 61 38 38 33 61 34 66 32 64 62 30 64 30 30 30 62 38 62 64 39 26 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 25 37 43 35 39 63 39 31 34 38 36 32 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 25 37 43 36 34 64 64 65 62 39 35 34 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 68 3d 38 64 66 33 65 66 61 65 64 39 32 31 63 63 34 31 35 36 35 62 38 61 33 39 37 38 61 61 62 66 32 64 38 66 35 32 61 62 32 Data Ascii: 1A867=&d88=&d89=&d90=&apppkg=&d37=realtime&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb9540829a4d45051144&h=8df3efaed921cc41565b8a3978aabf2d8f52ab2
2024-05-24 06:27:40 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 25 32 39 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 69 70 68 61 73 68 3d 31 36 34 36 39 31 35 37 33 30 26 69 64 66 61 3d 26 76 61 73 74 3d 34 26 73 65 61 74 3d 63 30 66 61 61 33 36 31 2d 66 30 30 63 2d 34 34 63 36 2d 39 61 34 34 2d 61 62 66 39 65 33 33 34 64 62 38 31 26 76 61 73 74 63 72 69 64 3d 26 76 61 73 74 61 64 69 64 3d 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 3e 3c 21 Data Ascii: 1A86ws+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&iphash=1646915730&idfa=&vast=4&seat=c0faa361-f00c-44c6-9a44-abf9e334db81&vastcrid=&vastadid=...</Tracking><Tracking event=\"complete\"><!
2024-05-24 06:27:40 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 30 30 26 61 64 3d 5b 41 56 5f 41 44 44 55 52 41 54 49 4f 4e 5d 26 76 69 3d 5b 41 56 5f 56 49 45 57 41 42 49 4c 49 54 59 5d 26 64 37 31 3d 5b 41 56 43 5f 41 44 49 44 5d 26 64 37 33 3d 5b 41 56 43 5f 44 54 5d 26 64 34 3d 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 26 64 35 3d 5b 41 56 43 5f 54 49 4d 45 50 41 53 53 5d 26 6f 66 70 72 3d 32 26 64 32 30 3d 61 76 26 69 6d 69 64 3d 63 66 37 34 38 38 65 33 63 63 65 62 38 65 31 37 61 33 64 38 39 31 62 65 39 33 38 32 33 37 33 64 5f 61 64 73 73 65 72 76 6e 67 73 32 73 37 66 62 64 35 62 36 34 68 38 68 6d 32 5f 36 37 39 31 35 34 30 5f 5b 41 56 43 5f 57 46 43 59 43 4c 45 5d 26 65 3d 63 6f 6d 70 6c 65 74 65 26 61 64 3d 5b 41 56 5f 41 44 44 55 52 41 54 49 4f 4e 5d 26 76 69 3d 5b 41 56 5f 56 49 45 57 41 42 49 Data Ascii: 1A8600&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&d4=[AVC_WFCYCLE]&d5=[AVC_TIMEPASS]&ofpr=2&d20=av&imid=cf7488e3cceb8e17a3d891be9382373d_adsservngs2s7fbd5b64h8hm2_6791540_[AVC_WFCYCLE]&e=complete&ad=[AV_ADDURATION]&vi=[AV_VIEWABI
2024-05-24 06:27:40 UTC	6798	IN	Data Raw: 31 41 38 36 0d 0a 63 6b 5d 5d 3e 3c 2f 43 6c 69 63 6b 54 72 61 63 6b 69 6e 67 3e 3c 43 6c 69 63 6b 54 72 61 63 6b 69 6e 67 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 69 6e 76 2d 6e 65 74 73 2d 6e 79 63 2d 73 31 2e 61 64 6d 69 78 65 72 2e 6e 65 74 2f 6c 6f 67 63 6c 69 63 6b 2e 61 73 70 78 3f 69 74 65 6d 3d 42 33 41 35 32 37 30 42 2d 46 41 34 42 2d 34 44 45 35 2d 39 45 41 33 2d 41 46 39 35 43 31 37 36 36 43 32 45 26 63 63 3d 55 53 25 32 46 4e 59 25 32 46 35 31 32 38 35 38 31 26 61 6d 2d 75 69 64 3d 63 33 66 32 64 63 65 64 37 37 64 38 34 66 35 33 39 30 35 38 38 39 62 66 34 32 31 37 33 63 33 38 26 64 65 76 69 63 65 3d 32 38 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 70 72 6f 66 69 6c 65 3d 31 30 42 31 36 38 38 38 2d 46 43 42 46 2d 34 43 39 Data Ascii: 1A86ck...</ClickTracking><ClickTracking><![CDATA[https://inv-nets-nyc-s1.admixer.net/logclick.aspx?item=B3A5270B-FA4B-4DE5-9EA3-AF95C1766C2E&cc=US%2FNY%2F5128581&am-uid=c3f2dced77d84f53905889bf42173c38&device=28&ip=8.46.123.175&profile=10B16888-FCBF-4C9
2024-05-24 06:27:40 UTC	198	IN	Data Raw: 42 42 0d 0a 2e 34 5d 5d 3e 3c 2f 43 70 6d 3e 3c 50 6c 61 79 65 72 53 65 74 74 69 6e 67 73 3e 3c 21 5b 43 44 41 54 41 5b 7b 5c 22 76 70 70 5c 22 3a 31 2c 5c 22 66 70 5c 22 3a 30 2c 5c 22 6d 61 78 52 50 4d 5c 22 3a 30 2c 5c 22 72 65 73 5c 22 3a 20 31 2c 5c 22 73 6b 69 70 6f 66 66 73 65 74 5c 22 3a 30 7d 5d 5d 3e 3c 2f 50 6c 61 79 65 72 53 65 74 74 69 6e 67 73 3e 3c 2f 41 64 53 65 72 76 69 6e 67 44 61 74 61 3e 3c 2f 45 78 74 65 6e 73 69 6f 6e 3e 3c 2f 45 78 74 65 6e 73 69 6f 6e 73 3e 3c 2f 57 72 61 70 70 65 72 3e 3c 2f 41 64 3e 3c 2f 56 41 53 54 3e 22 7d 5d 7d 5d 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: BB.4...</Cpm><PlayerSettings><![CDATA[{\"vpp\":1,\"fp\":0,\"maxRPM\":0,\"res\": 1,\"skipoffset\":0}...</PlayerSettings></AdServingData></Extension></Extensions></Wrapper></Ad></VAST>"}]}]}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50692	174.137.133.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	390	OUT	GET /vtrack?i=Ch8nYJgUC_Q_0_0&event=fail&code=901 HTTP/1.1 Host: rtb2-useast.xaprio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	186	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:40 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store Age: 0 Pragma: no-cache
2024-05-24 06:27:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50673	52.95.122.74	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	458	OUT	GET /s/ecm3?ex=baidu.com&id=22210ca7d63142b029ictt00lwkav6wt HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:40 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: XDCH060HCCCBH2FAN4X1 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50675	52.95.122.74	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	456	OUT	GET /s/ecm3?ex=outbrain.com&id=0Uof2AQs2tLTQFgGP76j&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:40 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8AQD9SF3M7XAQW0Y1J12 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50674	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	352	OUT	GET /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	321	IN	HTTP/1.1 200 OK p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:40 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50700	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1744	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=93756&t=1716532050&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=843dbc6f5d25456f5a1501d5baf574e7&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=81268114025&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d37=realtime&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb9540829a4d45051144&h=16e4d564531c9563c98a5f610a2dc368771ab44d&cpm=2&rtbbp=2&d9=0000&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&d4=[AVC_WFCYCLE]&d5=[AVC_TIMEPASS]&ofpr=2&d20=av&imid=843dbc6f5d25456f5a1501d5baf574e7_adsservngs2s7fbd5b644svng_6756297_[AVC_WFCYCLE]&e=AdError&prbdres=901 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:40 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:40 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50681	18.159.201.246	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:40 UTC	101	IN	HTTP/1.1 404 Not Found Date: Fri, 24 May 2024 06:27:40 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50686	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	993	OUT	GET /cksync.php?type=mf&ovsid=f2c9834a-eb80-459e-8abc-438c425949b9&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1; data-mf=f2c9834a-eb80-459e-8abc-438c425949b9~~1; data-rbh=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA~~1; data-co=AQAG_nWwz1cg7gJ5AhDvAQEBAQEBAQCOqEmRzwEBAI6oSZHP~~8; data-c-ts=1716532058
2024-05-24 06:27:40 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mf=f2c9834a-eb80-459e-8abc-438c425949b9~~1;Expires=Sat, 24 May 2025 06:27:40 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:40 GMT Connection: close
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:40 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50701	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1686	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532055260&plt=2&asid=64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C65a1370997c7e0985f08ab5d&ofpr=1%2C1%2C1.25&fpo=%2C%2C&ri=%2C%2C HTTP/1.1 Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:40 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:40 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50694	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	380	OUT	GET /vast-error?i=NzUC32Ixzbw_0&err=901 HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:40 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store
2024-05-24 06:27:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50685	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1042	OUT	GET /cksync.php?cs=1&vsid=%7BMedia.net_User_id%7D&type=rbh&ovsid=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA&pi=medianet HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1; data-mf=f2c9834a-eb80-459e-8abc-438c425949b9~~1; data-rbh=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA~~1; data-co=AQAG_nWwz1cg7gJ5AhDvAQEBAQEBAQCOqEmRzwEBAI6oSZHP~~8; data-c-ts=1716532058
2024-05-24 06:27:40 UTC	653	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rbh=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA~~1;Expires=Sat, 24 May 2025 06:27:40 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:40 GMT Connection: close
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:40 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50687	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1145	OUT	GET /cksync.php?cs=8&vsid=3595336326404779000V10&type=con&refUrl=&vid=65320528243595336326404779000V10&axid_e=&ovsid=AQAG_nWwz1cg7gJ5AhDvAQEBAQEBAQCOqEmRzwEBAI6oSZHP&expiration=1716618456&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3595336326404779000V10; data-bs=327352f8-d01a-4565-9f98-77efcc2259b7~~1; data-rk=5141210831119936251~~8; data-xu=hdnDQ8rd1SaooL5~~8; data-o=0d47dee2-dec7-4fb1-9baf-4ad8dfba047b~~8; data-p=Mfm5DWu5r7XL~~8; data-g=CAESEGeUdGikQC7kKtONtMpEWjs~~8; data-ze=b7ijDHbsKeDu3zUfR7gi~~1; data-c=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70~~1; data-ttd=264441c2-0e4b-4098-920f-1c8a6b45a578~~1; data-mf=f2c9834a-eb80-459e-8abc-438c425949b9~~1; data-rbh=p7sRbG-DSvKc40nZiPcR6MtOPWz3IdoeTrrZwPvPwZA~~1; data-co=AQAG_nWwz1cg7gJ5AhDvAQEBAQEBAQCOqEmRzwEBAI6oSZHP~~8; data-c-ts=1716532058
2024-05-24 06:27:40 UTC	657	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-co=AQAG_nWwz1cg7gJ5AhDvAQEBAQEBAQCOqEmRzwEBAI6oSZHP~~8;Expires=Fri, 23 May 2025 06:27:40 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 24 May 2024 06:27:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 24 May 2024 06:27:40 GMT Connection: close
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-24 06:27:40 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50691	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	622	OUT	GET /pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTcxNjUzMjA1NC1WV1JPRVhEVC1EMUNL HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:40 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 24 May 2024 06:27:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:40 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50697	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	402	OUT	GET /win?i=dxIO5kQ6FQo_0&p=1716532057.216631&price=4&f=nurlnw HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	161	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:40 GMT Content-Type: text/xml Content-Length: 3316 Connection: close Cache-Control: no-store
2024-05-24 06:27:40 UTC	3316	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 3e 3c 41 64 20 69 64 3d 22 32 35 36 34 36 34 22 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 41 64 4b 65 72 6e 65 6c 20 44 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 69 6d 61 33 76 70 61 69 64 3f 76 61 64 5f 66 6f 72 6d 61 74 3d 6c 69 6e 65 61 72 26 63 6f 72 72 65 6c 61 74 6f 72 3d 26 61 64 74 61 67 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><VAST version="4.0"><Ad id="256464"><Wrapper><AdSystem>AdKernel DSP</AdSystem><VASTAdTagURI><![CDATA[https://tpc.googlesyndication.com/ima3vpaid?vad_format=linear&correlator=&adtagurl=https%3A%2F%2Fpubads.g.doubleclic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50696	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1633	OUT	GET /pagead/interaction/?ai=CSRdgMDNQZrrcD6eU7_UPu4uiiAOG65bpd9bFhf3eEL_hHhABILjbvStgyQagAZ26zZoDyAEBqQIiF0A1MwcoPqgDAcgDywSqBKoCT9Asl5OXzJvRQQpqX5lWBTLp6TcZQMtO7xJ23rUHI5L095cVIAMYmiLRO_q_nj6XNQTeGk0hEyBjv0f7umT8giBEoRpy-gnw0PBMUkHMBeciYVe2ZIY-1mcXkv7uQ1D45uuroBROJssJv-01I9csc5xFq2oanmjqHbLGXFYIZAuJ0G3jjx4k37sYYUzln4HIJkORcHmkNuYw-zQZXm6zKiLj8GKlT_W8S2e0OsZ8KaUppig19pBIPKhxUj9hP52YJYauPvkKAUjdW9V5a6Ra8ZfIc93RTQSS5KmDt97XxZu5SuB-wIomg_Nt0gwo7KHG27aMC-AykgfeGuGy1KG7EVAZKKm7LYAdNVEXiHqslK1hEIUqXfjN-CWfMRtZjS6qNpnNWnpU2QEK6sAEntqhm5IEiAXMu9rPRqAGAoAHy8WyZagH2baxAqgH1ckbqAemvhuoB47OG6gHk9gbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQKoB-qxsQKoB5m1sQKoB763sQKoB_jCsQKoB_vCsQLYBwHSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpY4pTMiNSlhgOxCQqzjH9vtidcgAoBmAsByAsB2gwRCgsQ8MeSmbKyjrL1ARICAQOqDQJVU8gNAdgTDYgUA9AVAZgWAfgWAYAXAbIYCRICi1QYAiIBAA&sigh=PGMNx01Be6Y&cid=CAQSTwDaQooL90qYTeD_eDZCvFMGKJKs43LLl_5MJWPDpsc8GQ0yq7FGBJ37-7qxH7zXyJj1vccZx7Qu0qedydtnGyIH9vd4AHvNgVgbVP2zSt0 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:40 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 06:27:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50695	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1624	OUT	GET /pagead/interaction/?ai=CnAoaLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKgCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohX7wNa7gSedVBxwiJS2UtAzdEoTfvnhXOrm9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOljQnbGI1KWGA7EJdRSug8aIt4mACgGYCwHICwGADAHaDBEKCxCw96fY7_C8oOsBEgIBA6oNAlVTyA0BuBOcG9gTDdAVAZgWAfgWAYAXAbIYCRICi08YLiIBAOgYAQ&sigh=PF0qigZl3Ls&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864g&label=wi [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:40 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 06:27:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50703	216.219.92.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1526	OUT	GET /error.vast.aspx?item=B3A5270B-FA4B-4DE5-9EA3-AF95C1766C2E&cc=US%2FNY%2F5128581&am-uid=c3f2dced77d84f53905889bf42173c38&device=28&ip=8.46.123.175&profile=10B16888-FCBF-4C9D-90ED-F70CACCE3929&zone=5B8111BB-02DA-4103-81F9-53B081CC927F&site=E21A6002-AB86-4476-809A-20FDC8F62012&rule=E96CA355-AA9D-4A25-B2E8-1CF5CF7CE2D1&requestId=1b86c25b-7d31-4194-9b04-49171e93f900&externalRqId=843dbc6f5d25456f5a1501d5baf574e7_adsservngs2s7fbd5b644svng_6579a883a4f2db0d000b8bd9&inst=ADX-INTR-NYC-7&pxl=1&bidsc=2&page=pjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&hp=-208187538&size=Instream&adv=nike.com&dsp=C0FAA361-F00C-44C6-9A44-ABF9E334DB81&ts=638521288505658704&visnew=0&bt=3&carr=CenturyLink&devt=2&osfamily=9&isapp=0&make=Google&mod=Chrome&os=Windows&osv=10&adtype=1&extvisid=1716532025945-172031150014-000201-002-004790&crid=256464&extpubid=64db4ddc8904509d8303ce64&pvid=0f3f9480-3851-4fd4-a2e3-60e7cb7efa56&cet=7&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWe [TRUNCATED] Host: inv-nets-nyc-s1.admixer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: am-uid=c3f2dced77d84f53905889bf42173c38
2024-05-24 06:27:40 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:40 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Keep-Alive: timeout=25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50702	52.95.122.74	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	469	OUT	GET /s/ecm3?id=LWKAUNHL-D-BFYD&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:40 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 5Q95KE2TKJV41DVQ3EGC Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50705	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	684	OUT	GET /tr/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&rl=&if=false&ts=1716532056157&sw=1280&sh=1024&v=2.9.156&r=stable&ec=1&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 06:27:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50689	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	501	OUT	GET /usersync3/pubmatic/2057.4/7F542745-2D60-41EB-9A96-52B90C82DF34?zcc=0&sspret=1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b0419578-1025-453b-9458-3b49bf185e5c-003%22%7D
2024-05-24 06:27:40 UTC	177	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:40 GMT content-length: 43 cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache connection: close
2024-05-24 06:27:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50706	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	1140	OUT	GET /c/579/796/6/3.gif?puid=31c13c99-d8e7-447c-b9e0-64fdf07947f8&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#6; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|155#1716532058518#-1523889321#AAJTiE7MoGcAABTuYnJhWg\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:40 UTC	1929	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|155#1716532058518#-1523889321#AAJTiE7MoGcAABTuYnJhWg\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|796#1716532060700#-139160899\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:40 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ce.lijit.com/merge?pid=92&3pid=4426393169609033625&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F579%2F1246%2F5%2F4.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:40 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50707	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	904	OUT	POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2914 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/PatriotJournal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	132	OUT	Data Raw: 65 76 65 6e 74 5f 69 64 3d 37 33 37 32 34 34 39 30 35 37 35 38 32 31 38 32 34 36 38 26 6d 61 72 6b 65 72 5f 70 61 67 65 5f 74 69 6d 65 3d 32 34 37 39 26 73 63 72 69 70 74 5f 70 61 74 68 3d 58 43 6f 6d 65 74 50 72 6f 66 69 6c 65 56 61 6e 69 74 79 43 6f 6e 74 72 6f 6c 6c 65 72 26 77 65 69 67 68 74 3d 30 26 63 6c 69 65 6e 74 5f 73 74 61 72 74 3d 31 26 6c 73 64 3d 41 56 70 6d 68 4c 54 35 32 38 77 Data Ascii: event_id=7372449057582182468&marker_page_time=2479&script_path=XCometProfileVanityController&weight=0&client_start=1&lsd=AVpmhLT528w
2024-05-24 06:27:40 UTC	1767	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff
2024-05-24 06:27:40 UTC	1224	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-05-24 06:27:40 UTC	73	IN	Data Raw: 33 65 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 70 61 79 6c 6f 61 64 22 3a 6e 75 6c 6c 2c 22 6c 69 64 22 3a 22 37 33 37 32 34 34 39 30 36 31 35 34 30 31 36 38 34 33 31 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3efor (;;);{"__ar":1,"payload":null,"lid":"7372449061540168431"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50711	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	622	OUT	GET /rsrc.php/v3/yo/l/0,cross/Xaa0ehYmy_z.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	1966	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: FHhMH7Gou0Iuq8nQW5f1Kg== Expires: Sat, 24 May 2025 05:59:32 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: d6hW9IpIzD9EIr/kIlDOk5p62FN/WdH7jiHIgHT8sAP6MnOODgYdVjN79fN8oW9Rc6zIqsUnrSfS2LJW4U2KeQ== Date: Fri, 24 May 2024 06:27:40 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=90, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 619941
2024-05-24 06:27:40 UTC	1	IN	Data Raw: 2e Data Ascii: .
2024-05-24 06:27:40 UTC	15840	IN	Data Raw: 5f 39 64 6c 73 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 5f 39 74 31 64 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 5f 39 64 6c 73 20 2e 5f 36 73 35 64 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 5f 36 73 35 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 65 62 2d 77 61 73 68 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 2d 79 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 7b 2e 5f 36 Data Ascii: _9dls{overflow-y:scroll!important}._9t1d{overflow-y:auto!important}._9dls ._6s5d{overflow-y:visible!important}._6s5d{background-color:var(--web-wash);-webkit-font-smoothing:antialiased;overscroll-behavior-y:none}@media (prefers-reduced-motion: reduce){._6
2024-05-24 06:27:40 UTC	16384	IN	Data Raw: 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 31 70 78 7d 2e 78 31 6d 68 38 67 30 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 78 31 6d 6a 34 67 63 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 6d 65 73 73 65 6e 67 65 72 2d 63 61 72 64 2d 73 70 61 63 69 6e 67 29 7d 2e 78 31 6d 6e 6b 37 33 6b 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 2e 78 31 6d 6e 77 62 70 36 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 32 34 70 78 7d 2e 78 31 6d 70 6b 67 67 70 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 7d 2e 78 31 6d 76 69 30 6d 76 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 Data Ascii: -top-right-radius:11px}.x1mh8g0r{margin-left:0}.x1mj4gcd{padding-right:var(--messenger-card-spacing)}.x1mnk73k{border-top-color:rgba(0,0,0,.2)}.x1mnwbp6{border-bottom-right-radius:24px}.x1mpkggp{padding-right:5px}.x1mvi0mv{color:var(--primary-deemphasized
2024-05-24 06:27:41 UTC	16384	IN	Data Raw: 31 67 73 6c 6f 68 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 2e 78 31 68 32 6d 74 37 75 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 34 70 78 7d 2e 78 31 68 67 64 6d 33 7b 62 6f 74 74 6f 6d 3a 34 39 2e 39 25 7d 2e 78 31 68 68 7a 75 7a 6e 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 7d 2e 78 31 68 71 35 67 6a 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 78 31 68 73 68 6a 66 7a 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 78 31 68 75 77 77 74 68 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 70 78 7d 2e 78 31 68 76 6c 38 37 38 7b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 38 70 78 29 7d 2e 78 31 68 7a 63 6f 35 31 7b 6d 61 78 2d 77 69 64 74 68 3a 76 61 72 28 2d Data Ascii: 1gslohp{margin-top:4px}.x1h2mt7u{border-bottom-width:4px}.x1hgdm3{bottom:49.9%}.x1hhzuzn{padding-bottom:18px}.x1hq5gj4{margin-bottom:24px}.x1hshjfz{min-height:16px}.x1huwwth{margin-bottom:-3px}.x1hvl878{max-width:calc(100% - 8px)}.x1hzco51{max-width:var(-
2024-05-24 06:27:41 UTC	16384	IN	Data Raw: 66 73 65 74 3a 38 34 2e 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 36 32 64 65 67 29 7d 35 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 34 32 2e 34 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 37 32 64 65 67 29 7d 37 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 38 34 2e 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 36 32 64 65 67 29 7d 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 38 2e 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 31 63 35 72 78 68 79 2d 42 7b 30 25 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 Data Ascii: fset:84.8px;transform:rotate(162deg)}50%{stroke-dashoffset:42.4px;transform:rotate(72deg)}75%{stroke-dashoffset:84.8px;transform:rotate(162deg)}100%{stroke-dashoffset:18.8px;transform:rotate(-90deg)}}@keyframes x1c5rxhy-B{0%{max-height:100px;opacity:1}100
2024-05-24 06:27:41 UTC	1500	IN	Data Raw: 61 73 68 6f 66 66 73 65 74 3a 39 38 2e 39 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 37 32 64 65 67 29 7d 37 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 39 37 2e 39 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 36 32 64 65 67 29 7d 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 34 33 2e 39 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 6a 74 70 7a 7a 70 2d 42 7b 30 25 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 36 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 6a 7a Data Ascii: ashoffset:98.9px;transform:rotate(72deg)}75%{stroke-dashoffset:197.9px;transform:rotate(162deg)}100%{stroke-dashoffset:43.98px;transform:rotate(-90deg)}}@keyframes xjtpzzp-B{0%{margin-bottom:-6px;opacity:0}100%{margin-bottom:10px;opacity:1}}@keyframes xjz
2024-05-24 06:27:41 UTC	14884	IN	Data Raw: 63 38 2d 42 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 36 64 65 67 29 7d 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 2d 36 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 31 32 64 65 67 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 72 76 6c 65 73 6c 2d 42 7b 31 30 30 25 7b 62 6f 74 74 6f 6d 3a 30 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 73 6a 79 Data Ascii: c8-B{0%{transform:scale(.6) rotate(6deg)}25%{transform:scale(.6) rotate(-6deg)}50%{transform:scale(.6) rotate(12deg)}75%{transform:scale(.6) rotate(-3deg)}100%{transform:scale(.6) rotate(0deg)}}@keyframes xrvlesl-B{100%{bottom:0;opacity:0}}@keyframes xsjy
2024-05-24 06:27:41 UTC	16384	IN	Data Raw: 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 29 7d 2e 78 6d 71 6c 69 77 62 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 2e 78 6d 72 30 36 6e 71 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 73 6f 6c 69 64 20 31 70 78 20 76 61 72 28 2d 2d 77 61 73 68 29 7d 2e 78 6e 34 36 34 6c 31 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 61 73 65 2d 62 6c 75 65 29 7d 2e 78 6e 6e 74 36 69 69 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 61 73 65 2d 62 6c 75 65 29 7d 2e 78 6e 6f 63 34 39 65 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 73 6f 6c 69 64 7d 2e 78 6f 30 37 6c 71 6a 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 69 6e 73 65 74 20 Data Ascii: x solid var(--always-white)}.xmqliwb{text-decoration:line-through}.xmr06nq{border-top:solid 1px var(--wash)}.xn464l1{border-top:2px solid var(--base-blue)}.xnnt6ii{outline:2px solid var(--base-blue)}.xnoc49e{border-top:solid}.xo07lqj{border-top:1px inset
2024-05-24 06:27:41 UTC	16384	IN	Data Raw: 2d 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 74 65 78 74 29 7d 2e 78 31 33 32 71 34 77 62 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 7d 2e 78 31 33 33 71 75 34 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 7d 2e 78 31 33 33 72 33 36 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 34 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 78 31 33 34 34 6f 74 71 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 6d 65 6e 75 2d 69 74 65 6d 2d 62 61 73 65 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 29 7d 2e 78 31 33 34 64 62 6c 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 32 31 70 78 7d 2e 78 31 33 34 67 7a 6d 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 Data Ascii: -section-header-text)}.x132q4wb{line-height:1.25}.x133qu4r{padding-left:1rem}.x133r36p{box-shadow:0 1px 4px var(--shadow-1)}.x1344otq{padding-left:var(--menu-item-base-padding-horizontal)}.x134dblt{border-top-right-radius:21px}.x134gzmr{border-top-right-r
2024-05-24 06:27:41 UTC	14884	IN	Data Raw: 31 38 64 30 72 34 38 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 2e 78 31 38 65 62 64 72 69 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 30 73 7d 2e 78 31 38 66 36 67 33 7a 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 2e 78 31 38 66 39 63 66 39 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 36 33 65 65 36 7d 2e 78 31 38 66 6e 32 6a 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 6e 2d 64 61 72 6b 29 7d 2e 78 31 38 67 33 68 30 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 2e 32 35 70 78 7d 2e 78 31 38 68 6c 33 37 36 7b 66 6c 65 78 2d 67 Data Ascii: 18d0r48{background-size:cover}.x18ebdri{animation-duration:10s}.x18f6g3z{border-bottom-left-radius:30px}.x18f9cf9{background-color:#763ee6}.x18fn2jl{background-color:var(--secondary-button-background-on-dark)}.x18g3h0w{margin-right:4.25px}.x18hl376{flex-g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50709	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	599	OUT	GET /rsrc.php/v3/yE/r/ScCOyQO1RkJ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: aMiU5vWTRk9ho0KTKR5pGg== Expires: Wed, 21 May 2025 22:09:15 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: Yo4tzeDFbDi4ZyT16he8s9G3TLAmdyYI8FYp1FjrnHSpmnmCSkCbUI2DTxalOYSwY87q3+OQnQmEdSHWDgkEaA== Date: Fri, 24 May 2024 06:27:40 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=6, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 277636
2024-05-24 06:27:40 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-24 06:27:40 UTC	15859	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 6e Data Ascii: /FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listen
2024-05-24 06:27:40 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 61 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 22 72 65 74 75 72 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 72 65 74 75 72 6e 22 2c 61 29 7d 3b 62 2e 63 72 65 61 74 65 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 Data Ascii: this._invoke("throw",a)};e.prototype["return"]=function(a){return this._invoke("return",a)};b.createClass=function(){function a(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1;d.configurable=!0;"value"in d&&(d.writable=!0);Objec
2024-05-24 06:27:40 UTC	16384	IN	Data Raw: 6e 74 20 23 22 2b 61 2b 22 3b 20 25 73 22 3b 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 64 2b 3d 22 20 50 61 72 61 6d 73 3a 20 22 2b 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 25 73 22 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 29 3b 61 3d 28 68 7c 7c 28 68 3d 63 28 22 45 6e 76 22 29 29 29 2e 73 68 6f 77 5f 69 6e 76 61 72 69 61 6e 74 5f 64 65 63 6f 64 65 72 3d 3d 3d 21 30 3f 22 76 69 73 69 74 20 22 2b 6a 28 61 2c 62 29 2b 22 20 74 6f 20 73 65 65 20 74 68 65 20 66 75 6c 6c 20 6d 65 73 73 61 67 65 2e 22 3a 22 22 3b 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 64 2c 64 65 63 6f 64 65 72 4c 69 6e 6b 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 61 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 72 6e 61 6c 66 62 2e Data Ascii: nt #"+a+"; %s";b.length>0&&(d+=" Params: "+b.map(function(a){return"%s"}).join(", "));a=(h\|\|(h=c("Env"))).show_invariant_decoder===!0?"visit "+j(a,b)+" to see the full message.":"";return{message:d,decoderLink:a}}function j(a,b){a="https://www.internalfb.
2024-05-24 06:27:41 UTC	16384	IN	Data Raw: 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 5f 22 2b 28 63 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 74 79 70 65 6f 66 20 63 29 2c 65 2e 6e 61 6d 65 3d 66 7d 63 61 74 63 68 28 61 29 7b 7d 74 72 79 7b 67 3d 63 3d 3d 3d 6e 75 6c 6c 7c 7c 63 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 63 2e 73 74 61 63 6b 3b 28 74 79 70 65 6f 66 20 67 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 67 3d 3d 3d 22 22 29 26 26 28 67 3d 65 2e 73 74 61 63 6b 29 3b 28 74 79 70 65 6f 66 20 67 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 67 3d 3d 3d 22 22 29 26 26 28 67 3d 68 28 22 22 29 2e 73 74 61 63 6b 29 3b 65 2e 73 74 61 63 6b 3d 65 2e 6e 61 6d 65 2b 22 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2b 22 5c 6e 22 2b 67 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 73 6c 69 63 65 28 31 29 2e Data Ascii: handledRejection_"+(c===null?"null":typeof c),e.name=f}catch(a){}try{g=c===null\|\|c===void 0?void 0:c.stack;(typeof g!=="string"\|\|g==="")&&(g=e.stack);(typeof g!=="string"\|\|g==="")&&(g=h("").stack);e.stack=e.name+": "+e.message+"\n"+g.split("\n").slice(1).
2024-05-24 06:27:41 UTC	1500	IN	Data Raw: 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 31 5b 61 5d 3b 63 21 3d 3d 22 70 65 72 73 69 73 74 65 6e 74 22 26 26 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 32 28 61 29 3b 69 66 28 63 21 3d 3d 22 65 76 65 6e 74 22 29 7b 76 61 72 20 64 3b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 66 3d 6e 65 77 20 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 67 3d 31 3b 67 3c 65 3b 67 2b 2b 29 66 5b 67 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 67 5d 3b 72 65 74 75 72 6e 28 64 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 6f 6c 64 45 76 65 6e 74 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 64 2c 5b 74 68 69 73 2c 61 5d 2e 63 6f 6e 63 61 74 28 66 29 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 Data Ascii: is.$ArbiterEventHolder1[a];c!=="persistent"&&this.$ArbiterEventHolder2(a);if(c!=="event"){var d;for(var e=arguments.length,f=new Array(e>1?e-1:0),g=1;g<e;g++)f[g-1]=arguments[g];return(d=b.prototype.holdEvent).call.apply(d,[this,a].concat(f))}return void
2024-05-24 06:27:41 UTC	14884	IN	Data Raw: 74 22 3a 6e 65 77 20 4d 61 70 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 6e 2e 61 64 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 6e 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 2c 6d 2e 69 6e 66 6f 72 6d 28 68 2c 61 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 6f 2e 61 64 64 28 70 28 61 2c 62 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 2c 63 29 7b 6d 2e 69 6e 66 6f 72 6d 28 70 28 61 2c 62 29 2c 63 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 6d 2e 69 6e 66 6f 72 6d 28 6a 2c 61 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 72 65 74 75 72 6e 20 6d 2e 73 75 62 73 63 72 69 62 65 28 68 2c 66 75 6e 63 74 69 Data Ascii: t":new Map()}}function d(a){n.add(a)}function e(a){n["delete"](a),m.inform(h,a,"persistent")}function f(a,b){o.add(p(a,b))}function q(a,b,c){m.inform(p(a,b),c,"persistent")}function r(a){m.inform(j,a,"persistent")}function s(a){return m.subscribe(h,functi
2024-05-24 06:27:41 UTC	16384	IN	Data Raw: 66 5b 30 5d 3b 66 3d 66 5b 31 5d 3b 68 5b 69 5d 3d 66 7d 72 65 74 75 72 6e 7b 73 65 74 50 72 6f 70 73 3a 62 2c 73 74 72 69 6e 67 50 72 6f 70 73 3a 67 2c 76 65 63 74 6f 72 50 72 6f 70 73 3a 68 7d 7d 3b 61 2e 63 6f 6d 62 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3b 61 21 3d 6e 75 6c 6c 26 26 62 21 3d 6e 75 6c 6c 3f 28 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 62 2e 73 74 72 69 6e 67 50 72 6f 70 73 2c 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 29 2c 61 2e 73 65 74 50 72 6f 70 73 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 62 2e 73 65 74 50 72 6f 70 73 2c 61 2e 73 65 74 50 72 6f 70 73 29 2c 63 3d 61 29 3a 61 21 3d 6e Data Ascii: f[0];f=f[1];h[i]=f}return{setProps:b,stringProps:g,vectorProps:h}};a.combine=function(a,b){var c;a!=null&&b!=null?(a.stringProps=babelHelpers["extends"]({},b.stringProps,a.stringProps),a.setProps=babelHelpers["extends"]({},b.setProps,a.setProps),c=a):a!=n
2024-05-24 06:27:41 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 52 61 77 51 75 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 63 28 22 55 72 69 4e 65 65 64 52 61 77 51 75 65 72 79 53 56 43 68 65 63 6b 65 72 22 29 2e 69 73 44 6f 6d 61 69 6e 4e 65 65 64 52 61 77 51 75 65 72 79 2c 63 28 22 50 48 50 51 75 65 72 79 53 65 72 69 61 6c 69 7a 65 72 4e 6f 45 6e 63 6f 64 69 6e 67 22 29 29 7d 3b 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 75 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 63 28 22 55 72 69 4e 65 65 64 52 61 77 51 75 65 72 79 53 56 43 68 65 63 6b 65 72 22 29 2e 69 73 44 6f 6d 61 69 6e 4e 65 65 64 52 61 77 51 75 65 Data Ascii: totype.toStringRawQuery.call(this,c("UriNeedRawQuerySVChecker").isDomainNeedRawQuery,c("PHPQuerySerializerNoEncoding"))};e.toStringPreserveQuery=function(){return a.prototype.toStringPreserveQuery.call(this,c("UriNeedRawQuerySVChecker").isDomainNeedRawQue
2024-05-24 06:27:41 UTC	14884	IN	Data Raw: 7b 6c 3d 61 3b 66 6f 72 28 61 3d 30 3b 61 3c 6b 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 6b 5b 61 5d 3b 62 28 6c 29 7d 6b 3d 5b 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 74 68 69 73 2e 24 31 3d 61 7d 76 61 72 20 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 31 3b 72 65 74 75 72 6e 20 61 7d 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 41 73 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 31 7d 3b 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 63 3d 74 68 69 73 2e 24 32 3b 64 28 22 4a 53 52 65 73 6f 75 72 63 65 45 76 65 6e 74 73 22 29 2e 6e 6f 74 69 66 79 Data Ascii: {l=a;for(a=0;a<k.length;a++){var b=k[a];b(l)}k=[]};function a(a){this.$1=a}var e=a.prototype;e.getModuleId=function(){var a=this.$1;return a};e.getModuleIdAsRef=function(){return this.$1};e.load=function(){var a=this,c=this.$2;d("JSResourceEvents").notify

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50710	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	852	OUT	GET /rsrc.php/v3isgV4/yh/l/en_GB/jYvrFIoXAhaqLMNyUMJiYTDwLy5ReOAtBpOcBc5tVZ0hQbpj00E0YU6NGwStGf3BZAkK9sYbxMj7GDYvatkvPhoOE7uP6vsv83liWdOEs54GVeDTWv3lRDyMd1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVRntr0ucTZxw3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	1983	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: hoh99SYYZuR5vfMumbhDgg== Expires: Sat, 24 May 2025 06:27:40 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: ivy5JBDpU+qN94As3fHWusnCS11vchxUCXekDg+u6EXVoQFBgvChBiuMUKQIaB5boWCDhp8Y2Tqp7NS6qAzGcw== Date: Fri, 24 May 2024 06:27:40 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=40, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1019455
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 55 74 69 6c 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 7c 7c 21 67 2e 63 61 6c 6c 28 61 2c 62 29 3f 6e 75 6c 6c 3a 61 5b 62 5d 7d 7d 76 61 72 20 68 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 57 65 61 6b 4d 61 70 28 29 3a 6e 65 77 20 4d 61 70 28 29 3b 66 75 6e Data Ascii: ;/FB_PKG_DELIM/__d("$InternalEnumUtils",[],(function(a,b,c,d,e,f){"use strict";var g=Object.prototype.hasOwnProperty;function a(a){return function(b){return b==null\|\|!g.call(a,b)?null:a[b]}}var h=typeof WeakMap==="function"?new WeakMap():new Map();fun
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 6f 32 22 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 22 78 73 38 33 6d 30 6b 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 78 31 71 75 67 68 69 62 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 78 61 74 32 34 63 72 22 2c 6d 61 72 67 69 6e 45 6e 64 3a 22 78 31 31 69 35 72 6e 6d 22 2c 6d 61 72 67 69 6e 53 74 61 72 74 3a 22 78 31 6d 68 38 67 30 72 22 2c 6d 61 72 67 69 6e 54 6f 70 3a 22 78 64 6a 32 36 36 72 22 2c 6d 69 6e 48 65 69 67 68 74 3a 22 78 32 6c 77 6e 31 6a 22 2c 6d 69 6e 57 69 64 74 68 3a 22 78 65 75 75 67 6c 69 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 31 38 64 39 69 36 39 22 2c 70 Data Ascii: o2",flexShrink:"xs83m0k",end:"xds687c",left:null,right:null,start:"x17qophe",justifyContent:"x1qughib",marginBottom:"xat24cr",marginEnd:"x11i5rnm",marginStart:"x1mh8g0r",marginTop:"xdj266r",minHeight:"x2lwn1j",minWidth:"xeuugli",paddingBottom:"x18d9i69",p
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 2c 65 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 6e 75 6c 6c 3a 64 3b 64 3d 62 2e 64 65 74 61 63 68 65 64 3b 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 64 3b 76 61 72 20 66 3d 62 2e 64 65 74 61 63 68 65 64 44 65 66 61 75 6c 74 56 61 6c 75 65 3b 66 3d 66 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 66 3b 62 2e 64 65 74 61 63 68 65 64 50 61 67 65 4f 66 66 73 65 74 73 3b 76 61 72 20 67 3d 62 2e 64 69 73 61 62 6c 65 4e 61 76 69 67 61 74 69 6f 6e 53 63 72 6f 6c 6c 52 65 73 65 74 2c 68 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 67 3b 67 3d 62 2e 68 69 64 64 65 6e 57 68 65 6e 44 65 74 61 63 68 65 64 3b 67 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 67 3b 76 61 72 20 73 3d 62 2e 6d 61 69 6e 74 61 69 6e 53 63 72 6f 6c 6c 46 6f 72 43 6f 6e 74 65 78 74 2c 76 3d 73 3d 3d Data Ascii: ,e=d===void 0?null:d;d=b.detached;d=d===void 0?!1:d;var f=b.detachedDefaultValue;f=f===void 0?!1:f;b.detachedPageOffsets;var g=b.disableNavigationScrollReset,h=g===void 0?!1:g;g=b.hiddenWhenDetached;g=g===void 0?!1:g;var s=b.maintainScrollForContext,v=s==
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 62 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 7d 7d 7d 2c 5b 43 2c 65 2c 41 5d 29 3b 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 79 2e 63 75 72 72 65 6e 74 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 48 29 7b 71 2e 61 64 64 28 61 29 3b 69 66 28 21 43 29 7b 44 28 21 30 29 3b 72 3d 74 28 29 3b 69 66 28 72 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 70 2e 67 65 74 28 72 29 3b 62 26 26 62 28 21 30 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 71 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 7d 7d 65 6c 73 65 20 69 66 28 43 26 26 61 21 3d 3d 72 26 26 61 3d 3d 3d 74 28 29 29 7b 69 66 28 72 Data Ascii: ction(){return window.removeEventListener("scroll",b,{passive:!0})}}},[C,e,A]);l(function(){var a=y.current;if(a!=null)if(H){q.add(a);if(!C){D(!0);r=t();if(r!=null){var b=p.get(r);b&&b(!0)}}return function(){q["delete"](a)}}else if(C&&a!==r&&a===t()){if(r
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 63 74 22 3b 61 3d 7b 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 64 21 3d 6e 75 6c 6c 26 26 64 2e 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 28 61 2c 62 29 7d 2c 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 44 6f 75 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 64 21 3d 6e 75 6c 6c 26 26 64 2e 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 44 6f 75 62 6c 65 28 61 2c 62 29 7d 2c 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 49 Data Ascii: ct";a={addAnnotation:function(a,b){var d=c("vc-tracker").getCurrentNavigationVCTrace();d!=null&&d.addAnnotation(a,b)},addAnnotationDouble:function(a,b){var d=c("vc-tracker").getCurrentNavigationVCTrace();d!=null&&d.addAnnotationDouble(a,b)},addAnnotationI
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 67 61 74 69 6f 6e 56 43 52 65 70 6f 72 74 28 29 7d 2c 68 6f 6c 64 54 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 69 66 28 62 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 62 2e 6c 6f 63 6b 28 61 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 72 65 73 75 6d 65 54 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 62 21 3d 6e 75 6c 6c 26 26 62 2e 75 6e 6c 6f 63 6b 28 61 29 7d 2c 73 65 74 49 6e 69 74 Data Ascii: gationVCReport()},holdTrigger:function(a){var b=c("vc-tracker").getCurrentNavigationVCTrace();if(b!=null)return b.lock(a);else return function(){}},resumeTrigger:function(a){var b=c("vc-tracker").getCurrentNavigationVCTrace();b!=null&&b.unlock(a)},setInit
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 74 22 2c 22 43 6f 6d 65 74 48 65 72 6f 49 6e 74 65 72 61 63 74 69 6f 6e 43 6f 6e 74 65 78 74 50 61 73 73 74 68 72 6f 75 67 68 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 48 65 72 6f 49 6e 74 65 72 61 63 74 69 6f 6e 57 69 74 68 44 69 76 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 4c 61 79 65 72 4b 65 79 43 6f 6d 6d 61 6e 64 57 72 61 70 70 65 72 2e 72 65 61 63 74 22 2c 22 46 6f 63 75 73 52 65 67 69 6f 6e 2e 72 65 61 63 74 22 2c 22 48 69 64 64 65 6e 53 75 62 74 72 65 65 43 6f 6e 74 65 78 74 22 2c 22 63 72 3a 31 30 32 34 22 2c 22 63 72 3a 31 38 32 39 38 34 34 22 2c 22 66 6f 63 75 73 53 63 6f 70 65 51 75 65 72 69 65 73 22 2c 22 67 65 74 47 65 6f 41 6e 64 43 6f 6d 65 74 4d 6f 64 61 6c 43 6f 6d 70 61 74 69 62 6c 65 22 2c 22 72 65 61 63 74 22 2c 22 73 74 79 6c 65 78 Data Ascii: t","CometHeroInteractionContextPassthrough.react","CometHeroInteractionWithDiv.react","CometLayerKeyCommandWrapper.react","FocusRegion.react","HiddenSubtreeContext","cr:1024","cr:1829844","focusScopeQueries","getGeoAndCometModalCompatible","react","stylex
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 61 62 6c 65 22 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 21 3d 3d 76 6f 69 64 20 30 7d 29 2c 76 3d 63 28 22 75 73 65 43 6f 6d 65 74 56 69 73 75 61 6c 43 68 61 6e 67 65 54 72 61 63 6b 65 72 22 29 28 29 3b 71 3d 6a 2e 6a 73 78 73 28 6a 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 6a 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6c 2e 6d 61 73 6b 2c 21 71 26 26 6c 2e 6d 61 73 6b 4f 76 65 72 6c 61 79 29 7d 29 2c 6a 2e 6a 73 78 28 63 28 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 41 6e 63 68 6f 72 52 6f 6f 74 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 64 28 22 46 6f 63 75 73 52 65 67 69 6f 6e Data Ascii: able")(function(){return p!==void 0}),v=c("useCometVisualChangeTracker")();q=j.jsxs(j.Fragment,{children:[j.jsx("div",{className:(h\|\|(h=c("stylex")))(l.mask,!q&&l.maskOverlay)}),j.jsx(c("BaseContextualLayerAnchorRoot.react"),{children:j.jsx(d("FocusRegion
2024-05-24 06:27:40 UTC	1500	IN	Data Raw: 7b 68 69 64 64 65 6e 3a 74 2c 78 73 74 79 6c 65 3a 77 2c 63 68 69 6c 64 72 65 6e 3a 78 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 45 6e 74 72 79 50 6f 69 6e 74 50 6f 70 6f 76 65 72 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 28 68 3d 64 28 22 72 65 61 63 74 22 29 29 3b 62 3d 68 3b 76 61 72 20 6a 3d 62 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 2c 6b 3d 62 Data Ascii: {hidden:t,xstyle:w,children:x})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("BaseEntryPointPopoverContainer.react",["CometRelay","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d("react"));b=h;var j=b.useLayoutEffect,k=b
2024-05-24 06:27:41 UTC	1500	IN	Data Raw: 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 49 6e 74 65 72 61 63 74 69 6f 6e 56 43 22 2c 5b 22 49 6e 74 65 72 61 63 74 69 6f 6e 54 72 61 63 69 6e 67 4d 65 74 72 69 63 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 61 3d 63 28 22 49 6e 74 65 72 61 63 74 69 6f 6e 54 72 61 63 69 6e 67 4d 65 74 72 69 63 73 22 29 2e 67 65 74 28 61 29 3b 61 3d 61 26 26 61 2e 76 63 54 72 61 63 6b 65 72 3b 61 26 26 61 2e 61 64 64 4d 75 74 61 74 69 6f 6e 52 6f 6f 74 28 62 29 7d 67 2e 61 64 64 4d 75 74 61 74 69 6f 6e 52 6f 6f 74 46 6f 72 54 72 61 63 65 49 64 Data Ascii: from "+f.id+"]";g["default"]=a}),98);__d("CometInteractionVC",["InteractionTracingMetrics"],(function(a,b,c,d,e,f,g){"use strict";function a(a,b){a=c("InteractionTracingMetrics").get(a);a=a&&a.vcTracker;a&&a.addMutationRoot(b)}g.addMutationRootForTraceId

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50712	172.217.16.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:40 UTC	815	OUT	GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:40 UTC	831	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Date: Fri, 24 May 2024 06:27:40 GMT Expires: Fri, 24 May 2024 06:27:40 GMT Cache-Control: private, max-age=3600, stale-while-revalidate=3600 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 515 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 24-May-2024 06:42:40 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-24 06:27:40 UTC	515	IN	Data Raw: 5b 6e 75 6c 6c 2c 5b 5b 5b 22 31 30 37 34 33 30 33 33 38 22 5d 2c 5b 22 31 33 36 34 33 31 39 30 32 22 5d 2c 5b 22 31 37 30 37 33 37 30 37 36 22 5d 2c 5b 22 31 38 37 32 37 31 38 36 34 22 5d 2c 5b 22 32 31 38 30 34 38 34 38 32 32 30 22 5d 2c 5b 22 32 31 39 33 39 32 33 39 36 36 31 22 5d 2c 5b 22 32 32 30 35 39 34 31 36 34 37 35 22 5d 2c 5b 22 32 32 34 36 36 36 37 31 32 31 35 22 5d 2c 5b 22 37 30 34 37 22 5d 2c 5b 22 37 31 30 33 22 5d 2c 5b 22 39 34 31 36 36 36 31 37 22 5d 5d 5d 2c 5b 5b 5b 22 31 30 37 34 33 30 33 33 38 22 2c 31 5d 2c 5b 22 31 33 36 34 33 31 39 30 32 22 2c 31 5d 2c 5b 22 31 37 30 37 33 37 30 37 36 22 2c 31 5d 2c 5b 22 31 38 37 32 37 31 38 36 34 22 2c 31 5d 2c 5b 22 32 31 38 30 34 38 34 38 32 32 30 22 2c 31 5d 2c 5b 22 32 31 39 33 39 32 33 39 Data Ascii: [null,[[["107430338"],["136431902"],["170737076"],["187271864"],["21804848220"],["21939239661"],["22059416475"],["22466671215"],["7047"],["7103"],["94166617"]]],[[["107430338",1],["136431902",1],["170737076",1],["187271864",1],["21804848220",1],["21939239

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50720	52.46.155.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:41 UTC	466	OUT	GET /ecm3?id=RX-b0419578-1025-453b-9458-3b49bf185e5c-003&ex=rhythmone.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:41 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 24 May 2024 06:27:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 0RYGMFARWKMXRER41ZGF Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-24 06:27:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50716	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:41 UTC	2129	OUT	GET /gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1498574255&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=6530A801-8E95-4A46-AFE0-81F686DEE018&nel=1&eid=44752052%2C95322027%2C95323893%2C95331589%2C95332046&dt=1716532059227&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D171653201 [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:41 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:41 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	50719	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:41 UTC	721	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=154908708357560&ev=PageView&dl=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&rl=&if=false&ts=1716532056157&sw=1280&sh=1024&v=2.9.156&r=stable&ec=1&o=4126&fbp=fb.1.1716532015327.1074392237&ler=empty&cdl=API_unavailable&it=1716532012154&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:41 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 06:27:41 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	50721	18.202.254.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:41 UTC	944	OUT	GET /merge?pid=92&3pid=4426393169609033625&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F579%2F1246%2F5%2F4.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; _ljtrtb_80=LWKAUNHL-D-BFYD; ljtrtb=eJyrVrIwULJS8gn3dgz18%2FDRddF1cot0UaoFAEwLBkw%3D; _ljtrtb_58=7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:41 UTC	1191	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:41 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_58=7F542745-2D60-41EB-9A96-52B90C82DF34; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LWKAUNHL-D-BFYD; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjK1ULJSMnczNTEyNzHVNXIxM9A1MXR10rV0tDTTNTVysjRwtjBycTM2UdJRsjAAqvUJ93YM9fPw0XXRdXKLdFGqBQD%2BVA90; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:41 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_92=4426393169609033625; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:41 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; Path=/; Domain=.lijit.com; Expires=Sat, 24 May 2025 06:27:41 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id5-sync.com/c/579/1246/5/4.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	50722	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:41 UTC	610	OUT	GET /rsrc.php/v3iZ5G4/yu/l/en_GB/PsMWZhnzbaR.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:42 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: abdjLmh0cnLGKAA58ItZog== Expires: Sat, 24 May 2025 06:27:42 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: T4gyKRghbDyMGsjc9RiJvTlJY9BEbaMp2dOyYysi9ji5LpBMwJrW6O17hWvEZ4XdN/+U6CTNjbznuTEHydAHqQ== Date: Fri, 24 May 2024 06:27:42 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3414, tp=-1, tpl=-1, uplat=53, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 998825
2024-05-24 06:27:42 UTC	173	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 63 74 69 76 65 46 6f 63 75 73 52 65 67 69 6f 6e 55 74 69 6c 73 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 3b 63 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 39 38 29 Data Ascii: ;/FB_PKG_DELIM/__d("ActiveFocusRegionUtilsContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);c=b;g["default"]=c}),98)
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 3b 0a 5f 5f 64 28 22 48 65 72 6f 54 72 61 63 69 6e 67 43 6f 72 65 43 6f 6e 66 69 67 22 2c 5b 22 63 72 3a 38 39 30 37 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 28 22 63 72 3a 38 39 30 37 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 48 65 72 6f 54 72 61 63 69 6e 67 43 6f 72 65 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 5b 22 63 72 3a 38 39 30 38 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 28 22 63 72 3a 38 39 30 38 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 48 65 72 6f 49 6e 74 65 72 61 63 74 69 6f 6e 43 6f 6e 74 65 Data Ascii: ;__d("HeroTracingCoreConfig",["cr:8907"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=b("cr:8907")}),98);__d("HeroTracingCoreDependencies",["cr:8908"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=b("cr:8908")}),98);__d("HeroInteractionConte
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 68 7c 7c 28 68 3d 64 28 22 72 65 61 63 74 22 29 29 3b 62 3d 68 3b 76 61 72 20 69 3d 62 2e 75 73 65 43 6f 6e 74 65 78 74 2c 6a 3d 62 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 65 3d 61 2e 68 6f 6c 64 2c 66 3d 69 28 64 28 22 48 65 72 6f 49 6e 74 65 72 61 63 74 69 6f 6e 43 6f 6e 74 65 78 74 22 29 2e 43 6f 6e 74 65 78 74 29 2c 67 3d 69 28 63 28 22 48 65 72 6f 49 6e 74 65 72 61 63 74 69 6f 6e 49 44 43 6f 6e 74 65 78 74 22 29 29 3b 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 26 26 67 21 3d 6e 75 6c 6c 29 7b 76 Data Ascii: ],(function(a,b,c,d,e,f,g){"use strict";var h;h\|\|(h=d("react"));b=h;var i=b.useContext,j=b.useLayoutEffect;function a(a){var b=a.description,e=a.hold,f=i(d("HeroInteractionContext").Context),g=i(c("HeroInteractionIDContext"));j(function(){if(e&&g!=null){v
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 28 22 52 65 6c 61 79 50 72 6f 66 69 6c 65 72 43 6f 6e 74 65 78 74 22 29 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 6b 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 7d 29 7d 29 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 48 65 72 6f 49 6e 74 65 72 61 63 74 69 6f 6e 43 6f 6e 74 65 78 74 50 61 73 73 74 68 72 6f 75 67 68 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 48 65 72 6f 50 65 6e 64 69 6e 67 50 6c 61 63 65 68 6f 6c 64 65 72 54 72 61 63 6b 65 72 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d Data Ascii: ("RelayProfilerContext").Provider,{value:k,children:b})})})})}a.displayName=a.name+" [from "+f.id+"]";a.displayName="HeroInteractionContextPassthrough";g["default"]=a}),98);__d("HeroPendingPlaceholderTracker",[],(function(a,b,c,d,e,f){"use strict";var g=
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 55 55 49 44 3d 61 3b 67 2e 63 72 65 61 74 65 54 68 65 6e 61 62 6c 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 53 74 61 62 6c 65 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 28 68 7c 7c 64 28 22 72 65 61 63 74 22 29 29 2e 75 73 65 52 65 66 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 69 28 6e 75 6c 6c 29 2c 63 3d 62 2e 63 75 72 72 65 6e 74 3b 69 66 28 63 3d 3d 3d 6e 75 6c 6c 29 7b 61 3d 61 28 29 3b 62 2e 63 75 72 72 65 6e 74 3d 7b 76 61 6c 75 65 3a 61 7d 3b 72 65 74 75 72 6e 20 61 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 63 2e 76 61 6c 75 65 7d 67 5b 22 64 65 66 61 75 Data Ascii: UUID=a;g.createThenableDescription=b}),98);__d("useStable",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=(h\|\|d("react")).useRef;function a(a){var b=i(null),c=b.current;if(c===null){a=a();b.current={value:a};return a}else return c.value}g["defau
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 63 6b 54 72 61 63 6b 65 72 2e 72 65 61 63 74 22 29 2c 7b 75 75 69 64 3a 71 7d 29 5d 7d 29 2c 73 75 73 70 65 6e 73 65 43 61 6c 6c 62 61 63 6b 3a 62 2c 75 6e 73 74 61 62 6c 65 5f 61 76 6f 69 64 54 68 69 73 46 61 6c 6c 62 61 63 6b 3a 67 2c 63 68 69 6c 64 72 65 6e 3a 5b 69 2e 6a 73 78 28 6e 2c 7b 63 62 3a 74 7d 29 2c 61 5d 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 48 65 72 6f 50 6c 61 63 65 68 6f 6c 64 65 72 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 68 65 72 6f 2d 74 72 61 63 69 6e 67 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 5b 22 48 65 72 6f 43 6f 6d 70 6f 6e 65 6e 74 2e 72 65 61 63 Data Ascii: ckTracker.react"),{uuid:q})]}),suspenseCallback:b,unstable_avoidThisFallback:g,children:[i.jsx(n,{cb:t}),a]})}a.displayName=a.name+" [from "+f.id+"]";a.displayName="HeroPlaceholder";g["default"]=a}),98);__d("hero-tracing-placeholder",["HeroComponent.reac
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 7d 2c 69 6e 74 5f 61 72 72 61 79 3a 7b 7d 2c 64 6f 75 62 6c 65 5f 61 72 72 61 79 3a 7b 7d 2c 62 6f 6f 6c 5f 61 72 72 61 79 3a 7b 7d 7d 2c 6c 3d 7b 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 3a 30 7d 2c 6d 3d 31 65 34 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 4d 61 70 28 6a 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 28 61 29 7d 29 7d 2c 64 3d 7b 61 64 64 47 6c 6f 62 61 6c 4d 65 74 61 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 65 3b 63 28 22 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 73 22 29 28 6b 2c 7b 22 69 6e 74 22 3a 28 65 3d 7b 7d 2c 65 5b 61 5d 3d 62 Data Ascii: },int_array:{},double_array:{},bool_array:{}},l={interactionCount:0},m=1e4;a=function(){var a=new Map(j),b=function(b){a.forEach(function(a){b(a)})},d={addGlobalMetadata:function(a,b){if(typeof b==="number"){var e;c("addAnnotations")(k,{"int":(e={},e[a]=b
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 67 65 74 28 61 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 61 2e 68 65 72 6f 42 6f 6f 74 6c 6f 61 64 73 2e 70 75 73 68 28 62 29 7d 2c 61 64 64 48 65 72 6f 52 65 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 69 2e 67 65 74 28 61 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 61 2e 68 65 72 6f 52 65 6c 61 79 2e 70 75 73 68 28 62 29 7d 2c 61 64 64 48 65 72 6f 50 65 6e 64 69 6e 67 50 6c 61 63 65 68 6f 6c 64 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 69 2e 67 65 74 28 61 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 61 2e 70 65 6e 64 69 6e 67 50 6c 61 63 65 68 6f 6c 64 65 72 73 3d 61 2e 70 65 6e 64 69 6e 67 50 6c 61 63 65 68 6f 6c 64 65 72 73 2e 63 6f 6e 63 61 74 28 62 29 7d 2c 61 64 64 48 69 64 64 65 6e 54 69 6d 69 6e 67 3a 66 75 Data Ascii: get(a);if(!a)return;a.heroBootloads.push(b)},addHeroRelay:function(a,b){a=i.get(a);if(!a)return;a.heroRelay.push(b)},addHeroPendingPlaceholders:function(a,b){a=i.get(a);if(!a)return;a.pendingPlaceholders=a.pendingPlaceholders.concat(b)},addHiddenTiming:fu
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 69 2e 67 65 74 28 61 29 3b 69 66 28 61 29 7b 63 28 22 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 73 22 29 28 61 2e 61 6e 6e 6f 74 61 74 69 6f 6e 73 2c 7b 62 6f 6f 6c 3a 28 61 3d 7b 7d 2c 61 5b 62 5d 3d 64 2c 61 29 7d 29 7d 7d 2c 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 53 74 72 69 6e 67 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 61 3d 69 2e 67 65 74 28 61 29 3b 69 66 28 61 29 7b 63 28 22 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 73 22 29 28 61 2e 61 6e 6e 6f 74 61 74 69 6f 6e 73 2c 7b 73 74 72 69 6e 67 5f 61 72 72 61 79 3a 28 61 3d 7b 7d 2c 61 5b 62 5d 3d 64 2c 61 29 7d 29 7d 7d 2c 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 49 6e 74 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 61 3d 69 2e 67 65 74 28 61 29 3b 69 66 28 61 29 Data Ascii: i.get(a);if(a){c("addAnnotations")(a.annotations,{bool:(a={},a[b]=d,a)})}},addAnnotationStringArray:function(a,b,d){a=i.get(a);if(a){c("addAnnotations")(a.annotations,{string_array:(a={},a[b]=d,a)})}},addAnnotationIntArray:function(a,b,d){a=i.get(a);if(a)
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 69 66 28 21 61 29 72 65 74 75 72 6e 3b 61 2e 74 61 67 53 65 74 5b 62 5d 7c 7c 28 61 2e 74 61 67 53 65 74 5b 62 5d 3d 6e 65 77 20 53 65 74 28 29 29 3b 61 2e 74 61 67 53 65 74 5b 62 5d 2e 61 64 64 28 63 29 7d 2c 61 64 64 54 72 61 63 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 7b 61 6e 6e 6f 74 61 74 69 6f 6e 73 3a 7b 73 74 72 69 6e 67 3a 7b 7d 2c 22 69 6e 74 22 3a 7b 7d 2c 22 64 6f 75 62 6c 65 22 3a 7b 7d 2c 62 6f 6f 6c 3a 7b 7d 2c 73 74 72 69 6e 67 5f 61 72 72 61 79 3a 7b 7d 2c 69 6e 74 5f 61 72 72 61 79 3a 7b 7d 2c 64 6f 75 62 6c 65 5f 61 72 72 61 79 3a 7b 7d 2c 62 6f 6f 6c 5f 61 72 72 61 79 3a 7b 7d 7d 2c 63 6f 6d 6d 69 74 53 65 74 3a 6e 65 77 20 53 65 74 28 29 2c 66 61 63 74 6f 72 79 54 69 6d 69 6e 67 Data Ascii: if(!a)return;a.tagSet[b]\|\|(a.tagSet[b]=new Set());a.tagSet[b].add(c)},addTracedInteraction:function(a,b,c){b={annotations:{string:{},"int":{},"double":{},bool:{},string_array:{},int_array:{},double_array:{},bool_array:{}},commitSet:new Set(),factoryTiming

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	50723	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	610	OUT	GET /rsrc.php/v3i9144/yl/l/en_GB/2Il807KwZkF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:42 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 0pXknqO3i7FYpAqfoAv/uA== Expires: Sat, 24 May 2025 06:27:42 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: L7k+eXAEJ/gT+R+aHRxxjEdwmTNtkIXXV9Sg8D6CQl9pAG6P2fs7PMDVL4SZWq8Q9ZL2upkLAwuLNrZ+igvlGg== Date: Fri, 24 May 2024 06:27:42 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3414, tp=-1, tpl=-1, uplat=47, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 531770
2024-05-24 06:27:42 UTC	209	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 4c 79 6e 78 47 65 6e 65 72 61 74 69 6f 6e 22 2c 5b 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 2c 22 55 52 49 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 2c 69 3d 6e 65 77 28 68 7c 7c 28 68 3d 63 28 22 55 52 49 22 29 29 29 28 63 28 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 29 2e 6c 69 6e 6b 73 68 69 6d 5f 70 61 74 68 29 2e 73 65 74 44 6f 6d 61 69 6e 28 63 28 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 29 2e 6c 69 6e 6b Data Ascii: ;/FB_PKG_DELIM/__d("LynxGeneration",["LinkshimHandlerConfig","URI"],(function(a,b,c,d,e,f,g){var h,i=new(h\|\|(h=c("URI")))(c("LinkshimHandlerConfig").linkshim_path).setDomain(c("LinkshimHandlerConfig").link
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 73 68 69 6d 5f 68 6f 73 74 29 2c 6a 3d 7b 67 65 74 53 68 69 6d 55 52 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 68 7c 7c 28 68 3d 63 28 22 55 52 49 22 29 29 29 28 69 29 7d 2c 67 65 74 4c 79 6e 78 55 52 49 50 72 6f 74 6f 63 6f 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 29 2e 61 6c 77 61 79 73 5f 75 73 65 5f 68 74 74 70 73 3f 22 68 74 74 70 73 22 3a 61 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 22 68 74 74 70 22 3f 22 68 74 74 70 22 3a 22 68 74 74 70 73 22 7d 2c 67 65 74 53 68 69 6d 6d 65 64 48 72 65 66 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 76 61 72 20 65 3b 61 3d 6e 65 77 28 68 7c 7c 28 68 3d 63 28 22 55 52 49 22 Data Ascii: shim_host),j={getShimURI:function(){return new(h\|\|(h=c("URI")))(i)},getLynxURIProtocol:function(a){return c("LinkshimHandlerConfig").always_use_https?"https":a.getProtocol()==="http"?"http":"https"},getShimmedHref:function(a,b,d){var e;a=new(h\|\|(h=c("URI"
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 74 28 29 3b 68 28 64 2c 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 22 22 2c 63 2e 74 61 72 67 65 74 29 2c 21 30 29 3b 62 72 65 61 6b 7d 7d 3b 62 28 22 63 72 3a 35 36 36 32 22 29 2e 6c 69 73 74 65 6e 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 22 63 6c 69 63 6b 22 2c 61 29 7d 2c 67 65 74 4d 61 79 62 65 4e 6f 6e 46 42 4c 69 6e 6b 52 65 66 65 72 72 65 72 4a 53 4d 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 62 28 22 50 61 72 65 6e 74 22 29 2e 62 79 41 74 74 72 69 62 75 74 65 28 61 2c 22 64 61 74 61 2d 6c 6e 66 62 2d 6d 6f 64 65 22 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 41 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 63 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 6e 66 62 2d 6d 6f 64 65 22 29 3b Data Ascii: t();h(d,window.open("",c.target),!0);break}};b("cr:5662").listen(document.body,"click",a)},getMaybeNonFBLinkReferrerJSMode:function(a){a=b("Parent").byAttribute(a,"data-lnfb-mode");if(a instanceof HTMLAnchorElement){var c=a.getAttribute("data-lnfb-mode");
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 22 3a 6f 2c 22 64 61 74 61 2d 6c 6e 66 62 2d 6d 6f 64 65 22 3a 70 7d 29 29 7d 3b 72 65 74 75 72 6e 20 65 7d 28 69 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 41 62 73 74 72 61 63 74 4c 69 6e 6b 4c 79 6e 78 4d 6f 64 65 22 2c 5b 22 46 42 4c 79 6e 78 22 2c 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 5b 63 28 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 29 2e 77 77 77 5f 73 61 66 65 5f 6a 73 5f 6d 6f 64 65 2c 6e 75 6c Data Ascii: ta-lynx-mode":o,"data-lnfb-mode":p}))};return e}(i.Component);g["default"]=a}),98);__d("AbstractLinkLynxMode",["FBLynx","LinkshimHandlerConfig"],(function(a,b,c,d,e,f,g){"use strict";function a(a){return a?[c("LinkshimHandlerConfig").www_safe_js_mode,nul
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 74 65 78 74 3b 72 65 74 75 72 6e 7b 61 6e 63 68 6f 72 52 6f 6f 74 52 65 66 43 6f 6e 74 65 78 74 3a 64 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f 6e 74 65 78 74 3a 65 2c 63 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 50 72 6f 70 73 3a 66 2c 73 63 72 6f 6c 6c 61 62 6c 65 41 72 65 61 43 6f 6e 74 65 78 74 3a 67 7d 7d 72 65 74 75 72 6e 20 61 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 63 28 22 75 6e 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 29 28 62 2e 74 79 70 65 2b 22 20 69 73 20 6e 6f 74 20 61 20 73 75 70 70 6f 72 74 65 64 20 61 63 74 69 6f 6e 20 74 79 70 65 22 2c 22 63 6f 6d 65 74 5f 75 69 22 29 7d 7d 67 2e 42 61 73 65 43 61 6c 6c 6f 75 74 52 65 64 75 63 65 72 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 43 61 6c 6c 6f 75 74 4d 61 Data Ascii: text;return{anchorRootRefContext:d,animationContext:e,contextualLayerProps:f,scrollableAreaContext:g}}return a;default:throw c("unrecoverableViolation")(b.type+" is not a supported action type","comet_ui")}}g.BaseCalloutReducer=a}),98);__d("BaseCalloutMa
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 66 61 6c 6c 62 61 63 6b 2c 67 3d 61 2e 6c 6f 61 64 65 64 45 6e 74 72 79 50 6f 69 6e 74 2c 68 3d 61 2e 6f 74 68 65 72 50 72 6f 70 73 2c 6c 3d 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 43 6f 6d 70 6f 6e 65 6e 74 3b 6c 3d 6c 3d 3d 3d 76 6f 69 64 20 30 3f 63 28 22 43 6f 6d 65 74 50 6c 61 63 65 68 6f 6c 64 65 72 2e 72 65 61 63 74 22 29 3a 6c 3b 76 61 72 20 6d 3d 61 2e 70 72 65 6c 6f 61 64 50 61 72 61 6d 73 3b 61 3d 61 2e 75 73 65 50 6c 61 63 65 68 6f 6c 64 65 72 3b 61 3d 61 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 61 3b 65 3d 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 75 73 65 45 6e 74 72 79 50 6f 69 6e 74 4c 6f 61 64 65 72 28 65 2c 62 29 3b 76 61 72 20 6e 3d 65 5b 30 5d 2c 6f 3d 65 5b 31 5d 2c 70 3d 65 5b 32 5d 2c 71 3d 28 62 3d 6e 29 21 3d 6e 75 6c 6c 3f 62 Data Ascii: fallback,g=a.loadedEntryPoint,h=a.otherProps,l=a.placeholderComponent;l=l===void 0?c("CometPlaceholder.react"):l;var m=a.preloadParams;a=a.usePlaceholder;a=a===void 0?!0:a;e=d("CometRelay").useEntryPointLoader(e,b);var n=e[0],o=e[1],p=e[2],q=(b=n)!=null?b
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 78 31 33 76 69 66 76 79 22 2c 77 69 64 74 68 3a 22 78 31 77 6b 72 39 32 69 22 2c 24 24 63 73 73 3a 21 30 7d 2c 72 6f 6f 74 3a 7b 64 69 73 70 6c 61 79 3a 22 78 31 72 67 35 6f 68 75 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 6e 32 6f 6e 72 36 22 2c 24 24 63 73 73 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 61 2e 64 69 73 61 62 6c 65 64 3b 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 64 3b 76 61 72 20 65 3d 61 2e 68 65 69 67 68 74 2c 66 3d 61 2e 70 75 6c 73 65 43 6f 6c 6f 72 2c 67 3d 61 2e 72 61 64 69 69 2c 69 3d 61 2e 76 69 73 69 62 6c 65 3b 69 3d 69 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 69 3b 76 61 72 20 6b 3d 61 2e 77 69 64 74 68 3b 61 3d 61 2e 78 73 74 79 6c 65 3b 66 3d 6e 28 6b Data Ascii: x13vifvy",width:"x1wkr92i",$$css:!0},root:{display:"x1rg5ohu",position:"x1n2onr6",$$css:!0}};function a(a){var b=a.children,d=a.disabled;d=d===void 0?!1:d;var e=a.height,f=a.pulseColor,g=a.radii,i=a.visible;i=i===void 0?!0:i;var k=a.width;a=a.xstyle;f=n(k
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 22 3a 62 2b 22 70 78 22 2c 22 2d 2d 42 61 73 65 50 75 6c 73 65 45 66 66 65 63 74 5f 70 75 6c 73 65 43 6f 6c 6f 72 22 3a 22 22 2b 63 2c 22 2d 2d 42 61 73 65 50 75 6c 73 65 45 66 66 65 63 74 5f 77 69 64 74 68 22 3a 61 2b 22 70 78 22 7d 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 54 6f 61 73 74 65 72 53 74 61 74 65 4d 61 6e 61 67 65 72 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 54 6f 61 73 74 65 72 53 74 61 74 65 4d 61 6e 61 67 65 72 22 2c 22 42 61 73 65 54 6f 61 73 74 65 72 53 74 61 74 65 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 Data Ascii: ":b+"px","--BasePulseEffect_pulseColor":""+c,"--BasePulseEffect_width":a+"px"}}g["default"]=a}),98);__d("BaseToasterStateManagerProvider.react",["BaseToasterStateManager","BaseToasterStateManagerContext.react","react"],(function(a,b,c,d,e,f,g){"use stric
2024-05-24 06:27:42 UTC	551	IN	Data Raw: 3d 62 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 29 28 7b 4c 4f 47 49 4e 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 4f 50 45 4e 5f 41 50 50 3a 22 6f 70 65 6e 5f 61 70 70 5f 75 70 73 65 6c 6c 22 2c 52 45 45 4c 53 5f 54 4f 50 5f 50 49 4c 4c 53 3a 22 72 65 65 6c 73 5f 74 6f 70 5f 70 69 6c 6c 73 22 2c 52 45 4c 41 54 45 44 5f 43 4f 4e 54 45 4e 54 3a 22 72 65 6c 61 74 65 64 5f 63 6f 6e 74 65 6e 74 22 2c 53 41 56 45 44 5f 41 43 43 4f 55 4e 54 53 3a 22 73 61 76 65 64 5f 61 63 63 6f 75 6e 74 73 5f 75 70 73 65 6c 6c 22 2c 55 50 53 45 4c 4c 5f 54 52 49 47 47 45 52 3a 22 75 70 73 65 6c 6c 5f 74 72 69 67 67 65 72 22 7d 29 3b 63 3d 61 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 4c 6f 78 55 70 73 65 6c 6c 45 76 65 6e 74 Data Ascii: =b("$InternalEnum")({LOGIN:"login_upsell",OPEN_APP:"open_app_upsell",REELS_TOP_PILLS:"reels_top_pills",RELATED_CONTENT:"related_content",SAVED_ACCOUNTS:"saved_accounts_upsell",UPSELL_TRIGGER:"upsell_trigger"});c=a;f["default"]=c}),66);__d("LoxUpsellEvent
2024-05-24 06:27:42 UTC	1500	IN	Data Raw: 22 2c 22 4c 6f 78 55 70 73 65 6c 6c 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 28 68 7c 7c 64 28 22 72 65 61 63 74 22 29 29 2e 75 73 65 52 65 66 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3a 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2b 61 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 3d 63 28 22 43 6f 6d 65 74 54 69 6d 65 53 70 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 22 29 2e 67 65 74 50 61 74 68 49 6e 66 6f 28 29 3b 72 65 74 75 72 6e 20 66 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c Data Ascii: ","LoxUpsellEventFalcoEvent","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=(h\|\|d("react")).useRef;function j(a){return a==null?location.href:location.host+a}function k(a,b,d,e){var f=c("CometTimeSpentNavigation").getPathInfo();return f==null?null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	50727	174.137.133.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	626	OUT	GET /vtrack?i=yh0Mtlh8igo_0_0&event=fail&code=901 HTTP/1.1 Host: rtb2-useast.xaprio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:42 UTC	309	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:42 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store Accept-CH: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model Age: 0 Pragma: no-cache
2024-05-24 06:27:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	50729	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	1908	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=14251&t=1716532057&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=d2eec9ada756b716664cb494d6d320b3&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=17625862192&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb9540829a4d45051144&h=ec7c53f0f35a072aca055efd7eb28315f9d3d4fe&cpm=2&rtbbp=2&d9=0000&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&d4=[AVC_WFCYCLE]&d5=[AVC_TIMEPASS]&ofpr=2&d20=av&imid=d2eec9ada756b716664cb494d6d320b3_adsservngs2s7fbd5b645jx52_6763939_[AVC_WFCYCLE]&e=AdError&prbdres=901 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:42 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:42 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	50731	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	1899	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532060388&plt=2&asid=64f88b1414c8a3d08a098f79%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C65a1370997c7e0985f08ab5d&ofpr=%2C1%2C1%2C1.25&fpo=%2C%2C%2C&ri=%2C%2C%2C HTTP/1.1 Host: track1.aniview.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:42 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:42 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	50728	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	616	OUT	GET /vast-error?i=dxIO5kQ6FQo_0&err=901 HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:42 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:42 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store
2024-05-24 06:27:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	50730	216.219.92.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	1762	OUT	GET /error.vast.aspx?item=B3A5270B-FA4B-4DE5-9EA3-AF95C1766C2E&cc=US%2FNY%2F5128581&am-uid=c3f2dced77d84f53905889bf42173c38&device=28&ip=8.46.123.175&profile=10B16888-FCBF-4C9D-90ED-F70CACCE3929&zone=5B8111BB-02DA-4103-81F9-53B081CC927F&site=E21A6002-AB86-4476-809A-20FDC8F62012&rule=E96CA355-AA9D-4A25-B2E8-1CF5CF7CE2D1&requestId=9364a9b5-4d19-412f-a44e-10fce113bf5c&externalRqId=d2eec9ada756b716664cb494d6d320b3_adsservngs2s7fbd5b645jx52_6579a883a4f2db0d000b8bd9&inst=ADX-INTR-NYC-7&pxl=1&bidsc=2&page=pjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&hp=-208187538&size=Instream&adv=nike.com&dsp=C0FAA361-F00C-44C6-9A44-ABF9E334DB81&ts=638521288574104314&visnew=0&bt=3&carr=CenturyLink&devt=2&osfamily=9&isapp=0&make=Google&mod=Chrome&os=Windows&osv=10&adtype=1&extvisid=1716532025945-172031150014-000201-002-004790&crid=256464&extpubid=64db4ddc8904509d8303ce64&pvid=54c1c1eb-d9da-4f58-af79-ad789380524c&cet=7&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWe [TRUNCATED] Host: inv-nets-nyc-s1.admixer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: am-uid=c3f2dced77d84f53905889bf42173c38
2024-05-24 06:27:42 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:42 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Keep-Alive: timeout=25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.4	50734	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	819	OUT	POST /cdb?ptv=144&profileId=185&av=36&wv=8.48.0&cb=380085534 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 2226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=xBPAQV82Qk1WSHYlMkZ5SjdhUUV0b3NjTlh4bmo1TWg1dlc5dnJDcHFsSCUyQlNuRWZxd0UwZ1h1ZiUyRnpRd1RzJTJGM1IlMkZ6STdJQQ
2024-05-24 06:27:42 UTC	2226	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 33 33 32 32 64 37 66 61 36 63 64 66 37 62 32 22 2c 22 69 6d 70 69 64 22 3a 22 61 76 5f 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 2d 36 35 32 66 37 63 38 34 64 66 37 64 35 38 61 34 65 62 30 30 39 37 39 37 5f 34 36 22 2c 22 7a 6f 6e 65 69 64 22 3a 31 36 33 36 37 32 30 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 69 64 22 3a 6e Data Ascii: {"publisher":{"url":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage"},"slots":[{"slotid":"3322d7fa6cdf7b2","impid":"av_64ddec09ef5e241fc1061287-652f7c84df7d58a4eb009797_46","zoneid":1636720,"transactionid":n
2024-05-24 06:27:42 UTC	525	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:42 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com set-cookie: cto_bundle=sGqntV85eTJ3T3JuRlZBd0xWbjJpV3lkOHZJMDZZUHNRbCUyRkk4VmloNlg0dHNLSTglMkJVNEdiS1VLdndvUDFHcEh2Tm10Yg; expires=Wed, 18 Jun 2025 06:27:42 GMT; domain=criteo.com; secure; samesite=none; Partitioned vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.4	50735	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	607	OUT	POST /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive Content-Length: 3147 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:42 UTC	3147	OUT	Data Raw: 7b 22 62 69 64 73 22 3a 5b 7b 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 61 76 5f 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 2d 36 35 61 31 33 37 30 39 39 37 63 37 65 30 39 38 35 66 30 38 61 62 35 64 5f 34 39 22 2c 22 62 69 64 49 64 22 3a 22 33 35 34 34 65 39 66 31 64 36 37 64 39 35 36 22 2c 22 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 22 3a 22 33 34 38 64 30 30 39 36 63 35 32 63 37 62 36 22 2c 22 67 70 69 64 22 3a 22 2f 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 2f 36 35 30 30 30 36 31 62 33 31 37 61 65 63 61 63 30 62 30 36 34 62 33 34 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 75 62 49 64 22 3a 22 35 37 65 36 31 38 31 35 30 63 37 30 64 39 30 22 2c 22 63 6f 6e 74 65 78 74 22 Data Ascii: {"bids":[{"adUnitCode":"av_64ddec09ef5e241fc1061287-65a1370997c7e0985f08ab5d_49","bidId":"3544e9f1d67d956","bidderRequestId":"348d0096c52c7b6","gpid":"/64db4ddc8904509d8303ce64/6500061b317aecac0b064b34/pjnewsletter.com","pubId":"57e618150c70d90","context"
2024-05-24 06:27:42 UTC	489	IN	HTTP/1.1 200 OK access-control-allow-origin: https://pjnewsletter.com access-control-allow-headers: content-type, origin, referer, user-agent access-control-allow-credentials: true p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:42 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.4	50736	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	1158	OUT	GET /c/579/1246/5/4.gif?puid=ItUjALZH-23s9-wqRaSHYOyf&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#6; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|155#1716532058518#-1523889321#AAJTiE7MoGcAABTuYnJhWg\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|796#1716532060700#-139160899\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34
2024-05-24 06:27:42 UTC	1853	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|155#1716532058518#-1523889321#AAJTiE7MoGcAABTuYnJhWg\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|796#1716532060700#-139160899\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34\|1246#1716532062729#606548435; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Fri, 24-May-2024 06:32:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=579; Max-Age=300; Expires=Fri, 24-May-2024 06:32:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=4; Max-Age=300; Expires=Fri, 24-May-2024 06:32:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=5; Max-Age=300; Expires=Fri, 24-May-2024 06:32:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Fri, 24-May-2024 06:32:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 24 May 2024 06:27:42 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	50733	18.195.237.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	689	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1760 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:42 UTC	1760	OUT	Data Raw: 7b 22 69 64 22 3a 22 61 34 35 39 64 35 35 38 2d 35 61 31 33 2d 34 32 34 62 2d 62 37 34 65 2d 61 39 37 31 30 64 63 36 32 31 31 65 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 37 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 70 6a 6e Data Ascii: {"id":"a459d558-5a13-424b-b74e-a9710dc6211e","at":1,"cur":["USD"],"tmax":7000,"site":{"domain":"pjnewsletter.com","page":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","ref":null,"publisher":{"domain":"pjn
2024-05-24 06:27:42 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 814 Connection: close Set-Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121; Max-Age=2592000; Expires=Sun, 23 Jun 2024 06:27:42 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true
2024-05-24 06:27:42 UTC	814	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 6f 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4f 57 46 6b 4d 6d 45 35 4d 32 45 74 5a 44 52 6b 4d 43 30 30 4e 44 4d 77 4c 54 67 34 5a 54 63 74 4e 32 5a 6c 4d 7a 68 6c 59 7a 46 6b 4d Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://cm.g.doubleclick.net/pixel?google_nid=sharethrough_ob&gdpr=0&gdpr_consent=&google_hm=OWFkMmE5M2EtZDRkMC00NDMwLTg4ZTctN2ZlMzhlYzFkM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.4	50737	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	610	OUT	GET /rsrc.php/v3i4nn4/y1/l/en_GB/khfw_V4kOlp.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:42 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 9jfR1DomwmsMpvE+UpX6Tw== Expires: Fri, 23 May 2025 13:09:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: admMzuYg/Vwdz7HPCfV5svDfC6I5aaJdLuxSvsOzjp4Q20baBvc27oI87hS4FQR9FOwyT0S2MOY7tPvSniaxzA== Date: Fri, 24 May 2024 06:27:42 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3414, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 39683
2024-05-24 06:27:42 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-24 06:27:42 UTC	15824	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 65 65 4d 6f 72 65 45 78 70 61 6e 64 69 6e 67 55 74 69 6c 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 3b 77 68 69 6c 65 28 63 3e 3d 30 29 7b 69 66 28 61 2e 63 68 61 72 41 74 28 63 29 3d 3d 3d 22 20 22 7c 7c 61 2e 63 68 61 72 41 74 28 63 29 3d 3d 3d 22 5c 6e 22 29 62 72 65 61 6b 3b 63 2d 3d 31 7d 61 2e 63 68 61 72 41 74 28 62 29 21 3d 3d 22 5c 6e 22 3f 63 2b 3d 31 3a 63 3d 62 2b 31 3b 62 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 63 29 3b 61 3d 2f 5c 73 2f 3b 62 3d 62 2e 73 65 61 72 63 68 28 61 29 2b 63 2d 31 3b 72 65 74 75 72 Data Ascii: /FB_PKG_DELIM/__d("CometSeeMoreExpandingUtils",[],(function(a,b,c,d,e,f){"use strict";function g(a,b){var c=b;while(c>=0){if(a.charAt(c)===" "\|\|a.charAt(c)==="\n")break;c-=1}a.charAt(b)!=="\n"?c+=1:c=b+1;b=a.substring(c);a=/\s/;b=b.search(a)+c-1;retur
2024-05-24 06:27:42 UTC	16384	IN	Data Raw: 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 61 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6b 2e 63 6f 6e 74 61 69 6e 65 72 2c 67 2c 66 26 26 6b 2e 63 6f 6e 74 61 69 6e 65 72 56 69 73 69 62 6c 65 29 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 76 6f 69 64 20 30 2c 69 64 3a 65 2c 72 65 66 3a 62 2c 72 6f 6c 65 3a 22 74 6f 6f 6c 74 69 70 22 2c 63 68 69 6c 64 72 65 6e 3a 64 7d 29 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 54 6f 6f 6c 74 69 70 44 65 6c 61 79 65 64 43 6f 6e 74 65 6e 74 22 2c 5b 22 63 6c 65 61 72 Data Ascii: pers["extends"]({},a,{className:(h\|\|(h=c("stylex")))(k.container,g,f&&k.containerVisible),"data-testid":void 0,id:e,ref:b,role:"tooltip",children:d}))}a.displayName=a.name+" [from "+f.id+"]";e=b;g["default"]=e}),98);__d("useTooltipDelayedContent",["clear
2024-05-24 06:27:42 UTC	7474	IN	Data Raw: 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 63 6f 6d 65 74 4e 6f 72 6d 61 6c 69 7a 65 54 65 78 74 45 6e 74 69 74 79 52 61 6e 67 65 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 5b 5d 3a 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 61 2e 6f 66 66 73 65 74 3b 61 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 6c 65 6e 67 74 68 22 2c 22 6f 66 66 73 65 74 22 5d 29 3b 72 65 74 75 72 6e 7b 65 6e 74 69 74 79 3a 62 61 62 65 6c 48 65 6c 70 65 72 Data Ascii: ),null);__d("cometNormalizeTextEntityRanges",[],(function(a,b,c,d,e,f){"use strict";function a(a,b){return a==null?[]:a.map(function(a){var c=a.length,d=a.offset;a=babelHelpers.objectWithoutPropertiesLoose(a,["length","offset"]);return{entity:babelHelper

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.4	50732	108.138.8.164	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	2173	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&pid=bMec6YWePJIWe&cb=1&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043 [TRUNCATED] Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:43 UTC	473	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 134 Connection: close Access-Control-Allow-Origin: https://pjnewsletter.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 24 May 2024 06:27:42 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 6b85d8725dd6471c3db1f65d4096afc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: RwQNWHqRhIyLcOkoKpK2X76T60sI-9ur43Q7B_n8wbuBU1Cd6zCqsw==
2024-05-24 06:27:43 UTC	134	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 6e 2d 6f 6e 65 74 61 67 5f 72 78 5f 6e 2d 42 65 65 73 77 61 78 5f 63 6e 76 22 2c 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.4	50739	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:42 UTC	1913	OUT	GET /gampad/ads?iu=%2F22876227373%2FAdmixer_oRTB_VAST_T1&description_url=%7Bdomain%7D&tfcd=0&npa=0&sz=1x1%7C250x300%7C300x250%7C300x600%7C320x480%7C400x300%7C480x320%7C600x300%7C600x600%7C640x360%7C640x480%7C720x1280%7C720x1560%7C720x1600%7C729x1280%7C768x1024%7C960x540%7C970x250%7C1024x768%7C1080x1080%7C1080x2220%7C1200x628%7C1280x720%7C1920x800&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&vpos=preroll&vpmute=0&vpa=auto&type=js&vad_type=linear&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&channel=vastadp%2Bvpaidadp_html5&sdkv=h.3.642.0%2Fvpaid_adapter&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=1498574255&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=6530A801-8E95-4A46-AFE0-81F686DEE018&nel=1&eid=44752052%2C95322027%2C95323893%2C95331589%2C95332046&dt=1716532059227&cookie=ID%3Dda67d6cf617bfbae%3AT%3D1716532015%3ART%3D171653201 [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:43 UTC	780	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:43 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.4	50740	174.137.133.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	390	OUT	GET /vtrack?i=yh0Mtlh8igo_0_0&event=fail&code=901 HTTP/1.1 Host: rtb2-useast.xaprio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:43 UTC	186	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:43 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store Age: 0 Pragma: no-cache
2024-05-24 06:27:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.4	50742	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	1731	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=14251&t=1716532057&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=d2eec9ada756b716664cb494d6d320b3&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=17625862192&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&asid=64ddec09ef5e241fc1061287%7C6579a883a4f2db0d000b8bd9&pid=64db4ddc8904509d8303ce64%7C59c9148628a0612da3689288&cid=6500054a17fa3a03e7086f47%7C64ddeb9540829a4d45051144&h=ec7c53f0f35a072aca055efd7eb28315f9d3d4fe&cpm=2&rtbbp=2&d9=0000&ad=[AV_ADDURATION]&vi=[AV_VIEWABILITY]&d71=[AVC_ADID]&d73=[AVC_DT]&d4=[AVC_WFCYCLE]&d5=[AVC_TIMEPASS]&ofpr=2&d20=av&imid=d2eec9ada756b716664cb494d6d320b3_adsservngs2s7fbd5b645jx52_6763939_[AVC_WFCYCLE]&e=AdError&prbdres=901 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:43 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:43 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.4	50741	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	1722	OUT	GET /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303&&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&e=request&cb=1716532060388&plt=2&asid=64f88b1414c8a3d08a098f79%2C64e5dfe3b8f622d45209131b%2C652f7c84df7d58a4eb009797%2C65a1370997c7e0985f08ab5d&ofpr=%2C1%2C1%2C1.25&fpo=%2C%2C%2C&ri=%2C%2C%2C HTTP/1.1 Host: track1.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:43 UTC	219	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:43 GMT content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.4	50744	216.219.92.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	1526	OUT	GET /error.vast.aspx?item=B3A5270B-FA4B-4DE5-9EA3-AF95C1766C2E&cc=US%2FNY%2F5128581&am-uid=c3f2dced77d84f53905889bf42173c38&device=28&ip=8.46.123.175&profile=10B16888-FCBF-4C9D-90ED-F70CACCE3929&zone=5B8111BB-02DA-4103-81F9-53B081CC927F&site=E21A6002-AB86-4476-809A-20FDC8F62012&rule=E96CA355-AA9D-4A25-B2E8-1CF5CF7CE2D1&requestId=9364a9b5-4d19-412f-a44e-10fce113bf5c&externalRqId=d2eec9ada756b716664cb494d6d320b3_adsservngs2s7fbd5b645jx52_6579a883a4f2db0d000b8bd9&inst=ADX-INTR-NYC-7&pxl=1&bidsc=2&page=pjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&hp=-208187538&size=Instream&adv=nike.com&dsp=C0FAA361-F00C-44C6-9A44-ABF9E334DB81&ts=638521288574104314&visnew=0&bt=3&carr=CenturyLink&devt=2&osfamily=9&isapp=0&make=Google&mod=Chrome&os=Windows&osv=10&adtype=1&extvisid=1716532025945-172031150014-000201-002-004790&crid=256464&extpubid=64db4ddc8904509d8303ce64&pvid=54c1c1eb-d9da-4f58-af79-ad789380524c&cet=7&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWe [TRUNCATED] Host: inv-nets-nyc-s1.admixer.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: am-uid=c3f2dced77d84f53905889bf42173c38
2024-05-24 06:27:43 UTC	363	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:43 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Keep-Alive: timeout=25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.4	50743	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	380	OUT	GET /vast-error?i=dxIO5kQ6FQo_0&err=901 HTTP/1.1 Host: rtb-useast.rtbserve.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:43 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 24 May 2024 06:27:43 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store
2024-05-24 06:27:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.4	50746	3.33.220.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	807	OUT	GET /track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRIUCgV0YXBhZBILCMini7SU8f08EAUYASABKAIyCwj4nY7hqvH9PBAFOAFaBXRhcGFkYAI.
2024-05-24 06:27:43 UTC	579	IN	HTTP/1.1 302 Found Date: Fri, 24 May 2024 06:27:43 GMT Content-Length: 199 Connection: close server: Kestrel location: https://id5-sync.com/k/264.gif?puid=264441c2-0e4b-4098-920f-1c8a6b45a578&ttl=%%TTL%% set-cookie: TDID=264441c2-0e4b-4098-920f-1c8a6b45a578; expires=Sat, 24 May 2025 06:27:43 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGAoJYmlkc3dpdGNoEgsImvyR8JLx_TwQBRIUCgV0YXBhZBILCMini7SU8f08EAUYASABKAIyCwj4p8ebq_H9PBAFOAFaBzhoOXUxMWhgAg..; expires=Sat, 24 May 2025 06:27:43 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-24 06:27:43 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 74 74 6c 3d 25 25 54 54 4c 25 25 22 3e 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 32 36 34 34 34 31 63 32 2d 30 65 34 62 2d 34 30 39 38 2d 39 32 30 66 2d 31 63 38 61 36 62 34 35 61 35 37 38 26 74 74 6c 3d 25 25 54 54 4c 25 25 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://id5-sync.com/k/264.gif?puid=264441c2-0e4b-4098-920f-1c8a6b45a578&ttl=%%TTL%%">https://id5-sync.com/k/264.gif?puid=264441c2-0e4b-4098-920f-1c8a6b45a578&ttl=%%TTL%%</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.4	50745	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	352	OUT	GET /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:43 UTC	321	IN	HTTP/1.1 200 OK p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-05-24 06:27:43 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.4	50747	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	783	OUT	POST /csm/events HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 269 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=79d8a183-3411-4a2e-9dbe-21f1ea3dbf70; cto_bundle=sGqntV85eTJ3T3JuRlZBd0xWbjJpV3lkOHZJMDZZUHNRbCUyRkk4VmloNlg0dHNLSTglMkJVNEdiS1VLdndvUDFHcEh2Tm10Yg
2024-05-24 06:27:43 UTC	269	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 63 63 34 35 64 62 65 2d 65 65 34 63 2d 34 64 63 61 2d 39 63 33 36 2d 30 36 61 34 30 32 33 62 62 34 33 64 22 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 49 64 22 3a 22 41 64 61 70 74 65 72 42 69 64 53 74 61 72 74 22 2c 22 65 6c 61 70 73 65 64 22 3a 31 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 43 64 62 43 61 6c 6c 53 74 61 72 74 22 2c 22 65 6c 61 70 73 65 64 22 3a 32 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 43 64 62 43 61 6c 6c 45 6e 64 22 2c 22 65 6c 61 70 73 65 64 22 3a 39 30 32 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 41 64 61 70 74 65 72 42 69 64 45 6e 64 22 2c 22 65 6c 61 70 73 65 64 22 3a 39 30 32 7d 2c 7b 22 65 76 65 6e 74 49 64 22 3a 22 55 73 65 72 52 65 74 75 72 6e 54 69 6d 65 22 2c 22 65 6c Data Ascii: {"requestId":"2cc45dbe-ee4c-4dca-9c36-06a4023bb43d","events":[{"eventId":"AdapterBidStart","elapsed":1},{"eventId":"CdbCallStart","elapsed":2},{"eventId":"CdbCallEnd","elapsed":902},{"eventId":"AdapterBidEnd","elapsed":902},{"eventId":"UserReturnTime","el
2024-05-24 06:27:43 UTC	308	IN	HTTP/1.1 204 No Content date: Fri, 24 May 2024 06:27:42 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://pjnewsletter.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.4	50748	18.159.201.246	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=9ad2a93a-d4d0-4430-88e7-7fe38ec1d121
2024-05-24 06:27:43 UTC	101	IN	HTTP/1.1 404 Not Found Date: Fri, 24 May 2024 06:27:43 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.4	50749	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	720	OUT	GET /rsrc.php/v3iQKq4/yd/l/en_GB/WQi3ReCvl_cy3pIRPu4YPhvr8ihReOCEmAW87EauwWUrP7BQ0kwbXc8xvhYhGLwC4ore_n_-6Ib1B_Sou4hbknqlurPnDHEYs9_zW39xstWYoIfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:44 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: W9ROb1a64rKtgepaAdj9tQ== Expires: Sat, 24 May 2025 06:27:43 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: OUAJrV+qiasioANf6KrkU53bc4pRGpfndSa8PglFv3JauZ/K1IG8S+cd/V8NefbGWGyBUT3najCzcvOfhRXjTQ== Date: Fri, 24 May 2024 06:27:43 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=63, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 227210
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 53 65 74 44 65 62 75 67 49 6e 66 6f 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 44 65 62 75 67 49 6e 66 6f 53 74 61 74 65 22 2c 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 53 65 74 44 65 62 75 67 49 6e 66 6f 43 6f 6e 74 65 78 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 28 68 3d 64 28 22 72 65 61 63 74 22 29 29 2c 6a 3d 68 2e 75 73 65 43 61 6c 6c 62 61 63 6b 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 69 6c 64 72 Data Ascii: ;/FB_PKG_DELIM/__d("CometFeedUnitSetDebugInfoContextProvider.react",["CometFeedUnitDebugInfoState","CometFeedUnitSetDebugInfoContext","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d("react")),j=h.useCallback;function a(a){var b=a.childr
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 61 3f 68 2e 5f 28 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 6d 6f 72 65 20 63 75 73 74 6f 6d 65 72 73 20 6f 6e 20 57 68 61 74 73 41 70 70 22 29 3a 68 2e 5f 28 22 54 72 79 20 62 6f 6f 73 74 69 6e 67 20 74 68 69 73 20 70 6f 73 74 20 74 6f 20 65 6e 67 61 67 65 20 77 69 74 68 20 6d 6f 72 65 20 63 75 73 74 6f 6d 65 72 73 20 6f 6e 20 57 68 61 74 73 41 70 70 22 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 68 2e 5f 28 22 52 65 61 63 68 20 70 65 6f 70 6c 65 20 77 68 6f 20 61 72 65 20 6d 6f 72 65 20 6c 69 6b 65 6c 79 20 74 6f 20 6d 65 73 73 61 67 65 20 7b 70 61 67 65 20 6e 61 6d 65 7d 20 77 69 74 68 20 61 6e 20 61 64 20 74 68 61 74 20 63 6c 69 63 6b 73 20 74 6f 20 57 68 61 74 73 41 70 70 2e 22 2c 5b 68 2e 5f 70 61 72 61 6d 28 22 70 61 67 65 Data Ascii: a?h._("Connect with more customers on WhatsApp"):h._("Try boosting this post to engage with more customers on WhatsApp")}function b(a){return h._("Reach people who are more likely to message {page name} with an ad that clicks to WhatsApp.",[h._param("page
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 22 5d 22 3b 67 2e 67 65 74 43 6f 6e 6e 65 63 74 50 65 6f 70 6c 65 57 69 74 68 57 68 61 74 73 41 70 70 54 69 74 6c 65 3d 61 3b 67 2e 67 65 74 43 6f 6e 6e 65 63 74 50 65 6f 70 6c 65 57 69 74 68 57 68 61 74 73 41 70 70 4f 6e 43 72 65 61 74 65 41 64 73 42 6f 64 79 3d 62 3b 67 2e 67 65 74 43 6f 6e 6e 65 63 74 50 65 6f 70 6c 65 4f 6e 43 72 65 61 74 65 41 64 73 42 6f 64 79 3d 64 3b 67 2e 67 65 74 43 6f 6e 6e 65 63 74 50 65 6f 70 6c 65 4f 6e 42 6f 6f 73 74 50 6f 73 74 42 6f 64 79 3d 65 3b 67 2e 67 65 74 50 6f 73 74 43 61 70 74 69 6f 6e 3d 6b 3b 67 2e 67 65 74 43 6f 6e 6e 65 63 74 50 65 6f 70 6c 65 57 69 74 68 4d 65 73 73 65 6e 67 65 72 54 69 74 6c 65 3d 6c 3b 67 2e 67 65 74 43 6f 6e 6e 65 63 74 50 65 6f 70 6c 65 57 69 74 68 4d 65 73 73 65 6e 67 65 72 4f 6e 43 72 Data Ascii: "]";g.getConnectPeopleWithWhatsAppTitle=a;g.getConnectPeopleWithWhatsAppOnCreateAdsBody=b;g.getConnectPeopleOnCreateAdsBody=d;g.getConnectPeopleOnBoostPostBody=e;g.getPostCaption=k;g.getConnectPeopleWithMessengerTitle=l;g.getConnectPeopleWithMessengerOnCr
2024-05-24 06:27:44 UTC	1105	IN	Data Raw: 6d 65 74 43 6f 6c 75 6d 6e 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6b 2e 6a 73 78 73 28 63 28 22 54 65 74 72 61 54 65 78 74 2e 72 65 61 63 74 22 29 2c 7b 61 6c 69 67 6e 3a 22 73 74 61 72 74 22 2c 63 6f 6c 6f 72 3a 22 73 65 63 6f 6e 64 61 72 79 22 2c 6e 75 6d 62 65 72 4f 66 4c 69 6e 65 73 3a 31 2c 74 79 70 65 3a 22 6d 65 74 61 33 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 68 2e 5f 28 22 53 70 6f 6e 73 6f 72 65 64 20 28 64 65 6d 6f 29 22 29 2c 6b 2e 6a 73 78 28 63 28 22 42 61 73 65 4d 69 64 64 6f 74 2e 72 65 61 63 74 22 29 2c 7b 7d 29 2c 6b 2e 6a 73 78 28 63 28 22 46 44 53 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 22 73 65 63 6f 6e 64 61 72 79 22 2c 69 63 6f 6e 3a 6d 2c 73 69 7a 65 3a 31 32 7d 29 5d 7d 29 7d 29 5d 7d Data Ascii: metColumnItem.react"),{children:k.jsxs(c("TetraText.react"),{align:"start",color:"secondary",numberOfLines:1,type:"meta3",children:[h._("Sponsored (demo)"),k.jsx(c("BaseMiddot.react"),{}),k.jsx(c("FDSIcon.react"),{color:"secondary",icon:m,size:12})]})})]}
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 46 6f 6f 74 65 72 43 54 41 2e 72 65 61 63 74 22 29 2c 7b 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 69 28 22 35 30 35 36 31 36 22 29 2c 31 36 29 2c 6c 61 62 65 6c 3a 68 2e 5f 28 22 4d 65 73 73 65 6e 67 65 72 22 29 7d 29 2c 68 65 61 64 6c 69 6e 65 3a 6e 2c 6d 65 74 61 3a 67 7d 29 3a 6b 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 46 6f 6f 74 65 72 2e 72 65 61 63 74 22 29 2c 7b 63 74 61 3a 6b 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 46 6f 6f 74 65 72 43 54 41 2e 72 65 61 63 74 22 29 2c 7b 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 69 28 22 36 38 36 31 35 37 22 29 2c 31 36 29 2c 6c 61 62 65 6c 3a 68 2e 5f 28 Data Ascii: toryAttachmentFooterCTA.react"),{icon:d("fbicon")._(i("505616"),16),label:h._("Messenger")}),headline:n,meta:g}):k.jsx(c("CometStoryAttachmentFooter.react"),{cta:k.jsx(c("CometStoryAttachmentFooterCTA.react"),{icon:d("fbicon")._(i("686157"),16),label:h._(
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 46 6f 63 75 73 65 64 50 68 6f 74 6f 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 76 65 72 5f 70 68 6f 74 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 50 68 6f 74 6f 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 70 68 6f 74 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 Data Ascii: ",storageKey:null},{alias:null,args:null,concreteType:"FocusedPhoto",kind:"LinkedField",name:"cover_photo",plural:!1,selections:[{alias:null,args:null,concreteType:"Photo",kind:"LinkedField",name:"photo",plural:!1,selections:[{alias:null,args:null,concret
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 6e 20 61 28 61 29 7b 61 3d 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 75 73 65 46 72 61 67 6d 65 6e 74 28 6a 2c 61 29 3b 61 3d 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 67 6c 6f 62 65 5f 66 6f 63 75 73 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 22 41 53 49 41 22 3a 72 65 74 75 72 6e 20 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 68 28 22 34 38 32 30 31 33 22 29 2c 31 32 29 3b 63 61 73 65 22 45 41 53 54 22 3a 72 65 74 75 72 6e 20 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 68 28 22 34 38 32 30 32 37 22 29 2c 31 32 29 3b 63 61 73 65 22 57 45 53 54 22 3a 72 65 74 75 72 6e 20 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 68 28 22 35 36 30 31 31 38 22 29 2c 31 32 29 3b 64 65 66 61 75 6c 74 3a 63 28 22 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 Data Ascii: n a(a){a=d("CometRelay").useFragment(j,a);a=a==null?void 0:a.globe_focus;switch(a){case"ASIA":return d("fbicon")._(h("482013"),12);case"EAST":return d("fbicon")._(h("482027"),12);case"WEST":return d("fbicon")._(h("560118"),12);default:c("recoverableViolat
2024-05-24 06:27:44 UTC	1028	IN	Data Raw: 74 78 5f 63 74 77 61 5f 70 72 6f 66 69 6c 65 5f 61 64 34 61 64 22 2c 78 2b 22 5f 6f 70 74 5f 6f 75 74 22 29 7d 2c 76 61 72 69 61 62 6c 65 73 3a 7b 7d 7d 29 7d 76 61 72 20 41 3d 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 64 65 6c 65 67 61 74 65 5f 70 61 67 65 2c 42 3d 41 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 41 2e 76 69 65 77 65 72 3b 69 66 28 41 3d 3d 6e 75 6c 6c 7c 7c 42 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 42 3d 63 28 22 75 73 65 43 6f 6d 65 74 46 6f 63 75 73 65 64 47 6c 6f 62 65 46 69 6c 6c 65 64 31 32 22 29 28 42 29 3b 65 3d 28 65 3d 41 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 41 2e 63 61 74 65 67 6f 72 79 5f 6e 61 6d 65 29 21 3d 6e 75 6c 6c 3f 65 3a 22 22 3b 66 3d 28 66 3d 41 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a Data Ascii: tx_ctwa_profile_ad4ad",x+"_opt_out")},variables:{}})}var A=a==null?void 0:a.delegate_page,B=A==null?void 0:A.viewer;if(A==null\|\|B==null)return null;B=c("useCometFocusedGlobeFilled12")(B);e=(e=A==null?void 0:A.category_name)!=null?e:"";f=(f=A==null?void 0:
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 53 22 29 29 29 2e 62 75 6d 70 45 6e 74 69 74 79 4b 65 79 28 36 38 2c 22 63 74 78 5f 63 74 77 61 5f 70 72 6f 66 69 6c 65 5f 61 64 34 61 64 22 2c 22 69 73 5f 65 6c 69 67 69 62 6c 65 5f 66 6f 72 5f 63 74 77 61 5f 76 32 22 29 3b 69 66 28 63 28 22 71 65 78 22 29 2e 5f 28 22 31 34 31 34 22 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c 73 65 20 69 66 28 45 3d 3d 3d 22 43 54 4d 5f 41 44 34 41 44 22 29 7b 28 6d 7c 7c 28 6d 3d 64 28 22 4f 44 53 22 29 29 29 2e 62 75 6d 70 45 6e 74 69 74 79 4b 65 79 28 36 38 2c 22 63 74 78 5f 63 74 77 61 5f 70 72 6f 66 69 6c 65 5f 61 64 34 61 64 22 2c 22 69 73 5f 65 6c 69 67 69 62 6c 65 5f 66 6f 72 5f 63 74 78 22 29 3b 69 66 28 63 28 22 71 65 78 22 29 2e 5f 28 22 34 34 32 22 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 20 Data Ascii: S"))).bumpEntityKey(68,"ctx_ctwa_profile_ad4ad","is_eligible_for_ctwa_v2");if(c("qex")._("1414")===!1)return null}else if(E==="CTM_AD4AD"){(m\|\|(m=d("ODS"))).bumpEntityKey(68,"ctx_ctwa_profile_ad4ad","is_eligible_for_ctx");if(c("qex")._("442")===!1)return
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 6f 6d 65 74 52 6f 77 2e 72 65 61 63 74 22 29 2c 7b 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 38 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 6e 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6e 2e 6a 73 78 28 63 28 22 4d 65 74 61 4c 6f 63 6b 75 70 50 72 69 6d 61 72 79 2e 72 65 61 63 74 22 29 2c 7b 73 69 7a 65 3a 31 36 7d 29 7d 29 2c 6e 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6e 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 43 69 72 63 6c 65 42 75 74 74 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 22 73 65 63 6f 6e 64 61 72 79 22 2c 69 63 6f 6e 3a Data Ascii: ometRow.react"),{paddingVertical:8,verticalAlign:"center",children:[n.jsx(c("CometRowItem.react"),{children:n.jsx(c("MetaLockupPrimary.react"),{size:16})}),n.jsx(c("CometRowItem.react"),{children:n.jsx(c("CometCircleButton.react"),{color:"secondary",icon:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.4	50751	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	610	OUT	GET /rsrc.php/v3iXK94/yK/l/en_GB/QhAqzEJYp63.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:44 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PIKRHTVIFGuNQbgY2VsWUQ== Expires: Thu, 22 May 2025 22:48:29 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 9G8AoYOzCXPVoymfQfSDbndk5HbtZu1wyrpiwOtTkBFGsHVnTKg9joZH6ePQpgGBacPNLZNKY0K5khGfujttLw== Date: Fri, 24 May 2024 06:27:43 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3414, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 109273
2024-05-24 06:27:44 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-24 06:27:44 UTC	15823	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 64 67 65 43 68 65 63 6b 6d 61 72 6b 46 69 6c 6c 65 64 31 32 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 32 20 31 33 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2c 7b Data Ascii: /FB_PKG_DELIM/__d("BadgeCheckmarkFilled12.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 12 13",width:"1em",height:"1em",fill:"currentColor"},a,{
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 6a 2c 6b 3d 6a 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6c 3d 7b 76 65 72 69 66 69 65 64 49 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 7b 64 69 73 70 6c 61 79 3a 22 78 33 6e 66 76 70 32 22 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 78 31 31 6e 6a 74 78 66 22 2c 24 24 63 73 73 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 69 73 49 6e 76 65 72 74 65 64 2c 64 3d 61 2e 73 69 7a 65 2c 65 3d 61 2e 76 65 72 69 66 69 63 61 74 69 6f 6e 42 61 64 67 65 3b 61 3d 61 2e 78 73 74 79 6c 65 3b 76 61 72 20 66 3d 6e 75 6c 6c 2c 67 3d 63 28 22 42 61 64 67 65 43 68 65 63 6b 6d 61 72 6b 46 69 6c 6c 65 64 31 32 2e 73 76 Data Ascii: tion(a,b,c,d,e,f,g,h){"use strict";var i,j,k=j\|\|d("react"),l={verifiedIconContainer:{display:"x3nfvp2",verticalAlign:"x11njtxf",$$css:!0}};function a(a){var b=a.isInverted,d=a.size,e=a.verificationBadge;a=a.xstyle;var f=null,g=c("BadgeCheckmarkFilled12.sv
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 31 37 34 33 34 36 35 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 63 6f 6e 74 65 6e 74 5f 61 63 63 65 73 73 5f 61 6e 64 5f 63 6f 6e 74 72 6f 6c 22 2c 61 29 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 56 69 64 65 6f 50 6c 61 79 65 72 41 75 64 69 6f 41 76 61 69 6c 61 62 69 6c 69 74 79 Data Ascii: gerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743465");b=d("FalcoLoggerInternal").create("content_access_and_control",a);e=b;g["default"]=e}),98);__d("VideoPlayerAudioAvailability
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 2c 62 3d 70 28 29 2c 63 3d 5a 28 29 2c 64 3d 58 28 29 3b 69 66 28 61 7c 7c 63 29 72 65 74 75 72 6e 21 31 3b 69 66 28 62 29 72 65 74 75 72 6e 20 64 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 43 61 28 29 7b 72 65 74 75 72 6e 20 6b 28 28 69 7c 7c 28 69 3d 64 28 22 56 69 64 65 6f 50 6c 61 79 65 72 43 6f 6e 74 65 78 74 73 22 29 29 29 2e 49 6e 69 74 69 61 6c 54 72 61 63 65 50 6f 6c 69 63 79 43 6f 6e 74 65 78 74 29 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 29 7b 72 65 74 75 72 6e 20 6b 28 28 69 7c 7c 28 69 3d 64 28 22 56 69 64 65 6f 50 6c 61 79 65 72 43 6f 6e 74 65 78 74 73 22 29 29 29 2e 4c 61 74 65 6e 63 79 4c 65 76 65 6c 43 6f 6e 74 65 78 74 29 7d 66 75 6e 63 74 69 6f 6e 20 45 61 28 29 7b 72 65 74 75 72 6e 20 6b 28 28 Data Ascii: =null,b=p(),c=Z(),d=X();if(a\|\|c)return!1;if(b)return d;else return!0}function Ca(){return k((i\|\|(i=d("VideoPlayerContexts"))).InitialTracePolicyContext)}function Da(){return k((i\|\|(i=d("VideoPlayerContexts"))).LatencyLevelContext)}function Ea(){return k((
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 61 2e 78 73 74 79 6c 65 3b 61 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 78 73 74 79 6c 65 22 5d 29 3b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 21 30 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 64 29 2c 68 65 69 67 68 74 3a 22 31 32 70 78 22 2c 76 69 Data Ascii: strict";var h,i,j=i\|\|d("react");function a(a){var b=a.children,d=a.xstyle;a=babelHelpers.objectWithoutPropertiesLoose(a,["children","xstyle"]);return j.jsxs("svg",babelHelpers["extends"]({"aria-hidden":!0,className:(h\|\|(h=c("stylex")))(d),height:"12px",vi
2024-05-24 06:27:44 UTC	14884	IN	Data Raw: 7d 7d 2c 6c 3d 7b 61 63 63 65 6e 74 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 77 6e 6f 6e 6f 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 22 64 65 66 61 75 6c 74 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 39 62 62 6d 65 74 22 2c 24 24 63 73 73 3a 21 30 7d 7d 2c 6d 3d 7b 65 6e 64 3a 7b 62 6f 72 64 65 72 42 6f 74 74 6f 6d 45 6e 64 52 61 64 69 75 73 3a 22 78 35 70 66 39 6a 72 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 78 69 65 62 33 6f 6e 22 2c 24 24 63 73 73 3a 21 30 7d 2c 6d 69 64 64 6c 65 3a 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 78 31 32 6e 61 67 63 22 2c 24 24 63 73 73 3a 21 30 7d 2c 73 74 61 72 74 3a 7b 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 61 72 74 52 61 64 69 75 73 3a 22 78 6f 37 31 76 6a 68 22 2c 6d 61 Data Ascii: }},l={accent:{backgroundColor:"xwnonoy",$$css:!0},"default":{backgroundColor:"x9bbmet",$$css:!0}},m={end:{borderBottomEndRadius:"x5pf9jr",marginBottom:"xieb3on",$$css:!0},middle:{marginBottom:"x12nagc",$$css:!0},start:{borderBottomStartRadius:"xo71vjh",ma
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 3b 74 26 26 28 7a 3d 63 28 22 72 65 6d 6f 76 65 46 72 6f 6d 4d 61 70 22 29 28 61 2e 76 69 64 65 6f 73 2c 78 29 29 7d 69 66 28 6e 21 3d 3d 6e 75 6c 6c 29 7b 74 3d 62 2e 75 70 64 61 74 65 50 72 65 76 69 6f 75 73 50 6c 61 63 65 4d 65 74 61 44 61 74 61 49 6e 66 6f 46 6f 72 56 69 64 65 6f 28 7b 65 78 69 73 74 69 6e 67 56 69 64 65 6f 53 74 61 74 65 3a 75 2c 70 6c 61 63 65 73 3a 61 2e 70 6c 61 63 65 73 2c 73 65 74 50 72 65 66 65 72 72 65 64 50 6c 61 63 65 46 6f 72 56 69 64 65 6f 3a 21 31 2c 75 70 64 61 74 65 64 50 6c 61 63 65 73 3a 79 2c 76 69 64 65 6f 49 44 3a 6e 7d 29 3b 78 3d 74 2e 6e 65 78 74 50 72 65 76 69 6f 75 73 50 6c 61 63 65 4d 65 74 61 44 61 74 61 3b 7a 3d 63 28 22 61 64 64 54 6f 4d 61 70 22 29 28 7a 2c 6e 2c 75 3f 62 61 62 65 6c 48 65 6c 70 65 72 73 Data Ascii: ;t&&(z=c("removeFromMap")(a.videos,x))}if(n!==null){t=b.updatePreviousPlaceMetaDataInfoForVideo({existingVideoState:u,places:a.places,setPreferredPlaceForVideo:!1,updatedPlaces:y,videoID:n});x=t.nextPreviousPlaceMetaData;z=c("addToMap")(z,n,u?babelHelpers
2024-05-24 06:27:44 UTC	11529	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 61 3d 63 28 22 6a 73 52 6f 75 74 65 42 75 69 6c 64 65 72 22 29 28 22 2f 77 61 74 63 68 2f 68 61 73 68 74 61 67 2f 7b 3f 68 61 73 68 74 61 67 7d 2f 22 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 7d 29 2c 76 6f 69 64 20 30 29 3b 62 3d 61 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 58 50 6c 61 74 52 65 61 63 74 45 76 65 6e 74 45 6d 69 74 74 65 72 22 2c 5b 22 42 61 73 65 45 76 65 6e 74 45 6d 69 74 74 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 28 22 42 61 73 65 45 76 65 6e 74 45 6d 69 74 74 65 72 22 29 7d 29 2c 39 38 Data Ascii: (function(a,b,c,d,e,f,g){a=c("jsRouteBuilder")("/watch/hashtag/{?hashtag}/",Object.freeze({}),void 0);b=a;g["default"]=b}),98);__d("XPlatReactEventEmitter",["BaseEventEmitter"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=c("BaseEventEmitter")}),98

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.4	50750	18.239.68.199	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	1967	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google_vignette&pid=bMec6YWePJIWe&cb=1&ws=1280x907&v=24.506.1519&t=8000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A125%2C%22id%22%3A%22Adapex_Aniview_Video%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1%21aniview.com%2C64db4ddc8904509d8303ce64%2C1%2C%2C%2C&sm=a043 [TRUNCATED] Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A9CWoyvkEkYMiZQqoYnmDak; ad-privacy=0
2024-05-24 06:27:44 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 134 Connection: close Date: Fri, 24 May 2024 06:27:43 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 6fe2d3277e4f5f1aafe45d46bdc36cf0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: qGreWBICiIz8q0OftwamlopM27PcEUKccQKG1yzFwhvKbuenini3ng==
2024-05-24 06:27:44 UTC	134	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 6e 2d 6f 6e 65 74 61 67 5f 72 78 5f 6e 2d 42 65 65 73 77 61 78 5f 63 6e 76 22 2c 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_rx_n-Beeswax_cnv","cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.4	50752	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:43 UTC	610	OUT	GET /rsrc.php/v3iQbs4/yf/l/en_GB/Up1i9-OcMPc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:44 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 8idixDljacQKwQRoDL6liw== Expires: Thu, 22 May 2025 22:48:30 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: n7siawwV0YVAmSyNc3sjr/VzEKqjDMP1ZT55gZ4aHXzuURkiY/fqXpNmYxXInnVbfSG/uksjAMY0zGQPJUIy4w== Date: Fri, 24 May 2024 06:27:44 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3414, tp=-1, tpl=-1, uplat=4, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 133970
2024-05-24 06:27:44 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-24 06:27:44 UTC	15822	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 6e 7a 61 69 4c 6f 67 67 65 72 22 2c 5b 22 42 61 6e 7a 61 69 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 63 28 22 42 61 6e 7a 61 69 22 29 2e 70 6f 73 74 28 22 6c 6f 67 67 65 72 3a 22 2b 62 2c 64 2c 61 29 7d 2c 63 72 65 61 74 65 3a 68 7d 7d 61 3d 68 28 29 3b 62 3d 61 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 54 65 78 74 57 69 74 68 49 63 6f 6e 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 4e 6f 6e 42 72 65 61 6b 69 6e 67 53 70 61 63 65 2e 72 65 61 63 74 22 2c 22 42 61 73 65 56 69 Data Ascii: /FB_PKG_DELIM/__d("BanzaiLogger",["Banzai"],(function(a,b,c,d,e,f,g){function h(a){return{log:function(b,d){c("Banzai").post("logger:"+b,d,a)},create:h}}a=h();b=a;g["default"]=b}),98);__d("BaseTextWithIcon.react",["BaseNonBreakingSpace.react","BaseVi
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 66 64 22 3a 31 2c 22 31 66 34 34 32 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 34 32 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 34 33 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 34 34 22 3a 31 2c 22 31 66 34 34 35 22 3a 31 2c 22 31 66 34 34 36 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 34 37 22 3a 31 2c 22 31 66 34 34 37 5f Data Ascii: fd":1,"1f442_1f3fe":1,"1f442_1f3ff":1,"1f443":1,"1f443_1f3fb":1,"1f443_1f3fc":1,"1f443_1f3fd":1,"1f443_1f3fe":1,"1f443_1f3ff":1,"1f444":1,"1f445":1,"1f446":1,"1f446_1f3fb":1,"1f446_1f3fc":1,"1f446_1f3fd":1,"1f446_1f3fe":1,"1f446_1f3ff":1,"1f447":1,"1f447_
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 34 37 36 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 37 36 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 66 5f 32 30 30 64 5f Data Ascii: 476_1f3fe":1,"1f476_1f3ff":1,"1f477_1f3fb_200d_2640":1,"1f477_1f3fb_200d_2642":1,"1f477_1f3fc_200d_2640":1,"1f477_1f3fc_200d_2642":1,"1f477_1f3fd_200d_2640":1,"1f477_1f3fd_200d_2642":1,"1f477_1f3fe_200d_2640":1,"1f477_1f3fe_200d_2642":1,"1f477_1f3ff_200d_
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 39 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 39 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 61 22 3a 31 2c 22 31 66 39 64 61 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 61 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 62 22 3a 31 2c 22 31 66 39 64 62 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 63 22 3a 31 2c Data Ascii: 0d_2640":1,"1f9d9_1f3fe_200d_2642":1,"1f9d9_1f3ff":1,"1f9d9_1f3ff_200d_2640":1,"1f9d9_1f3ff_200d_2642":1,"1f9d9_200d_2640":1,"1f9d9_200d_2642":1,"1f9da":1,"1f9da_200d_2640":1,"1f9da_200d_2642":1,"1f9db":1,"1f9db_200d_2640":1,"1f9db_200d_2642":1,"1f9dc":1,
2024-05-24 06:27:44 UTC	1500	IN	Data Raw: 39 31 64 5f 32 30 30 64 5f 31 66 34 36 39 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 61 66 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 30 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 31 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 32 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 33 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 63 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 64 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 33 66 66 5f 31 66 34 36 38 22 3a 31 Data Ascii: 91d_200d_1f469_1f3fe":1,"1f469_1f3ff_200d_1f9af":1,"1f469_1f3ff_200d_1f9b0":1,"1f469_1f3ff_200d_1f9b1":1,"1f469_1f3ff_200d_1f9b2":1,"1f469_1f3ff_200d_1f9b3":1,"1f469_1f3ff_200d_1f9bc":1,"1f469_1f3ff_200d_1f9bd":1,"1f469_1f3ff_200d_2764_200d_1f3ff_1f468":1
2024-05-24 06:27:44 UTC	14884	IN	Data Raw: 3a 31 2c 22 31 66 34 36 39 5f 32 30 30 64 5f 31 66 39 62 63 22 3a 31 2c 22 31 66 34 36 39 5f 32 30 30 64 5f 31 66 39 62 64 22 3a 31 2c 22 31 66 34 36 61 22 3a 31 2c 22 31 66 34 36 65 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 36 66 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 37 30 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 Data Ascii: :1,"1f469_200d_1f9bc":1,"1f469_200d_1f9bd":1,"1f46a":1,"1f46e":1,"1f46e_1f3fb":1,"1f46e_1f3fc":1,"1f46e_1f3fd":1,"1f46e_1f3fe":1,"1f46e_1f3ff":1,"1f46f":1,"1f46f_1f3fb":1,"1f46f_1f3fc":1,"1f46f_1f3fd":1,"1f46f_1f3fe":1,"1f46f_1f3ff":1,"1f470_1f3fb_200d_26
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 22 31 66 39 64 62 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 65 37 22 3a 31 2c 22 31 66 39 65 38 22 3a 31 2c 22 31 66 39 65 39 22 3a 31 2c 22 31 66 39 65 61 22 3a 31 2c 22 31 66 39 65 62 22 3a 31 2c 22 31 66 39 65 63 22 3a 31 2c 22 31 66 39 65 64 22 Data Ascii: "1f9db_1f3fd_200d_2640":1,"1f9db_1f3fd_200d_2642":1,"1f9db_1f3fe":1,"1f9db_1f3fe_200d_2640":1,"1f9db_1f3fe_200d_2642":1,"1f9db_1f3ff":1,"1f9db_1f3ff_200d_2640":1,"1f9db_1f3ff_200d_2642":1,"1f9e7":1,"1f9e8":1,"1f9e9":1,"1f9ea":1,"1f9eb":1,"1f9ec":1,"1f9ed"
2024-05-24 06:27:44 UTC	16384	IN	Data Raw: 58 43 6f 6d 65 74 53 74 6f 72 69 65 73 43 6f 6e 74 72 6f 6c 6c 65 72 52 6f 75 74 65 42 75 69 6c 64 65 72 22 2c 22 58 43 6f 6d 65 74 56 69 64 65 6f 48 6f 6d 65 50 6c 61 79 6c 69 73 74 43 6f 6e 74 72 6f 6c 6c 65 72 52 6f 75 74 65 42 75 69 6c 64 65 72 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 41 63 74 6f 72 53 74 6f 72 79 53 74 61 74 75 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 28 69 3d 64 28 22 72 65 61 63 74 22 29 29 3b 65 3d 69 3b 76 61 72 20 6b 3d 65 2e 75 73 65 43 6f 6e 74 65 78 74 2c 6c 3d 65 2e 75 73 65 4d 65 6d 6f 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 65 3d 61 2e 61 63 74 6f 72 2c 66 3d 61 2e 65 6e 61 62 6c 65 Data Ascii: XCometStoriesControllerRouteBuilder","XCometVideoHomePlaylistControllerRouteBuilder","react","useActorStoryStatus"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|(i=d("react"));e=i;var k=e.useContext,l=e.useMemo;function a(a){var e=a.actor,f=a.enable
2024-05-24 06:27:44 UTC	14884	IN	Data Raw: 6d 61 72 67 69 6e 54 6f 70 3a 22 78 64 6a 32 36 36 72 22 2c 6d 69 6e 48 65 69 67 68 74 3a 22 78 32 6c 77 6e 31 6a 22 2c 6d 69 6e 57 69 64 74 68 3a 22 78 65 75 75 67 6c 69 22 2c 70 61 64 64 69 6e 67 45 6e 64 3a 22 78 34 75 61 70 35 22 2c 70 61 64 64 69 6e 67 53 74 61 72 74 3a 22 78 6b 68 64 36 73 64 22 2c 70 61 64 64 69 6e 67 54 6f 70 3a 22 78 7a 39 64 6c 37 61 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 73 61 67 35 71 38 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 6e 32 6f 6e 72 36 22 2c 7a 49 6e 64 65 78 3a 22 78 31 6a 61 32 75 32 7a 22 2c 24 24 63 73 73 3a 21 30 7d 2c 63 6f 6e 74 65 6e 74 44 65 6e 73 65 3a 7b 70 61 64 64 69 6e 67 54 6f 70 3a 22 78 31 79 31 61 77 31 6b 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 77 69 62 38 79 32 22 2c Data Ascii: marginTop:"xdj266r",minHeight:"x2lwn1j",minWidth:"xeuugli",paddingEnd:"x4uap5",paddingStart:"xkhd6sd",paddingTop:"xz9dl7a",paddingBottom:"xsag5q8",position:"x1n2onr6",zIndex:"x1ja2u2z",$$css:!0},contentDense:{paddingTop:"x1y1aw1k",paddingBottom:"xwib8y2",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.4	50754	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	2130	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: pjnewsletter.com Connection: keep-alive Content-Length: 493 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_6L5Q55KN3H=GS1.1.1716532011.1.0.1716532011.0.0.0; _gid=GA1.2.297082714.1716532012; _gat_UA-71705037-13=1; a=Tpmk9wQM7A2pQr9JshmbXmxLS48DTmyP; __gads=ID=da67d6cf617bfbae:T=1716532015:RT=1716532015:S=ALNI_MbX5LJowz4CIQoxFReTvkzLNiamMw; __gpi=UID=00000e2baa71d767:T=1716532015:RT=1716532015:S=ALNI_MbVAfCYb6SgCTu0yqNcDnwTKPXD1Q; __eoi=ID=0de722eb110b0792:T=1716532015:RT=1716532015:S=AA-AfjZ_Vg53aFh6S_pt_4oSG5A6; _fbp=fb.1.1716532015327.1074392237; token_QlJAAAAAAAAArRMIRsGBk-hpXXMDyS9EWV8qBEI=BAYAZlAzMQFmUDMxgAGBAcAAIBCTQRzc6TWBIyrSBmfxYDEZLgSr9Hds5ZsTO3lhcO1bwQAg32yN53KdZuAc45yqFd7WziA9ZSdrCCh49MaXiVIdDJY; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1171406%22%3A%7B%22page%22%3A1%7D%2C%22C1604063%22%3A%7B%22page%22%3A1%2C%22time%22%3A%221716532021690%22%7D%7D; _ga_6EDY1BF25J=GS1.1.1716532012.1.1.1716532026.46.0.1618387984; _pubcid=a765ec8d-6663-47cd-ab57-34873e7f277c; _pubcid_cst=zix7LPQsHA%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; FCNEC=%5B%5B%22AKsRol9sdbE [TRUNCATED]
2024-05-24 06:27:44 UTC	493	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 32 34 36 37 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 32 34 36 37 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 36 35 33 32 30 30 36 38 30 33 2e 37 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 31 22 2c 22 6a 73 22 3a 22 32 30 32 34 2e 35 2e 30 22 2c 22 74 69 6d 69 6e 67 73 22 3a 31 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 37 39 38 65 63 36 63 31 2d 39 31 36 31 2d 34 39 63 30 2d 39 34 65 34 2d 35 30 30 35 37 65 33 64 62 38 65 64 22 2c Data Ascii: {"resources":[],"referrer":"","eventType":1,"firstPaint":2467.3000000000175,"firstContentfulPaint":2467.3000000000175,"startTime":1716532006803.7,"versions":{"fl":"2024.4.1","js":"2024.5.0","timings":1},"pageloadId":"798ec6c1-9161-49c0-94e4-50057e3db8ed",
2024-05-24 06:27:44 UTC	373	IN	HTTP/1.1 204 No Content Date: Fri, 24 May 2024 06:27:44 GMT Connection: close access-control-allow-origin: https://pjnewsletter.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 888b38b9e99043cf-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.4	50753	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	1222	OUT	GET /k/264.gif?puid=264441c2-0e4b-4098-920f-1c8a6b45a578&ttl=%%TTL%% HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=eec8fc01-d3c0-752a-bc12-6da546458044#1716532029708#6; 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|155#1716532058518#-1523889321#AAJTiE7MoGcAABTuYnJhWg\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|796#1716532060700#-139160899\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34\|1246#1716532062729#606548435; cf=gif; cip=579; cnac=4; car=5; gdpr=0\|
2024-05-24 06:27:44 UTC	2027	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=434#1716532038789#137854406\|2#1716532040707#-508220547#4426393169609033625\|264#1716532064456#1382990166#264441c2-0e4b-4098-920f-1c8a6b45a578\|441#1716532042947#-589865810#e_a6a41c5d-8b23-47d5-91eb-14c3b653cfa0\|1242#1716532052145#606548435\|203#1716532036916#-1664112986#79d8a183-3411-4a2e-9dbe-21f1ea3dbf70\|155#1716532058518#-1523889321#AAJTiE7MoGcAABTuYnJhWg\|124#1716532045067#-1994990825\|108#1716532048960#-2096084194\|796#1716532060700#-139160899\|429#1716532047216#930954113#7F542745-2D60-41EB-9A96-52B90C82DF34\|1246#1716532062729#606548435; Max-Age=7776000; Expires=Thu, 22-Aug-2024 06:27:44 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ce.lijit.com/merge?pid=85&3pid=AAJTiE7MoGcAABTuYnJhWg&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F579%2F1241%2F3%2F6.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 transfer-encoding: chunked date: Fri, 24 May 2024 06:27:44 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-24 06:27:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.4	50756	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	780	OUT	POST /vz HTTP/1.1 Host: c.mgid.com Connection: keep-alive Content-Length: 259 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:44 UTC	259	OUT	Data Raw: 7b 22 75 73 65 72 44 61 74 61 22 3a 7b 22 70 61 67 65 56 69 65 77 49 64 22 3a 22 31 38 66 61 39 34 37 65 62 31 31 38 35 39 38 32 30 34 64 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6a 6e 65 77 73 6c 65 74 74 65 72 2e 63 6f 6d 2f 6a 65 77 69 73 68 2d 61 6d 65 72 69 63 61 6e 73 2d 73 65 6e 64 2d 70 6f 77 65 72 66 75 6c 2f 3f 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 74 65 6e 67 61 67 65 22 2c 22 76 69 73 69 62 6c 65 54 69 6d 65 22 3a 36 31 38 31 7d 2c 22 65 76 65 6e 74 4e 61 6d 65 22 3a 22 75 73 65 72 5f 63 68 61 6e 67 65 5f 74 61 62 5f 6f 72 5f 63 6c 6f 73 65 5f 73 69 74 65 22 2c 22 6d 75 69 64 6e 22 3a 22 6f 34 6e 32 44 58 39 74 54 42 72 6e 22 2c 22 69 6d 70 6c 56 65 72 73 69 6f 6e 22 Data Ascii: {"userData":{"pageViewId":"18fa947eb118598204d","pageUrl":"https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage","visibleTime":6181},"eventName":"user_change_tab_or_close_site","muidn":"o4n2DX9tTBrn","implVersion"
2024-05-24 06:27:44 UTC	306	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:44 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b38ba8f900cac-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.4	50757	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	3275	OUT	GET /pagead/interaction/?ai=CSRdgMDNQZrrcD6eU7_UPu4uiiAOG65bpd9bFhf3eEL_hHhABILjbvStgyQagAZ26zZoDyAEBqQIiF0A1MwcoPqgDAcgDywSqBKoCT9Asl5OXzJvRQQpqX5lWBTLp6TcZQMtO7xJ23rUHI5L095cVIAMYmiLRO_q_nj6XNQTeGk0hEyBjv0f7umT8giBEoRpy-gnw0PBMUkHMBeciYVe2ZIY-1mcXkv7uQ1D45uuroBROJssJv-01I9csc5xFq2oanmjqHbLGXFYIZAuJ0G3jjx4k37sYYUzln4HIJkORcHmkNuYw-zQZXm6zKiLj8GKlT_W8S2e0OsZ8KaUppig19pBIPKhxUj9hP52YJYauPvkKAUjdW9V5a6Ra8ZfIc93RTQSS5KmDt97XxZu5SuB-wIomg_Nt0gwo7KHG27aMC-AykgfeGuGy1KG7EVAZKKm7LYAdNVEXiHqslK1hEIUqXfjN-CWfMRtZjS6qNpnNWnpU2QEK6sAEntqhm5IEiAXMu9rPRqAGAoAHy8WyZagH2baxAqgH1ckbqAemvhuoB47OG6gHk9gbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQKoB-qxsQKoB5m1sQKoB763sQKoB_jCsQKoB_vCsQLYBwHSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpY4pTMiNSlhgOxCQqzjH9vtidcgAoBmAsByAsB2gwRCgsQ8MeSmbKyjrL1ARICAQOqDQJVU8gNAdgTDYgUA9AVAZgWAfgWAYAXAbIYCRICi1QYAiIBAA&sigh=PGMNx01Be6Y&cid=CAQSTwDaQooL90qYTeD_eDZCvFMGKJKs43LLl_5MJWPDpsc8GQ0yq7FGBJ37-7qxH7zXyJj1vccZx7Qu0qedydtnGyIH9vd4AHvNgVgbVP2zSt0 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-7666278362879166&output=html&h=600&slotname=3568180421&adk=2021180753&adf=730387329&pi=t.ma~as.3568180421&w=300&abgtt=6&fwrn=4&fwrnh=100&lmt=1716221016&rafmt=1&format=300x600&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&fwr=0&fwrattr=true&rpe=1&resp_fmts=4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1716532010342&bpp=1&bdt=2803&idt=3299&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C590x280%2C590x280%2C590x280&nras=1&correlator=8601797745957&frm=20&pv=1&ga_vid=1010184661.1716532012&ga_sid=1716532013&ga_hid=231123719&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=832&ady=2707&biw=1263&bih=907&scr_x=0&s [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:44 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 06:27:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.4	50758	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	1926	OUT	GET /pagead/interaction/?ai=CnAoaLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKgCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohX7wNa7gSedVBxwiJS2UtAzdEoTfvnhXOrm9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOljQnbGI1KWGA7EJdRSug8aIt4mACgGYCwHICwGADAHaDBEKCxCw96fY7_C8oOsBEgIBA6oNAlVTyA0BuBOcG9gTDdAVAZgWAfgWAYAXAbIYCRICi08YLiIBAOgYAQ&sigh=PF0qigZl3Ls&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864g&label=wi [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:44 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 24 May 2024 06:27:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.4	50760	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	2251	OUT	GET /gampad/ads?iu=%2F22466671215%2C187271864%2Fca-video-pub-6346866704322274-tag%2Fpjnewsletter.com_video_web_VMP_26.2&description_url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=940246409092661&cust_params=Floors%3D1%26hb_pb%3D1.0%26hb_format%3Dvideo%26hb_bidder%3DHCPM&sdkv=h.3.642.0&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C450x50%2C468x60%2C480x70&is_amp=0&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=3721884631&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&sid=8A88B005-EEF8-4D7E-B410-F068911E5850&nel=1&eid=44752657%2C44776494%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046%2C95333489&ref=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage&url=https%3A%2F%2Fpjnewsletter.com%2Fjewish-americans-send-powerful%2F%3Futm_medium%3Demail%26utm_source%3Dactengage%23google [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg
2024-05-24 06:27:45 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 24 May 2024 06:27:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-24 06:27:45 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-24 06:27:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.4	50761	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	611	OUT	GET /rsrc.php/v3/ym/r/qVHcV6wOMVW.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1887	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 12HFYq/Hq4qlWZt/ULO1AQ== Expires: Fri, 23 May 2025 18:19:35 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: beUSGhLqWW9WvjVInNjhujHZfu66ASRRm1IuRd48OdF+xh/2NOI7mEiUdPTnZasPwqlavu2r3/Mnfnq2wWGZ4w== Date: Fri, 24 May 2024 06:27:44 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7438
2024-05-24 06:27:45 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-24 06:27:45 UTC	7437	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 b1 08 03 00 00 00 a6 cb 4c 79 00 00 02 fa 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 06 06 06 00 00 00 00 00 00 08 08 08 00 00 00 03 03 03 02 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 00 00 00 00 00 00 01 01 01 05 05 05 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 00 00 00 01 01 01 00 00 00 01 01 01 00 00 00 04 04 04 04 04 04 00 00 00 00 00 00 00 00 00 08 08 08 00 00 00 01 01 01 01 01 01 00 00 00 01 01 01 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 00 00 00 00 00 00 00 00 00 02 02 02 00 00 00 01 01 01 00 00 00 00 00 00 01 01 01 04 04 04 04 04 Data Ascii: PNGIHDRLyPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.4	50763	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	599	OUT	GET /rsrc.php/v3/yp/r/c3BjdoXJZL_.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1955	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: vvl+zXM69K93vVHRjlGWzA== Expires: Thu, 22 May 2025 21:19:53 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: IXOudd5x6Ba0ymWqBAiKwLikFMn67oEnRmOQoWIJF7VbMXtRnAbK2ryJ2O0vFC1IRem1WQ8wu25PuL10nxnp7w== Date: Fri, 24 May 2024 06:27:44 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 58505
2024-05-24 06:27:45 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-24 06:27:45 UTC	15860	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 4d 69 6e 47 61 70 54 79 70 65 22 2c 5b 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 62 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 29 28 7b 55 4e 4b 4e 4f 57 4e 3a 30 2c 4f 52 47 41 4e 49 43 3a 31 2c 45 4e 47 41 47 45 4d 45 4e 54 3a 32 2c 46 49 58 45 44 5f 50 4f 53 49 54 49 4f 4e 3a 33 2c 50 52 4f 4d 4f 54 49 4f 4e 3a 34 2c 53 50 4f 4e 53 4f 52 45 44 3a 35 2c 45 4e 44 5f 4f 46 5f 46 45 45 44 5f 43 4f 4e 54 45 4e 54 3a 36 2c 46 42 5f 53 54 4f 52 49 45 53 3a 37 2c 48 49 47 48 5f 56 41 4c 55 45 5f 50 52 4f 4d 4f 54 49 4f 4e 3a 38 2c 46 42 5f 53 54 4f 52 49 45 53 5f 45 4e 47 41 47 45 4d 45 4e 54 3a 39 2c 50 Data Ascii: /FB_PKG_DELIM/__d("MinGapType",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({UNKNOWN:0,ORGANIC:1,ENGAGEMENT:2,FIXED_POSITION:3,PROMOTION:4,SPONSORED:5,END_OF_FEED_CONTENT:6,FB_STORIES:7,HIGH_VALUE_PROMOTION:8,FB_STORIES_ENGAGEMENT:9,P
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 29 2e 72 65 61 64 49 6e 6c 69 6e 65 44 61 74 61 28 68 21 3d 3d 76 6f 69 64 20 30 3f 68 3a 68 3d 62 28 22 43 6f 6d 65 74 4e 65 77 73 46 65 65 64 56 50 56 44 53 74 6f 72 65 5f 6e 65 77 73 46 65 65 64 45 64 67 65 2e 67 72 61 70 68 71 6c 22 29 2c 66 29 3b 69 66 28 21 6e 2e 72 65 61 64 28 29 2e 69 6e 63 6c 75 64 65 73 28 28 66 3d 69 2e 66 65 65 64 5f 62 61 63 6b 65 6e 64 5f 64 61 74 61 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 66 2e 76 73 69 64 29 29 7b 6e 2e 77 72 69 74 65 28 28 66 3d 69 2e 66 65 65 64 5f 62 61 63 6b 65 6e 64 5f 64 61 74 61 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 66 2e 76 73 69 64 29 7d 66 3d 61 2e 72 65 61 64 28 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 3d 61 2e 76 73 69 64 3b 72 65 74 75 72 6e 28 Data Ascii: ).readInlineData(h!==void 0?h:h=b("CometNewsFeedVPVDStore_newsFeedEdge.graphql"),f);if(!n.read().includes((f=i.feed_backend_data)==null?void 0:f.vsid)){n.write((f=i.feed_backend_data)==null?void 0:f.vsid)}f=a.read().find(function(a){var b;a=a.vsid;return(
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 2e 24 32 7d 3b 62 2e 67 65 74 52 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 33 7d 3b 62 2e 67 65 74 53 74 72 65 61 6d 53 77 69 74 63 68 52 65 61 73 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 37 7d 3b 62 2e 67 65 74 52 65 73 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 34 7d 3b 62 2e 67 65 74 53 65 67 6d 65 6e 74 53 74 61 72 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 35 7d 3b 62 2e 67 65 74 53 65 67 6d 65 6e 74 45 6e 64 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 36 7d 3b 62 2e 67 65 74 49 73 50 32 70 50 6c 61 Data Ascii: .$2};b.getRepresentationID=function(){return this.$3};b.getStreamSwitchReason=function(){return this.$7};b.getResource=function(){return this.$4};b.getSegmentStartTime=function(){return this.$5};b.getSegmentEndTime=function(){return this.$6};b.getIsP2pPla
2024-05-24 06:27:45 UTC	9876	IN	Data Raw: 36 39 31 22 29 3f 68 3d 4b 3a 63 28 22 67 6b 78 22 29 28 22 31 36 39 32 22 29 3f 68 3d 4e 3a 63 28 22 67 6b 78 22 29 28 22 31 36 39 33 22 29 26 26 28 68 3d 4f 29 3b 63 28 22 73 65 74 54 69 6d 65 6f 75 74 22 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 47 26 26 63 28 22 43 6f 6d 65 74 4d 65 74 72 69 63 73 56 69 65 77 61 62 6c 65 49 6d 70 72 65 73 73 69 6f 6e 44 65 6c 61 79 46 61 6c 63 6f 45 76 65 6e 74 22 29 2e 6c 6f 67 49 6d 6d 65 64 69 61 74 65 6c 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 63 73 70 3a 45 2c 63 75 73 74 6f 6d 5f 65 76 65 6e 74 5f 6e 61 6d 65 3a 22 63 6f 6d 65 74 5f 69 6d 70 72 65 73 73 69 6f 6e 5f 70 72 6f 70 6f 73 61 6c 5f 42 22 2c 64 65 6c 61 79 3a 4c 2e 74 6f 53 74 72 69 6e 67 28 29 2c 68 61 73 5f 62 6c 6f 63 6b 65 64 5f 65 Data Ascii: 691")?h=K:c("gkx")("1692")?h=N:c("gkx")("1693")&&(h=O);c("setTimeout")(function(){G&&c("CometMetricsViewableImpressionDelayFalcoEvent").logImmediately(function(){return{csp:E,custom_event_name:"comet_impression_proposal_B",delay:L.toString(),has_blocked_e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.4	50762	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	720	OUT	GET /rsrc.php/v3iFel4/yl/l/en_GB/UPrUj11DAgO2xKqezudlQSxyGxUdbmcjliUVeSsRTCk8p8hW2jn4-XVcS4F7e5MyElAZHoh1prcJsXgjxOZ-_U7a8O0FwF42MYvHidVTgbrSCilh6jit1ncqc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 9w5NO+WZxRJR7QFi+lylPg== Expires: Sat, 24 May 2025 06:27:44 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: s1eBqoz/QJKloo+NeMIVDHzxKqR4VS0v5tsa/5F27xfxVXSCrKMjcXKOE7cpep7mZtmxRH0jYSDVwYt2HD4wyA== Date: Fri, 24 May 2024 06:27:45 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3414, tp=-1, tpl=-1, uplat=41, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 247117
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 63 74 69 76 69 74 79 4c 6f 67 4d 65 6e 75 4f 70 74 69 6f 6e 22 2c 5b 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 62 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 29 28 7b 41 52 43 48 49 56 45 3a 22 61 72 63 68 69 76 65 22 2c 41 55 54 4f 5f 41 43 54 49 56 49 54 59 5f 54 49 4d 45 5f 57 49 4e 44 4f 57 3a 22 61 75 74 6f 5f 61 63 74 69 76 69 74 79 5f 74 69 6d 65 5f 77 69 6e 64 6f 77 22 2c 41 55 54 4f 5f 41 43 54 49 56 49 54 59 5f 4f 50 54 5f 49 4e 3a 22 61 75 74 6f 5f 61 63 74 69 76 69 74 79 5f 6f 70 74 5f 69 6e 22 2c 41 55 54 4f 5f 41 43 54 49 56 49 54 59 5f 4f 50 54 5f 4f 55 54 3a 22 61 75 74 6f 5f 61 Data Ascii: ;/FB_PKG_DELIM/__d("ActivityLogMenuOption",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({ARCHIVE:"archive",AUTO_ACTIVITY_TIME_WINDOW:"auto_activity_time_window",AUTO_ACTIVITY_OPT_IN:"auto_activity_opt_in",AUTO_ACTIVITY_OPT_OUT:"auto_a
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 4f 4e 53 45 3a 22 72 65 6d 6f 76 65 5f 70 72 61 79 65 72 5f 72 65 73 70 6f 6e 73 65 22 2c 52 45 4d 4f 56 45 5f 50 52 41 59 45 52 5f 52 45 53 50 4f 4e 53 45 5f 54 48 41 4e 4b 53 3a 22 72 65 6d 6f 76 65 5f 70 72 61 79 65 72 5f 72 65 73 70 6f 6e 73 65 5f 74 68 61 6e 6b 73 22 2c 52 45 4d 4f 56 45 5f 52 45 41 43 54 49 4f 4e 3a 22 72 65 6d 6f 76 65 5f 72 65 61 63 74 69 6f 6e 22 2c 52 45 4d 4f 56 45 5f 52 45 50 4f 52 54 5f 54 41 47 3a 22 72 65 6d 6f 76 65 5f 61 6e 64 5f 72 65 70 6f 72 74 5f 74 61 67 22 2c 52 45 4d 4f 56 45 5f 53 41 56 45 3a 22 72 65 6d 6f 76 65 5f 73 61 76 65 22 2c 52 45 4d 4f 56 45 5f 54 41 47 3a 22 72 65 6d 6f 76 65 5f 74 61 67 22 2c 52 45 50 4f 52 54 5f 54 41 47 3a 22 72 65 70 6f 72 74 5f 74 61 67 22 2c 52 45 4d 4f 56 45 5f 56 49 44 45 4f 5f Data Ascii: ONSE:"remove_prayer_response",REMOVE_PRAYER_RESPONSE_THANKS:"remove_prayer_response_thanks",REMOVE_REACTION:"remove_reaction",REMOVE_REPORT_TAG:"remove_and_report_tag",REMOVE_SAVE:"remove_save",REMOVE_TAG:"remove_tag",REPORT_TAG:"report_tag",REMOVE_VIDEO_
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 76 63 77 31 22 2c 24 24 63 73 73 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 62 61 64 67 65 41 6c 69 67 6e 3b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 22 72 69 67 68 74 22 3a 62 3b 61 3d 61 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 42 61 73 65 56 69 65 77 2e 72 65 61 63 74 22 29 2c 7b 78 73 74 79 6c 65 3a 5b 6a 2e 72 6f 6f 74 2c 28 62 3d 6a 5b 62 5d 29 21 3d 6e 75 6c 6c 3f 62 3a 6e 75 6c 6c 5d 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 53 74 79 6c 65 64 42 61 64 67 65 43 6f Data Ascii: vcw1",$$css:!0}};function a(a){var b=a.badgeAlign;b=b===void 0?"right":b;a=a.children;return i.jsx(c("BaseView.react"),{xstyle:[j.root,(b=j[b])!=null?b:null],children:a})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("BaseStyledBadgeCo
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 6e 21 30 3b 63 61 73 65 20 41 28 29 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 77 28 29 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 79 28 29 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 78 28 29 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 66 69 6c 74 65 72 5f 6b 65 79 3d 3d 3d 62 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 75 28 29 3a 72 65 74 75 72 6e 20 68 2e 41 52 43 48 49 56 45 3b 63 61 73 65 20 41 28 29 3a 72 65 74 75 72 6e 20 68 2e 54 52 41 53 48 3b 64 65 66 61 75 6c 74 3a 72 65 74 Data Ascii: n!0;case A():return!0;case w():return!0;case y():return!0;case x():return!0;default:return!1}return!1}function i(a,b){return a.some(function(a){return a.filter_key===b})}function j(a){switch(a){case u():return h.ARCHIVE;case A():return h.TRASH;default:ret
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 29 2e 6c 6f 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 63 6f 6e 74 72 6f 6c 3a 64 2c 65 76 65 6e 74 3a 62 2c 69 73 5f 61 63 63 65 73 73 3a 21 31 2c 69 73 5f 62 75 6c 6b 3a 21 31 2c 69 73 5f 63 6f 6e 74 72 6f 6c 3a 21 30 2c 73 75 72 66 61 63 65 3a 50 28 61 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 4b 28 29 3f 22 70 6f 73 74 5f 63 68 65 76 72 6f 6e 5f 6d 65 6e 75 5f 74 69 6d 65 6c 69 6e 65 22 3a 22 70 6f 73 74 5f 63 68 65 76 72 6f 6e 5f 6d 65 6e 75 5f 6e 65 77 73 5f 66 65 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 75 28 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 41 28 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 61 29 Data Ascii: ).log(function(){return{control:d,event:b,is_access:!1,is_bulk:!1,is_control:!0,surface:P(a)}})}function P(a){return a===K()?"post_chevron_menu_timeline":"post_chevron_menu_news_feed"}function Q(a){return a===u()}function R(a){return a===A()}function S(a)
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 77 4d 61 6e 61 67 65 41 63 74 69 76 69 74 79 46 69 6c 74 65 72 3d 69 3b 67 2e 67 65 74 53 74 6f 72 65 4b 65 79 46 6f 72 43 61 74 65 67 6f 72 79 3d 6a 3b 67 2e 73 68 6f 77 4e 75 6d 49 74 65 6d 73 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 69 61 6c 6f 67 3d 6b 3b 67 2e 67 65 74 46 69 6c 74 65 72 4b 65 79 46 6f 72 43 61 74 65 67 6f 72 79 3d 6c 3b 67 2e 67 65 74 46 69 6c 74 65 72 4b 65 79 46 6f 72 50 65 72 73 6f 6e 3d 6d 3b 67 2e 67 65 74 46 69 6c 74 65 72 4b 65 79 46 6f 72 44 61 74 65 3d 6e 3b 67 2e 67 65 74 46 69 6c 74 65 72 4b 65 79 46 6f 72 4d 65 64 69 61 43 6f 6e 74 65 6e 74 3d 6f 3b 67 2e 67 65 74 46 69 6c 74 65 72 4b 65 79 46 6f 72 41 75 64 69 65 6e 63 65 3d 70 3b 67 2e 67 65 74 53 74 6f 72 65 4b 65 79 46 6f 72 41 72 63 68 69 76 65 3d 71 3b 67 2e 67 65 74 Data Ascii: wManageActivityFilter=i;g.getStoreKeyForCategory=j;g.showNumItemsConfirmationDialog=k;g.getFilterKeyForCategory=l;g.getFilterKeyForPerson=m;g.getFilterKeyForDate=n;g.getFilterKeyForMediaContent=o;g.getFilterKeyForAudience=p;g.getStoreKeyForArchive=q;g.get
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 36 20 31 36 27 25 33 65 25 33 63 64 65 66 73 25 33 65 25 33 63 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 27 61 27 20 78 31 3d 27 35 30 25 32 35 27 20 78 32 3d 27 35 30 25 32 35 27 20 79 31 3d 27 30 25 32 35 27 20 79 32 3d 27 36 37 2e 31 39 34 25 32 35 27 25 33 65 25 33 63 73 Data Ascii: ],(function(a,b,c,d,e,f){"use strict";a="data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' viewBox='0 0 16 16'%3e%3cdefs%3e%3clinearGradient id='a' x1='50%25' x2='50%25' y1='0%25' y2='67.194%25'%3e%3cs
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 6c 74 65 72 20 69 64 3d 27 64 27 20 77 69 64 74 68 3d 27 31 36 39 2e 35 25 32 35 27 20 68 65 69 67 68 74 3d 27 33 36 36 2e 37 25 32 35 27 20 78 3d 27 2d 33 33 2e 38 25 32 35 27 20 79 3d 27 2d 36 36 2e 37 25 32 35 27 20 66 69 6c 74 65 72 55 6e 69 74 73 3d 27 6f 62 6a 65 63 74 42 6f 75 6e 64 69 6e 67 42 6f 78 27 25 33 65 25 33 63 66 65 4f 66 66 73 65 74 20 64 79 3d 27 31 27 20 69 6e 3d 27 53 6f 75 72 63 65 41 6c 70 68 61 27 20 72 65 73 75 6c 74 3d 27 73 68 61 64 6f 77 4f 66 66 73 65 74 4f 75 74 65 72 31 27 2f 25 33 65 25 33 63 66 65 47 61 75 73 73 69 61 6e 42 6c 75 72 20 69 6e 3d 27 73 68 61 64 6f 77 4f 66 66 73 65 74 4f 75 74 65 72 31 27 20 72 65 73 75 6c 74 3d 27 73 68 61 64 6f 77 42 6c 75 72 4f 75 74 65 72 31 27 20 73 74 64 44 65 76 69 61 74 69 6f 6e 3d Data Ascii: lter id='d' width='169.5%25' height='366.7%25' x='-33.8%25' y='-66.7%25' filterUnits='objectBoundingBox'%3e%3cfeOffset dy='1' in='SourceAlpha' result='shadowOffsetOuter1'/%3e%3cfeGaussianBlur in='shadowOffsetOuter1' result='shadowBlurOuter1' stdDeviation=
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 33 65 25 33 63 70 61 74 68 20 69 64 3d 27 68 27 20 64 3d 27 4d 33 2e 36 20 39 2e 38 33 31 63 30 2d 2e 37 39 31 2e 35 33 38 2d 31 2e 34 33 31 20 31 2e 32 2d 31 2e 34 33 31 2e 36 36 33 20 30 20 31 2e 32 2e 36 34 20 31 2e 32 20 31 2e 34 33 31 20 30 20 2e 33 32 39 2d 2e 30 39 33 2e 36 33 33 2d 2e 32 35 32 2e 38 37 34 61 2e 35 32 37 2e 35 32 37 20 30 20 30 31 2d 2e 33 31 38 2e 32 32 63 2d 2e 31 35 2e 30 33 36 2d 2e 33 37 33 2e 30 37 35 2d 2e 36 33 2e 30 37 35 73 2d 2e 34 38 31 2d 2e 30 33 39 2d 2e 36 33 2d 2e 30 37 35 61 2e 35 32 34 2e 35 32 34 20 30 20 30 31 2d 2e 33 31 38 2d 2e 32 32 20 31 2e 35 38 38 20 31 2e 35 38 38 20 30 20 30 31 2d 2e 32 35 32 2d 2e 38 37 34 7a 6d 36 2e 34 20 30 63 30 2d 2e 37 39 31 2e 35 33 37 2d 31 2e 34 33 31 20 31 2e 32 2d 31 2e 34 Data Ascii: 3e%3cpath id='h' d='M3.6 9.831c0-.791.538-1.431 1.2-1.431.663 0 1.2.64 1.2 1.431 0 .329-.093.633-.252.874a.527.527 0 01-.318.22c-.15.036-.373.075-.63.075s-.481-.039-.63-.075a.524.524 0 01-.318-.22 1.588 1.588 0 01-.252-.874zm6.4 0c0-.791.537-1.431 1.2-1.4
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 27 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 27 25 32 33 6b 27 2f 25 33 65 25 33 63 75 73 65 20 66 69 6c 6c 3d 27 75 72 6c 28 25 32 33 6c 29 27 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 27 25 32 33 6b 27 2f 25 33 65 25 33 63 2f 67 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 43 6f 6d 70 6f 73 65 72 4d 69 6e 75 74 69 61 65 42 61 72 4c 6f 61 64 69 6e 67 2e 72 65 61 63 74 22 2c 5b 22 46 44 53 47 6c 69 6d 6d 65 72 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6a 3d 7b 69 6d 61 67 65 47 6c 69 6d Data Ascii: ' xlink:href='%23k'/%3e%3cuse fill='url(%23l)' xlink:href='%23k'/%3e%3c/g%3e%3c/svg%3e";f["default"]=a}),66);__d("CometComposerMinutiaeBarLoading.react",["FDSGlimmer.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j={imageGlim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.4	50766	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	852	OUT	GET /images/cookies/cookie_info_card_image_1.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/PatriotJournal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1102	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: Nmnpiyrpc00QHVchkNDJDQ== Edge-Control: cache-maxage=86400s Expires: Sat, 25 May 2024 02:32:19 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-24 06:27:45 UTC	1472	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:27:45 UTC	15099	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 56 6b 49 44 41 54 78 da ec dd 7b 8c 5c d5 7d 07 f0 ef ef dc 7b e7 b1 af d9 f5 ae d7 f6 da c6 b1 8d 8d b1 43 6d 5c 07 08 b0 14 42 88 45 d3 56 6a 92 3f da 8a 12 a5 69 a5 28 0d ad aa 22 42 5a da 4a 50 21 a8 44 14 d2 d0 44 8d d4 b4 0d 8f 04 39 16 af 2a 2d 14 91 04 e2 42 c1 d8 c5 36 c6 ef e7 be 77 67 1f f3 be f7 9e f3 ed dc c1 bb ec b2 33 bb 5e 6c 13 1b 9f 8f 46 77 e7 71 cf 9d bb ab f9 ee ef cc 3d e7 ce a0 60 59 d6 79 4f 86 87 d3 b0 2c eb 3c 37 6c 59 d6 79 cf 06 d5 b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb 06 d5 b2 2c 1b 54 cb b2 6c 50 2d cb 06 d5 b2 2c 1b 54 cb b2 6c 50 2d cb Data Ascii: PNGIHDR8jVkIDATx{\}{Cm\BEVj?i("BZJP!DD9*-B6wg3^lFwq=`YyO,<7lYylP-A,TlP-A,TlP-A,TlP-,TlP-,TlP-
2024-05-24 06:27:45 UTC	7081	IN	Data Raw: a1 97 fe eb 67 77 de b6 f4 a5 c7 ef 79 f6 b1 07 1e 79 f0 ee ff 7b d7 d7 fe f9 1f 6e be f1 aa 45 2f 3c f5 e8 70 b1 d7 be 97 7a ca 42 40 dc 85 00 a4 60 5c 20 f0 bd 3b bf 5d ef be a8 9d 81 48 f5 94 43 eb ef 70 e3 47 04 20 41 42 13 8e 2b 49 57 7c 1f 7a 84 5b 6a 7d f5 07 66 69 65 c4 94 06 ff e5 ef 7e f7 3b 90 f1 b8 67 10 84 30 b5 6b db f6 81 03 07 2b 4a a5 2c 16 af ae 9d 84 14 db 37 ae 35 72 52 c9 5d 27 71 ef 3f 7e e0 81 ef 7c f0 f9 df 7e 6d c3 a3 77 a8 e4 61 23 53 ab 6d fe e2 f3 7b db f6 b4 b4 25 2e be ec 6a f4 be f6 ca 13 f7 95 94 57 bf b6 e1 e9 ea 9a 49 86 df 1e 09 43 dc b6 03 1b d7 d4 d7 86 94 52 85 2a 84 f9 85 e7 38 20 46 42 88 80 e2 e2 b2 1b 3e f6 e9 cd eb 9f 79 f1 e1 af 75 f7 7b 9a 2a 56 5c d1 1b 84 bb ec d9 78 70 e7 7a d7 49 1e 5f 4f d9 23 40 ed 8b 28 Data Ascii: gwyy{nE/<pzB@`\ ;]HCpG AB+IW\|z[j}fie~;g0k+J,75rR]'q?~\|~mwa#Sm{%.jWICR8 FB>yu{V\xpzI_O#@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.4	50765	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	852	OUT	GET /images/cookies/cookie_info_card_image_2.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/PatriotJournal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1144	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: wRZKtl/35CrbFpdeWSFrBg== Edge-Control: cache-maxage=86400s Expires: Sat, 25 May 2024 02:27:49 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-24 06:27:45 UTC	1472	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:27:45 UTC	15057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 53 01 49 44 41 54 78 5e ec d3 b1 0e 82 30 18 80 41 df ff d5 94 a8 89 0e 3a 00 4a 9a 90 26 80 06 45 70 b2 3a b8 b8 18 27 87 bb fc 69 3b b4 dd be 59 f7 f7 80 ef 42 05 84 0a 08 15 84 0a 08 15 10 2a 08 15 10 2a 08 15 10 2a 20 54 10 2a 20 54 40 a8 20 54 40 a8 20 54 40 a8 80 50 41 a8 80 50 01 a1 82 50 01 a1 d2 be a6 79 af 69 8b 4d 17 e2 b9 ac fb 7d b8 6c ab 61 7d bc ad 0e 63 56 8e 8b 62 9a a7 c9 ef cf 79 9d b3 62 5a 96 53 ba b0 a9 86 5d b8 e6 75 9f 1e c6 e6 d4 a6 df 3e e7 57 08 95 07 fb e6 ee db 34 14 85 71 fe 47 06 46 06 d8 79 48 1d 51 59 60 ed 82 18 50 77 d8 2a c1 5c db 84 20 8a 50 5b a0 3c 7c ed 98 e6 81 e3 3a ce bd 4e 1c 97 b8 f5 75 c4 f1 a3 56 26 c4 d2 Data Ascii: PNGIHDR8jSIDATx^0A:J&Ep:'i;YB*** T* T@ T@ T@PAPPyiM}la}cVbybZS]u>W4qGFyHQY`Pw*\ P[<\|:NuV&
2024-05-24 06:27:45 UTC	6249	IN	Data Raw: 06 4a 05 aa 6a 51 b0 71 ed c2 e7 dd 6f cf 2d 22 9c 78 bc 5c cf 7c 7a f7 fd ab cd 57 ff db fc ff d9 3b d3 a8 28 ae 6d 8f bf ef ef ad 77 d7 ba 51 a3 79 51 31 4c 0e 80 20 20 02 dd 8c a2 a2 cc 34 b3 22 08 02 32 ca d0 4c 0d 22 73 d3 4c 32 d3 0c dd 0c 82 38 a2 a2 12 8d 38 10 a7 c4 90 a0 89 91 68 1c 12 35 2a 08 8e a0 c0 39 e5 db a7 cb 28 37 6a d3 14 89 c9 87 da ab 56 ad a2 2c f8 f6 f3 bf cf 7f ef b3 cf e0 f0 cb 11 fc 1f ee 0b c6 18 ee 7d 3d e7 8f 0b 03 4e e5 05 d1 eb cc b1 9d 46 30 96 e1 44 4e e0 99 82 60 fa fd d8 ce 41 98 72 f6 ba e3 17 cc db 8a 30 47 f8 23 bf 83 14 4e fb 46 e2 08 a7 00 6b 83 04 57 73 c8 99 4f 8a 82 c0 58 5a aa a3 0a 1b 6b ce e6 07 a7 7b 2f 83 0f 26 32 c1 10 ae f0 3d 69 a1 c2 e0 b5 e6 66 2b e7 e8 3a ce d4 5f ad ed 98 a2 bf a6 c2 d0 4f ba c8 bb Data Ascii: JjQqo-"x\\|zW;(mwQyQ1L 4"2L"sL288h5*9(7jV,}=NF0DN`Ar0G#NFkWsOXZk{/&2=if+:_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.4	50767	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	852	OUT	GET /images/cookies/cookie_info_card_image_3.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/PatriotJournal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1227	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: tjvKzjcx509sRQAttysmgw== Edge-Control: cache-maxage=86400s Expires: Fri, 24 May 2024 14:41:25 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}]}, {"max_age":3600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"network-errors"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-24 06:27:45 UTC	1574	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:27:45 UTC	14872	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 8a a9 49 44 41 54 78 da ec 5d 09 7c 5c 55 b9 3f e7 2e b3 65 26 99 ec 49 93 b4 4d ba b7 29 da 5a a0 50 4a 81 2a 28 96 4d 10 2d 4f 2b 2a 8a 82 3e 7c 88 f0 d0 1f 0a 6e a0 e0 0f 9e 0f 7c 80 22 2a e5 09 42 d9 2b 50 69 05 9e 20 82 d0 b2 b4 d0 96 74 a1 4b 92 2e 49 9a cc 3e f7 de f3 fe f7 7c 2f c3 24 33 93 a4 cd 9b 4c 48 ee d7 e1 72 ee 72 ce bd 39 f7 fc cf b7 9c ef fb 2e ef ec ec 60 47 4a 6b d7 ae 3b f3 cc 33 2c 4b a8 aa 1a 8d c6 d6 bf 97 28 2a 0a 74 76 1d 62 9c 0f 5a d7 08 b7 d6 15 f3 da da 5a da 15 c2 52 b8 4d b4 bb 7d fb b6 cd 2d ef d5 cc 5c 92 ba de 34 0d ce 15 86 5f 6e 32 12 dd 1d 3b de 38 f5 94 c5 b4 bb 7a f5 ea f2 8a 72 ce 78 69 30 98 34 92 1e b7 5b d3 Data Ascii: PNGIHDR8jIDATx]\|\U?.e&IM)ZPJ(M-O+>\|n\|"B+Pi tK.I>\|/$3LHrr9.`GJk;3,K(tvbZZRM}-\4_n2;8zrxi04[
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: e5 ca d5 07 23 01 8e a4 f6 67 b7 b1 8a b5 d9 72 3b b8 d1 d4 86 8c 14 6a d1 9e 05 c0 5b 96 b4 87 c3 4f 83 e3 c9 9c e6 26 98 70 ba 3c 19 27 3b 2d 85 b7 cb e0 90 2f d7 61 29 e7 a0 14 24 a8 9e 9d cd 84 a0 d2 75 ec fa 75 ec c3 67 32 a4 29 7b 9c 3c 61 32 fc 66 30 22 be ff 10 a2 23 ec ae a3 fd 5e 23 02 81 c2 0d 01 c6 ed 6b a8 f6 7d f4 82 73 1f fe eb d3 b5 75 ed 1e 4f 75 3a 15 ab aa 68 35 93 31 21 65 39 71 c6 e2 85 9f b9 fa 72 b0 d1 a3 03 e1 d7 0f 1d fd d5 a3 4f bd b8 ef 60 26 0f 0c ee 92 29 93 97 43 77 6d 6a 98 2f 1b 28 ed 79 20 9d 0e 4b 4f 8f 4a 67 25 fd 9a 2b 5b 20 1f de 0b 20 8e 65 63 ca 33 cc 5a f4 14 a8 bd 0a 29 ae 2a a2 35 4d 98 29 87 a3 8e 51 b3 7c ee a9 47 ce 3f 63 39 50 3a 9e c6 4b 7c d0 97 bf fc e5 7d bb 9e b3 d2 31 bc 0c c5 b4 6c cb 84 99 ec 3d 7b a9 Data Ascii: #gr;j[O&p<';-/a)$uug2){<a2f0"#^#k}suOu:h51!e9qrO`&)Cwmj/(y KOJg%+[ ec3Z)*5M)Q\|G?c9P:K\|}1l={
2024-05-24 06:27:45 UTC	4298	IN	Data Raw: a7 d0 5d 4b 47 cd 5f 88 4f a4 d7 17 57 62 ae b2 4b 2c 82 a8 d8 b5 5a 22 d9 34 00 ab 75 8b 5a 5a c0 e4 3e f7 dc 73 d5 1f a4 00 e7 df fe f6 b7 49 39 62 9f 25 af bd 4a 4a 28 7e 84 6c f6 a8 33 a9 85 09 0f ad cf 77 01 f9 69 9d 7a d4 62 7e 02 3a c1 26 27 41 1b 24 a1 c1 80 5b a4 74 e2 8d d8 a3 92 b6 47 b5 44 fe c0 15 06 09 b8 e9 4c a2 a7 17 2b 26 0e c8 33 02 bb 01 69 b4 ea a8 fc be 02 95 55 0e b5 ff fa f0 f4 33 4e c7 6a 8d 6c 41 e4 f7 02 2a 30 b7 ca 96 5b b9 4a 49 21 11 82 96 15 fa 70 a6 fe 61 0a 6f 13 17 2c ae 8f 64 7f b7 f9 e8 24 6a 39 9a f0 50 47 8e 64 5e 5f 6e fc 46 86 86 3a 7b 97 cf fc d7 c7 13 a8 80 b0 ba 54 b6 52 cc 46 8a 30 43 62 81 56 a6 10 d6 5f 14 46 8a ea a9 3d 66 ac 24 7c 0e ab e7 e9 ee 03 27 e5 63 ac eb f0 14 d7 4a 44 c0 8d 9d 2c 1c f6 18 7f cb 83 Data Ascii: ]KG_OWbK,Z"4uZZ>sI9b%JJ(~l3wizb~:&'A$[tGDL+&3iU3NjlA*0[JI!pao,d$j9PGd^_nF:{TRF0CbV_F=f$\|'cJD,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.4	50768	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	921	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1293 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVpmhLT528w sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/PatriotJournal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:44 UTC	1293	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 50 61 74 72 69 6f 74 4a 6f 75 72 6e 61 6c 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 32 26 5f 5f 68 73 3d 31 39 38 36 37 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e 30 26 64 70 72 3d 31 26 5f 5f 63 63 67 3d 47 4f 4f 44 26 5f 5f 72 65 76 3d 31 30 31 33 37 34 30 32 30 38 26 5f 5f 73 3d 25 33 41 25 33 41 65 74 73 78 65 70 26 5f 5f 68 73 69 3d 37 33 37 32 34 34 39 30 35 37 35 38 32 31 38 32 34 36 38 26 5f 5f 64 79 6e 3d 37 78 65 55 6d 77 6c 45 6e 77 6e 38 79 45 71 78 65 6d 68 30 63 6d 35 55 34 65 31 4e 78 74 33 6f 64 45 63 Data Ascii: route_urls[0]=%2FPatriotJournal&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=2&__hs=19867.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1013740208&__s=%3A%3Aetsxep&__hsi=7372449057582182468&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e1Nxt3odEc
2024-05-24 06:27:45 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 06:27:45 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 06:27:45 UTC	2024	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:27:45 UTC	390	IN	Data Raw: 36 30 65 39 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 50 61 74 72 69 6f 74 4a 6f 75 72 6e 61 6c 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 75 74 65 52 6f 6f 74 2e 65 Data Ascii: 60e9for (;;);{"payload":{"payloads":{"/PatriotJournal":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfilePlusCometLoggedOutRoot.react"},{"__jsr":"ProfilePlusCometLoggedOutRouteRoot.e
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 59 58 42 77 58 32 4e 76 62 47 78 6c 59 33 52 70 62 32 34 36 4d 54 41 77 4d 44 59 35 4d 7a 51 7a 4e 54 6b 35 4e 7a 41 32 4f 6a 49 7a 4d 6a 63 78 4e 54 67 79 4d 6a 63 36 4d 6a 41 79 22 2c 22 75 73 65 72 49 44 22 3a 22 31 30 30 30 36 39 33 34 33 35 39 39 37 30 36 22 2c 22 75 73 65 72 56 61 6e 69 74 79 22 3a 22 50 61 74 72 69 6f 74 4a 6f 75 72 6e 61 6c 22 2c 22 76 69 65 77 65 72 49 44 22 3a 22 30 22 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 2c 22 6e 75 6d 49 6e 69 74 69 61 6c 46 65 65 64 55 6e 69 74 73 22 3a 31 2c 22 73 65 6f 43 72 61 77 6c 69 6e 67 50 6f 6f 6c 22 3a 6e 75 6c 6c 2c 22 73 65 6f 47 72 6f 77 74 68 41 75 74 6f 6d 61 74 69 6f 6e 43 72 61 77 6c 69 6e 67 50 6f 6f 6c 22 Data Ascii: YXBwX2NvbGxlY3Rpb246MTAwMDY5MzQzNTk5NzA2OjIzMjcxNTgyMjc6MjAy","userID":"100069343599706","userVanity":"PatriotJournal","viewerID":"0","eligibleForProfilePlusEntityMenu":false,"numInitialFeedUnits":1,"seoCrawlingPool":null,"seoGrowthAutomationCrawlingPool"
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 22 50 61 74 72 69 6f 74 4a 6f 75 72 6e 61 6c 22 7d 2c 22 72 6f 75 74 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 74 72 75 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 Data Ascii: :true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"vanity":"PatriotJournal"},"routeParams":{"vanity":{"legacyNames":[],"default":null,"path":true,"significant":true
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 2c 22 74 61 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 72 65 Data Ascii: se,"significant":false,"coercibleType":"FBID"},"sorting_setting":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"ENUM"},"tag":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"STRING"},"re
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 64 65 6c 65 67 61 74 65 5f 70 61 67 65 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 61 64 5f 61 63 63 6f 75 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 73 68 6f 77 5f Data Ascii: ant":true,"coercibleType":"STRING"},"delegate_page_id":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"FBID"},"ad_account_id":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"FBID"},"show_
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 33 36 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 35 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 35 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 31 33 32 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 31 36 32 34 22 3a 7b 22 72 65 73 75 6c Data Ascii: ult":true,"hash":null},"366":{"result":false,"hash":null},"20858":{"result":true,"hash":null},"20859":{"result":false,"hash":null},"20860":{"result":false,"hash":null},"20863":{"result":false,"hash":null},"1326":{"result":false,"hash":null},"1624":{"resul
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 36 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 36 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 33 33 30 35 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 35 22 3a 7b 22 Data Ascii: ult":false,"hash":null},"21063":{"result":false,"hash":null},"21069":{"result":false,"hash":null},"21071":{"result":false,"hash":null},"21072":{"result":false,"hash":null},"33056":{"result":false,"hash":null},"20864":{"result":true,"hash":null},"20865":{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.4	50769	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	921	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1423 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVpmhLT528w sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/PatriotJournal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:44 UTC	1423	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 6c 6f 67 69 6e 25 32 46 64 65 76 69 63 65 2d 62 61 73 65 64 25 32 46 72 65 67 75 6c 61 72 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 25 33 44 31 25 32 36 6e 65 78 74 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 35 32 46 50 61 74 72 69 6f 74 4a 6f 75 72 6e 61 6c 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 33 26 5f 5f 68 73 3d 31 39 38 36 37 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 Data Ascii: route_urls[0]=%2F&route_urls[1]=%2Flogin%2Fdevice-based%2Fregular%2Flogin%2F%3Flogin_attempt%3D1%26next%3Dhttps%253A%252F%252Fwww.facebook.com%252FPatriotJournal&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=3&__hs=19867.HYP%3Acomet_loggedout_p
2024-05-24 06:27:45 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 06:27:45 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 06:27:45 UTC	2024	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 06:27:45 UTC	360	IN	Data Raw: 31 35 63 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 6c 6f 67 69 6e 2f 64 65 76 69 63 65 2d 62 61 73 65 64 2f 72 65 67 75 6c 61 72 2f 6c 6f 67 69 6e 2f 3f 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 3d 31 26 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 50 61 74 72 69 6f 74 4a 6f 75 72 6e 61 6c 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 7d 2c 22 73 72 5f 70 61 79 6c 6f 61 64 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 62 6c Data Ascii: 15cfor (;;);{"payload":{"payloads":{"/":{"error":false,"result":null},"/login/device-based/regular/login/?login_attempt=1&next=https\u00253A\u00252F\u00252Fwww.facebook.com\u00252FPatriotJournal":{"error":false,"result":null}},"sr_payload":{"hsrp":{"hbl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.4	50764	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	610	OUT	GET /rsrc.php/v3iizA4/yo/l/en_GB/HHF3KtxQn_Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: p0Xkt6mkRKZGj0+3i9bUlQ== Expires: Thu, 22 May 2025 22:48:30 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: iMBL9wCK3t0+9JtDXdr6EuHP3zq3VSLYYbNGRTgPRvR+5mu27jiX5weMDcqYIXfDxGquYhRy6nax8ki20tasgg== Date: Fri, 24 May 2024 06:27:44 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 78206
2024-05-24 06:27:45 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-24 06:27:45 UTC	15824	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4f 76 65 72 6c 61 70 70 69 6e 67 46 61 63 65 70 69 6c 65 2e 72 65 61 63 74 22 2c 5b 22 66 62 74 22 2c 22 42 61 73 65 43 6f 6e 74 61 69 6e 65 72 51 75 65 72 79 45 6c 65 6d 65 6e 74 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 43 6f 6d 70 6f 6e 65 6e 74 57 69 74 68 4b 65 79 43 6f 6d 6d 61 6e 64 73 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 4b 65 79 73 22 2c 22 43 6f 6d 65 74 50 72 65 73 73 61 62 6c 65 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 68 6f 74 6f 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 5f 44 45 50 52 45 43 41 54 45 44 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 41 74 74 72 69 62 Data Ascii: /FB_PKG_DELIM/__d("CometOverlappingFacepile.react",["fbt","BaseContainerQueryElement.react","CometComponentWithKeyCommands.react","CometKeys","CometPressable.react","CometProfilePhoto.react","CometTooltip_DEPRECATED.react","CometVisualCompletionAttrib
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 6c 22 29 29 29 2e 69 36 34 5f 65 71 28 64 2c 6c 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 28 67 7c 7c 28 67 3d 62 28 22 62 73 5f 63 61 6d 6c 22 29 29 29 2e 69 36 34 5f 65 71 28 64 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 6d 3d 77 28 65 2c 31 29 3b 6d 3d 75 28 47 28 6d 2c 64 29 2c 31 29 3b 76 61 72 20 6e 3b 69 66 28 6d 5b 30 5d 21 3d 3d 30 29 6e 3d 33 3b 65 6c 73 65 7b 69 66 28 6d 5b 31 5d 3d 3d 3d 30 29 69 66 28 64 5b 30 5d 3c 30 29 72 65 74 75 72 6e 20 6a 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6f 28 6a 29 3b 6e 3d 33 7d 69 66 28 6e 3d 3d 3d 33 29 7b 6e 3d 74 28 65 2c 79 28 64 2c 6d 29 29 3b 72 65 74 75 72 6e 20 71 28 6d 2c 47 28 6e 2c 64 29 29 7d 7d 69 66 28 69 3d 3d 3d 31 29 7b 6d 3d 64 5b 30 5d 3b 69 66 28 6d 21 3d 3d 2d 32 31 34 37 34 38 33 36 34 38 29 Data Ascii: l"))).i64_eq(d,l))return e;if((g\|\|(g=b("bs_caml"))).i64_eq(d,h))return j;m=w(e,1);m=u(G(m,d),1);var n;if(m[0]!==0)n=3;else{if(m[1]===0)if(d[0]<0)return j;else return o(j);n=3}if(n===3){n=t(e,y(d,m));return q(m,G(n,d))}}if(i===1){m=d[0];if(m!==-2147483648)
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 39 38 29 3b 0a 5f 5f 64 28 22 4c 53 4d 65 73 73 61 67 65 54 68 72 65 61 64 55 6e 73 65 6e 64 61 62 69 6c 69 74 79 53 74 61 74 75 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 41 4e 5f 55 4e 53 45 4e 44 3a 30 2c 44 45 4e 59 5f 46 4f 52 5f 53 50 45 43 49 46 49 43 5f 49 44 53 3a 31 2c 44 45 4e 59 5f 49 46 5f 54 48 52 45 41 44 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 55 3a 32 2c 44 45 4e 59 5f 49 46 5f 54 48 52 45 41 44 5f 43 4f 4e 54 41 49 4e 53 5f 57 4f 52 4b 5f 55 53 45 52 3a 33 2c 44 45 4e 59 5f 49 46 5f 50 41 47 45 5f 54 48 52 45 41 44 3a 34 2c 44 45 4e 59 5f 49 46 5f 4d 41 52 4b 45 54 50 4c 41 43 45 5f 54 48 52 45 41 44 3a 35 2c 44 45 4e 59 5f 49 46 5f 43 41 4e 4e Data Ascii: 98);__d("LSMessageThreadUnsendabilityStatus",[],(function(a,b,c,d,e,f){a=Object.freeze({CAN_UNSEND:0,DENY_FOR_SPECIFIC_IDS:1,DENY_IF_THREAD_CONTAINS_PAU:2,DENY_IF_THREAD_CONTAINS_WORK_USER:3,DENY_IF_PAGE_THREAD:4,DENY_IF_MARKETPLACE_THREAD:5,DENY_IF_CANN
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 6c 69 66 74 22 2c 22 6f 6e 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 6c 69 66 74 22 2c 22 73 6f 6d 65 22 29 2c 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 6c 69 66 74 22 2c 22 6d 61 6e 79 22 29 7d 6c 3d 7b 6d 61 6e 79 3a 75 2c 6e 6f 6e 65 3a 72 2c 6f 6e 65 3a 74 2c 73 6f 6d 65 3a 73 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 73 68 6f 77 22 2c 22 6e 6f 6e 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 73 68 6f 77 22 2c 22 73 6f 6d 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 73 68 6f 77 22 2c 22 73 6f 6d Data Ascii: fanta.cookie.lift","one")}function u(){i("fanta.cookie.lift","some"),i("fanta.cookie.lift","many")}l={many:u,none:r,one:t,some:s};function v(){i("fanta.cookie.show","none")}function w(){i("fanta.cookie.show","some")}function x(){i("fanta.cookie.show","som
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 73 54 79 70 65 2e 55 70 64 61 74 65 54 61 62 2c 75 70 64 61 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 3c 3d 62 2e 63 6c 6f 73 65 57 61 74 65 72 6d 61 72 6b 3f 62 3a 7b 63 6c 69 65 6e 74 46 6f 72 63 65 64 4d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 3a 62 2e 63 6c 69 65 6e 74 46 6f 72 63 65 64 4d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 2c 63 6c 6f 73 65 57 61 74 65 72 6d 61 72 6b 3a 61 2c 6d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 3a 62 2e 6d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 2c 6f 70 65 6e 46 6c 79 6f 75 74 57 61 74 65 72 6d 61 72 6b 3a 62 2e 6f 70 65 6e 46 6c 79 6f 75 74 57 61 74 65 72 6d 61 72 6b 2c 6f 70 65 6e 57 61 74 65 72 6d 61 72 6b 3a 62 2e 6f 70 65 6e 57 61 74 65 72 Data Ascii: ctionsType.UpdateTab,updater:function(b){return a<=b.closeWatermark?b:{clientForcedMinimizeWatermark:b.clientForcedMinimizeWatermark,closeWatermark:a,minimizeWatermark:b.minimizeWatermark,openFlyoutWatermark:b.openFlyoutWatermark,openWatermark:b.openWater
2024-05-24 06:27:45 UTC	11729	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 72 65 74 75 72 6e 5b 7b 74 61 62 43 6f 6e 66 69 67 3a 7b 73 68 6f 75 6c 64 46 6f 63 75 73 3a 21 31 7d 2c 74 61 62 49 64 3a 62 2c 74 79 70 65 3a 64 28 22 4d 57 43 68 61 74 53 74 61 74 65 56 32 54 79 70 65 73 22 29 2e 4d 57 43 68 61 74 53 74 61 74 65 41 63 74 69 6f 6e 73 54 79 70 65 2e 55 70 64 61 74 65 54 61 62 2c 75 70 64 61 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 3c 3d 62 2e 6d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 7c 7c 64 28 22 4d 57 43 68 61 74 53 74 61 74 65 56 32 49 73 43 6c 6f 73 65 64 22 29 2e 69 73 43 6c 6f 73 65 64 28 62 29 3f 62 3a 7b 63 6c 69 65 6e 74 46 6f 72 63 65 64 4d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 3a 62 2e 63 6c 69 65 6e 74 46 6f 72 63 Data Ascii: unction k(a,b){return[{tabConfig:{shouldFocus:!1},tabId:b,type:d("MWChatStateV2Types").MWChatStateActionsType.UpdateTab,updater:function(b){return a<=b.minimizeWatermark\|\|d("MWChatStateV2IsClosed").isClosed(b)?b:{clientForcedMinimizeWatermark:b.clientForc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.4	50773	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	1588	OUT	POST /track?d=Chrome&cou=US&cos=Windows&r=pjnewsletter.com&rs=pjnewsletter.com&sid=8888&t=1716532025&cip=8.46.123.175&sn=&tgt=0&osv=10&bv=117.0&brn=Chrome&wi=540&he=303&app=&AV_PUBLISHERID=64db4ddc8904509d8303ce64&test=5&d64=244578ccbebd41e3744959cc05d9b210&d63=244578ccbebd41e3744959cc05d9b210&aafaid=&proto=https&uid=1716532025945-172031150014-000201-002-004790&stagid=6500061b317aecac0b064b34&stplid=6500061ba4211b4fae0a4124&d35=&d36=6.2.212&cb=62518562534&d39=&d65=Control&d66=8.5.6&d74=&d56=&d86=&d87=&d88=&d89=&d90=&apppkg=&d9=0000&prbdres=&prbdlevDB=&prebdlevEnt=&prbdsup=whiteOps&d16=2&d37=realtime&AV_WIDTH=540&AV_HEIGHT=303 HTTP/1.1 Host: track1.aniview.com Connection: keep-alive Content-Length: 726 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aniC=1716532025945-172031150014-000201-002-004790; 1_C_9=73e2d52bb252aa355f5ddbe59e41688; 1_C_31=c3f2dced77d84f53905889bf42173c38; 1_C_55=4426393169609033625; 1_C_23=99e92fd7-7df6-414d-ad83-81abe903bf95; 1_C_215=532c50a4-cd6b-40c9-b238-9f975626694b-6650333c-5553; 1_C_5=LWKAUNHL-D-BFYD; 1_C_200=RX-b0419578-1025-453b-9458-3b49bf185e5c-003
2024-05-24 06:27:44 UTC	726	OUT	Data Raw: 5b 22 26 63 6f 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 6e 69 64 3d 35 39 63 39 31 34 38 36 32 38 61 30 36 31 32 64 61 33 36 38 39 32 38 38 26 63 6f 63 69 64 3d 36 35 30 30 30 35 34 61 31 37 66 61 33 61 30 33 65 37 30 38 36 66 34 37 26 6e 63 69 64 3d 36 34 64 64 65 62 39 35 34 30 38 32 39 61 34 64 34 35 30 35 31 31 34 34 26 63 6f 61 73 69 64 3d 36 34 64 64 65 63 30 39 65 66 35 65 32 34 31 66 63 31 30 36 31 32 38 37 26 6e 61 73 69 64 3d 36 35 37 39 61 38 38 33 61 34 66 32 64 62 30 64 30 30 30 62 38 62 64 39 26 6f 66 70 72 3d 32 26 65 3d 69 6e 69 74 41 64 26 76 69 3d 30 26 64 31 3d 76 70 61 69 64 26 70 6c 74 3d 32 22 2c 22 70 69 64 3d 36 34 64 62 34 64 64 63 38 39 30 34 35 30 39 64 38 33 30 33 63 65 36 34 26 63 Data Ascii: ["&copid=64db4ddc8904509d8303ce64&nid=59c9148628a0612da3689288&cocid=6500054a17fa3a03e7086f47&ncid=64ddeb9540829a4d45051144&coasid=64ddec09ef5e241fc1061287&nasid=6579a883a4f2db0d000b8bd9&ofpr=2&e=initAd&vi=0&d1=vpaid&plt=2","pid=64db4ddc8904509d8303ce64&c
2024-05-24 06:27:45 UTC	251	IN	HTTP/1.1 200 OK date: Fri, 24 May 2024 06:27:45 GMT access-control-allow-origin: * content-length: 0 cache-control: max-age=0, no-cache, no-store set-cookie: version=av19.0.1-9087bbd2d95aed8a792676e2d3fd694334f8dc83; path=/ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.4	50772	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	780	OUT	POST /vz HTTP/1.1 Host: c.mgid.com Connection: keep-alive Content-Length: 747 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://pjnewsletter.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QHvdOXcbKaEnQTGlsWxpXVUc_x._bPr7pKN1cy6_1cs-1716532011-1.0.1.1-cRaiX1FtklY8fBbGGNmTRvTTIGyOKu3x38nOA81RUlAJj5U59jU1cfOnq94K1VPOKpuZqWqF94vVJwzIwB2gpQ; muidn=o4n2DX9tTBrn
2024-05-24 06:27:44 UTC	747	OUT	Data Raw: 7b 22 77 69 64 67 65 74 44 61 74 61 22 3a 7b 22 63 6f 6d 70 6f 73 69 74 65 49 64 22 3a 31 36 30 34 30 36 33 2c 22 75 6e 69 71 75 65 48 61 73 68 22 3a 22 6c 77 6b 61 75 67 6e 66 6b 61 68 72 7a 39 75 6e 70 71 61 22 2c 22 76 69 73 69 62 6c 65 54 69 6d 65 22 3a 36 31 38 34 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 36 36 35 30 33 33 33 33 2d 30 35 35 66 39 22 2c 22 75 75 69 64 22 3a 22 61 31 63 39 61 39 34 34 2d 31 39 39 36 2d 31 31 65 66 2d 39 62 37 36 2d 63 38 34 62 64 36 38 33 37 30 63 30 22 7d 2c 22 74 65 61 73 65 72 73 44 61 74 61 22 3a 5b 7b 22 63 6f 6d 70 6f 73 69 74 65 49 64 22 3a 31 36 30 34 30 36 33 2c 22 73 68 6f 77 48 61 73 68 22 3a 22 69 41 55 4a 79 6a 64 67 38 51 50 43 32 4d 6d 77 63 4a 6e 37 36 61 50 4e 6e 55 2d 33 4a 30 66 68 44 48 6e 4d 41 58 Data Ascii: {"widgetData":{"compositeId":1604063,"uniqueHash":"lwkaugnfkahrz9unpqa","visibleTime":6184,"sessionId":"66503333-055f9","uuid":"a1c9a944-1996-11ef-9b76-c84bd68370c0"},"teasersData":[{"compositeId":1604063,"showHash":"iAUJyjdg8QPC2MmwcJn76aPNnU-3J0fhDHnMAX
2024-05-24 06:27:45 UTC	306	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 06:27:45 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888b38be4fdd728a-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.4	50771	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:44 UTC	610	OUT	GET /rsrc.php/v3iGgu4/yv/l/en_GB/vthHJGQUf_5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: +J31iqLu9t7ZXZ0nULJA/A== Expires: Fri, 23 May 2025 13:09:35 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 3cu/KyB+TjoOKCDYYPxnYPPvieNeaTkL1pYGKWwb4q+f8Sc1e1WjVyc6MwnAqOGVHgLVQ19lgA6UfkVVNCm9zw== Date: Fri, 24 May 2024 06:27:45 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3414, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 156549
2024-05-24 06:27:45 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-24 06:27:45 UTC	15823	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 47 72 6f 75 70 53 74 75 62 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 3d 61 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 61 7d 62 3d 61 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 53 74 75 62 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 69 6c Data Ascii: /FB_PKG_DELIM/__d("AnimatePresenceGroupStub",[],(function(a,b,c,d,e,f){"use strict";function a(a){a=a.children;return a}b=a;f["default"]=b}),66);__d("AnimatePresenceStub",[],(function(a,b,c,d,e,f){"use strict";function g(){}function a(a){var b=a.chil
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 73 65 64 29 3d 3d 3d 21 30 3b 67 3d 21 67 26 26 28 66 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 66 2e 69 73 5f 74 6f 75 72 5f 63 6f 6d 70 6c 65 74 65 64 29 3d 3d 3d 21 30 3b 66 3d 69 28 62 29 3b 6a 3f 65 3d 64 28 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 6c 75 73 41 64 6d 69 6e 45 64 75 63 61 74 69 6f 6e 4e 75 78 54 6f 75 72 53 74 72 69 6e 67 73 22 29 2e 67 65 74 43 6f 6e 74 65 78 74 75 61 6c 54 6f 6f 6c 74 69 70 41 66 74 65 72 44 69 73 6d 69 73 73 69 6e 67 28 29 3a 67 26 26 28 65 3d 64 28 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 6c 75 73 41 64 6d 69 6e 45 64 75 63 61 74 69 6f 6e 4e 75 78 54 6f 75 72 53 74 72 69 6e 67 73 22 29 2e 67 65 74 43 6f 6e 74 65 78 74 75 61 6c 54 6f 6f 6c 74 69 70 28 29 29 3b 62 3d 64 28 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 Data Ascii: sed)===!0;g=!g&&(f==null?void 0:f.is_tour_completed)===!0;f=i(b);j?e=d("CometProfilePlusAdminEducationNuxTourStrings").getContextualTooltipAfterDismissing():g&&(e=d("CometProfilePlusAdminEducationNuxTourStrings").getContextualTooltip());b=d("CometProfileP
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 76 3d 63 28 22 75 73 65 56 69 73 69 62 69 6c 69 74 79 4f 62 73 65 72 76 65 72 22 29 28 7b 6f 6e 48 69 64 64 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 68 69 64 64 65 6e 52 65 61 73 6f 6e 3b 61 21 3d 3d 22 43 4f 4d 50 4f 4e 45 4e 54 5f 55 4e 4d 4f 55 4e 54 45 44 22 26 26 28 45 28 21 31 29 2c 43 2e 63 75 72 72 65 6e 74 3d 21 31 2c 79 2e 63 75 72 72 65 6e 74 7c 7c 49 28 29 2c 79 2e 63 75 72 72 65 6e 74 3d 21 31 2c 41 28 21 31 29 29 7d 2c 6f 6e 56 69 73 69 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 21 30 29 7d 7d 29 3b 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 3d 3d 3d 77 29 72 65 74 75 72 6e 3b 79 2e 63 75 72 72 65 6e 74 3d 21 31 3b 43 2e 63 75 72 72 65 6e 74 3d 21 31 3b 41 28 21 31 29 3b 78 28 73 29 7d 2c 5b 77 2c 73 5d 29 3b Data Ascii: v=c("useVisibilityObserver")({onHidden:function(a){a=a.hiddenReason;a!=="COMPONENT_UNMOUNTED"&&(E(!1),C.current=!1,y.current\|\|I(),y.current=!1,A(!1))},onVisible:function(){E(!0)}});k(function(){if(s===w)return;y.current=!1;C.current=!1;A(!1);x(s)},[w,s]);
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 65 61 64 65 72 43 6f 76 65 72 4d 65 64 69 61 2e 72 65 61 63 74 22 29 2c 7b 7d 29 2c 63 68 69 6c 64 72 65 6e 3a 6d 2e 6a 73 78 28 79 2c 7b 69 73 4c 6f 63 6b 65 64 50 72 6f 66 69 6c 65 3a 62 2c 72 65 6e 64 65 72 65 64 50 72 6f 66 69 6c 65 3a 64 2c 75 73 65 72 3a 65 2c 76 69 65 77 65 72 3a 61 7d 29 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 32 32 36 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 76 65 72 50 68 6f 74 6f 55 70 6c 6f 61 64 65 72 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 46 69 6c 65 53 65 6c 65 63 74 6f 72 2e 72 65 61 63 74 22 2c 22 50 72 6f 66 69 6c 65 43 6f 6d Data Ascii: eaderCoverMedia.react"),{}),children:m.jsx(y,{isLockedProfile:b,renderedProfile:d,user:e,viewer:a})})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),226);__d("ProfileCometCoverPhotoUploaderContainer.react",["CometFileSelector.react","ProfileCom
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 65 72 22 7d 2c 7b 6b 69 6e 64 3a 22 44 65 66 65 72 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 69 63 74 75 72 65 45 64 69 74 4d 65 6e 75 5f 75 73 65 72 22 7d 5d 7d 2c 7b 6b 69 6e 64 3a 22 44 65 66 65 72 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 69 63 74 75 72 65 54 65 6d 70 6f 72 61 72 79 45 64 69 74 4d 65 6e 75 5f 75 73 65 72 22 7d 5d 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 Data Ascii: er"},{kind:"Defer",selections:[{args:null,kind:"FragmentSpread",name:"ProfileCometProfilePictureEditMenu_user"}]},{kind:"Defer",selections:[{args:null,kind:"FragmentSpread",name:"ProfileCometProfilePictureTemporaryEditMenu_user"}]},{alias:null,args:[{kind
2024-05-24 06:27:45 UTC	14884	IN	Data Raw: 49 6e 62 6f 78 42 72 6f 61 64 63 61 73 74 42 75 63 6b 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 74 6f 72 79 5f 62 75 63 6b 65 74 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 44 69 72 65 63 74 4d 65 73 73 61 67 65 54 68 72 65 61 64 42 75 63 6b 65 74 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 6f 64 65 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 Data Ascii: InboxBroadcastBucketConnection",kind:"LinkedField",name:"story_bucket",plural:!1,selections:[{alias:null,args:null,concreteType:"DirectMessageThreadBucket",kind:"LinkedField",name:"nodes",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name
2024-05-24 06:27:45 UTC	16384	IN	Data Raw: 6f 6e 73 55 6e 69 74 43 6f 6e 74 65 78 74 5f 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 55 6e 69 74 46 72 61 67 6d 65 6e 74 52 65 66 2e 67 72 61 70 68 71 6c 22 29 2c 67 29 3b 67 3d 63 28 22 75 73 65 43 6f 6d 65 74 52 65 6c 61 79 45 6e 74 72 79 70 6f 69 6e 74 43 6f 6e 74 65 78 74 75 61 6c 45 6e 76 69 72 6f 6e 6d 65 6e 74 50 72 6f 76 69 64 65 72 22 29 28 29 3b 67 3d 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 75 73 65 45 6e 74 72 79 50 6f 69 6e 74 4c 6f 61 64 65 72 28 67 2c 63 28 22 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 55 6e 69 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 29 29 3b 76 61 72 20 6d 3d 67 5b 30 5d 2c 6f 3d 67 5b 31 5d 3b 61 3d 28 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 28 67 3d 61 2e 75 73 65 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 Data Ascii: onsUnitContext_recommendationUnitFragmentRef.graphql"),g);g=c("useCometRelayEntrypointContextualEnvironmentProvider")();g=d("CometRelay").useEntryPointLoader(g,c("RecommendationsUnit.entrypoint"));var m=g[0],o=g[1];a=(a==null?void 0:(g=a.user)==null?void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.4	50774	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:45 UTC	775	OUT	GET /rsrc.php/v3iMSf4/yS/l/en_GB/yBXOsimGcZKLsi-rwUHCTl9YgrH-m4a6jZ0Ta9E4kz0K_s-WrgVtL_OGB5ZoB1cLpch5bjod9Ki8-f0RvFaDRltmkNkYY8jZuVHuwwDateX8xhNBFZ41W3g_g8nScjVqE0xbaPP6WhMS7bc_HmQ2JWvIJ2r9mkoV0ZzHknm8734VNtKL.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.4	50775	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:45 UTC	610	OUT	GET /rsrc.php/v3iJWr4/yX/l/en_GB/6NM1mGa6FYo.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 06:27:45 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: sx/yrhb6QxDV5zNilXLKig== Expires: Sat, 24 May 2025 06:27:45 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: jY67vFzWMFKHQRszns6bTRC3qE5PBcLcfvbxfJIppApYRZ65HoWIpXM2sAotwaNm/njLjy5HL0fkb8HyXV6KPw== Date: Fri, 24 May 2024 06:27:45 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=42, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 410643
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 70 70 47 72 6f 75 70 73 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2c 7b 63 68 69 6c Data Ascii: ;/FB_PKG_DELIM/__d("AppGroupsFilled16.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 16 16",width:"1em",height:"1em",fill:"currentColor"},a,{chil
2024-05-24 06:27:45 UTC	1500	IN	Data Raw: 41 70 70 47 72 6f 75 70 73 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 29 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 41 72 72 6f 77 73 4c 65 66 74 52 69 67 68 74 43 69 72 63 6c 65 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 77 69 64 74 68 3a 22 Data Ascii: AppGroupsFilled16.svg.react"));g["default"]=a}),98);__d("ArrowsLeftRightCircleFilled16.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 16 16",width:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.4	50776	18.202.254.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:45 UTC	1033	OUT	GET /merge?pid=85&3pid=AAJTiE7MoGcAABTuYnJhWg&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F579%2F1241%2F3%2F6.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pjnewsletter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItUjALZH-23s9-wqRaSHYOyf; _ljtrtb_80=LWKAUNHL-D-BFYD; _ljtrtb_58=7F542745-2D60-41EB-9A96-52B90C82DF34; ljtrtb=eJyrVjK1ULJSMnczNTEyNzHVNXIxM9A1MXR10rV0tDTTNTVysjRwtjBycTM2UdJRsjAAqvUJ93YM9fPw0XXRdXKLdFGqBQD%2BVA90; _ljtrtb_92=4426393169609033625

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.4	50777	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:45 UTC	1624	OUT	GET /pagead/interaction/?ai=CnAoaLzNQZoPvMYjL7_UPwqy1iAyPvojvd9DH4sPzEgoQASC4270rYMkGoAHss_LAAcgBCagDAcgDywSqBKgCT9DQB4n4o8GyNhwWqgR2CEZiP0zctFzEHF2lbA2EV7q3GHw_7i4fof1B90GKV20E0wazBf3XOTEiRVeIYJeqAWv74xtpjNWdbebZQ_1LjI_jyMAXmx0cz37Zrcy206EvidQ-UozVREWXmuLlHsoJRKxUWuiPrV-uTsUwbGOQZ9c6RmFWQd0l7NTUPzNTn4FETo_BZ2Y6q-lT817LkMkEmkPZvcVz9aurCHtl8IJzIkkzbEUKshBsJdhVaNwPMH79Ct0DXkkKDBljRZ07UsmJJSkuKY1C-X6PfqVO02ByWNkL9nAB2WcnuzTR3cQhbdjlCXRl0fw_UWyKQkY00ohX7wNa7gSedVBxwiJS2UtAzdEoTfvnhXOrm9GEuzUztDS-1XScjWR02FvABOTrgd39BIgF6IyGrU-gBi6AB_zLjb8CqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOljQnbGI1KWGA7EJdRSug8aIt4mACgGYCwHICwGADAHaDBEKCxCw96fY7_C8oOsBEgIBA6oNAlVTyA0BuBOcG9gTDdAVAZgWAfgWAYAXAbIYCRICi08YLiIBAOgYAQ&sigh=PF0qigZl3Ls&cid=CAQSTgDaQooLjJeHumuCjRK8dbvE9OFLzW-K6hucnFT1vIJaVyDL_GanF29uK7NnMO99ojFf7beSDPCIcY19abXg1GlzzYyiwOcNfatycd864g&label=wi [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.4	50778	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 06:27:45 UTC	1633	OUT	GET /pagead/interaction/?ai=CSRdgMDNQZrrcD6eU7_UPu4uiiAOG65bpd9bFhf3eEL_hHhABILjbvStgyQagAZ26zZoDyAEBqQIiF0A1MwcoPqgDAcgDywSqBKoCT9Asl5OXzJvRQQpqX5lWBTLp6TcZQMtO7xJ23rUHI5L095cVIAMYmiLRO_q_nj6XNQTeGk0hEyBjv0f7umT8giBEoRpy-gnw0PBMUkHMBeciYVe2ZIY-1mcXkv7uQ1D45uuroBROJssJv-01I9csc5xFq2oanmjqHbLGXFYIZAuJ0G3jjx4k37sYYUzln4HIJkORcHmkNuYw-zQZXm6zKiLj8GKlT_W8S2e0OsZ8KaUppig19pBIPKhxUj9hP52YJYauPvkKAUjdW9V5a6Ra8ZfIc93RTQSS5KmDt97XxZu5SuB-wIomg_Nt0gwo7KHG27aMC-AykgfeGuGy1KG7EVAZKKm7LYAdNVEXiHqslK1hEIUqXfjN-CWfMRtZjS6qNpnNWnpU2QEK6sAEntqhm5IEiAXMu9rPRqAGAoAHy8WyZagH2baxAqgH1ckbqAemvhuoB47OG6gHk9gbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQKoB-qxsQKoB5m1sQKoB763sQKoB_jCsQKoB_vCsQLYBwHSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpY4pTMiNSlhgOxCQqzjH9vtidcgAoBmAsByAsB2gwRCgsQ8MeSmbKyjrL1ARICAQOqDQJVU8gNAdgTDYgUA9AVAZgWAfgWAYAXAbIYCRICi1QYAiIBAA&sigh=PGMNx01Be6Y&cid=CAQSTwDaQooL90qYTeD_eDZCvFMGKJKs43LLl_5MJWPDpsc8GQ0yq7FGBJ37-7qxH7zXyJj1vccZx7Qu0qedydtnGyIH9vd4AHvNgVgbVP2zSt0 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn6EJCE0xjNL0gIFPnE64ua713AGtQciqrPsXOP7Dqojuz9Ngvg4pOW6E4TWHg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.4	50779	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.4	50787	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.4	50780	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.4	50790	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.4	50783	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.4	50784	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.4	50786	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.4	50782	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.4	50785	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.4	50792	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.4	50788	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.4	50793	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.4	50791	18.195.237.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.4	50794	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.4	50789	46.228.174.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.4	50795	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.4	50796	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.4	50797	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.4	50800	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.4	50799	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.4	50803	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.4	50801	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.4	50804	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.4	50805	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.4	50806	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.4	50807	18.159.201.246	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.4	50808	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.4	50809	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.4	50810	46.228.174.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.4	50811	18.202.254.222	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.4	50812	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.4	50813	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.4	50814	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.4	50817	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.4	50815	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.4	50816	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.4	50822	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.4	50821	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.4	50819	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.4	50818	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.4	50820	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.4	50824	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.4	50823	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.4	50827	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.4	50826	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.4	50830	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.4	50833	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.4	50834	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.4	50831	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.4	50832	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.4	50829	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.4	50836	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.4	50845	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.4	50840	172.240.45.70	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.4	50828	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.4	50837	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.4	50835	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.4	50844	18.195.237.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.4	50843	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.4	50842	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.4	50841	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.4	50848	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.4	50846	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.4	50847	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.4	50850	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.4	50849	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.4	50852	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.4	50854	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.4	50853	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.4	50857	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.4	50851	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.4	50861	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.4	50856	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.4	50855	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.4	50863	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.4	50859	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.4	50858	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.4	50865	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.4	50860	52.48.217.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.4	50872	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.4	50873	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.4	50871	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.4	50877	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.4	50878	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.4	50874	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.4	50870	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.4	50869	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.4	50876	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.4	50881	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.4	50882	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.4	50880	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.4	50884	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.4	50883	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.4	50879	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.4	50875	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.4	50886	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.4	50888	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.4	50887	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.4	50889	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.4	50864	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.4	50891	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.4	50904	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.4	50905	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.4	50906	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.4	50907	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.4	50899	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.4	50898	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.4	50900	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.4	50901	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.4	50903	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.4	50902	208.93.169.131	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.4	50909	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.4	50908	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.4	50913	172.240.45.70	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.4	50916	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.4	50917	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.4	50918	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.4	50912	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.4	50911	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.4	50915	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.4	50914	18.159.201.246	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.4	50920	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.4	50919	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.4	50921	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.4	50922	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.4	50923	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.4	50924	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.4	50925	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.4	50927	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.4	50926	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.4	50932	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.4	50930	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.4	50938	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.4	50937	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.4	50933	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.4	50944	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.4	50939	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.4	50934	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.4	50935	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.4	50929	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.4	50931	162.19.138.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.4	50940	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.4	50945	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.4	50946	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.4	50941	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.4	50943	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.4	50942	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.4	50947	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.4	50948	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.4	50949	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.4	50950	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.4	50951	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.4	50952	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.4	50953	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.4	50959	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.4	50957	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.4	50958	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.4	50956	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.4	50960	178.250.1.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.4	50962	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.4	50964	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.4	50963	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.4	50965	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.4	50968	35.190.80.1	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.4	50966	34.250.113.16	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.4	50970	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.4	50969	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.4	50971	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.4	50974	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.4	50976	35.190.80.1	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.4	50972	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.4	50973	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.4	50975	64.233.184.155	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.4	50980	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.4	50983	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.4	50979	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.4	50982	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.4	50981	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.4	50985	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.4	50984	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.4	50977	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.4	50978	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.4	50988	162.19.138.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.4	50987	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.4	50986	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.4	50992	104.16.192.58	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.4	50989	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.4	50990	178.250.1.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.4	50995	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.4	50994	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.4	50993	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.4	50991	37.252.171.53	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.4	50997	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.4	50998	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.4	51000	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.4	50999	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.4	51003	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.4	51004	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.4	51011	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.4	51001	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.4	51002	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.4	51005	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.4	51007	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.4	51008	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.4	51012	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.4	51018	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.4	51013	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.4	51016	178.250.1.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.4	51014	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.4	51015	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.4	51017	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.4	51009	165.22.209.237	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.4	51021	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.4	51024	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.4	51025	34.36.216.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.4	51022	64.233.184.156	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.4	51031	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.4	51030	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.4	51033	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.4	51028	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.4	51029	46.228.164.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.4	51035	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.4	51037	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.4	51032	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.4	51036	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.4	51041	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.4	51040	142.250.184.228	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.4	51042	54.164.74.54	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.4	51043	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.4	51048	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.4	51044	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.4	51046	37.252.171.53	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.4	51045	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.4	51058	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.4	51055	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.4	51056	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.4	51059	172.66.43.213	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.4	51060	34.149.139.129	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.4	51061	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.4	50708	157.240.253.1	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.4	51062	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.4	51063	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.4	51065	157.240.252.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.4	51067	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.4	51066	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.4	51064	157.240.252.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.4	51070	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.4	51068	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.4	51069	174.137.133.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.4	51071	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.4	51081	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.4	51083	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.4	51072	157.240.252.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.4	51073	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.4	51086	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.4	51084	216.219.92.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.4	51080	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.4	51078	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.4	51085	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.4	51079	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.4	51082	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.4	51090	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.4	51089	157.240.252.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.4	51093	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.4	51094	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.4	51091	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.4	51097	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.4	51092	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.4	51095	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.4	51101	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.4	51096	134.122.109.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.4	51100	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.4	51099	178.250.1.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.4	51102	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.4	51108	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.4	51118	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.4	51114	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.4	51128	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.4	51129	199.232.192.134	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.4	51119	157.240.24.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.4	51111	178.250.1.11	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.4	51131	104.16.203.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.4	51116	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.4	51110	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.4	51104	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.4	51124	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.4	51112	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.4	51123	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.4	51120	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.4	51113	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.4	51107	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.4	51122	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.4	51127	157.240.0.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.4	51115	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.4	51121	157.240.253.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.4	51125	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.4	51136	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.4	51139	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.4	51130	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.4	51133	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.4	51132	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.4	51135	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.4	51134	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.4	51138	188.42.63.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.4	51137	142.250.184.228	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.4	51143	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.4	51142	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.4	51144	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.4	51146	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.4	51147	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.4	51148	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.4	51155	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.4	51154	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.4	51156	173.0.146.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.4	51153	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.4	51077	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.4	51158	104.26.3.234	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.4	51160	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.4	51157	52.17.55.191	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.4	51163	38.91.45.7	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.4	51166	130.211.27.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.4	51182	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.4	51162	35.214.244.63	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.4	51183	174.137.133.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.4	51169	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.4	51165	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.4	51184	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.4	51164	188.42.63.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.4	51168	18.194.143.242	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.4	51167	91.228.74.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.4	51176	157.240.252.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.4	51173	188.42.63.48	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.4	51187	216.219.92.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.4	51177	188.42.63.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.4	51178	188.42.63.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.4	51180	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.4	51179	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.4	51190	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.4	51181	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.4	51174	154.59.122.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.4	51189	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.4	51186	157.240.251.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.4	51188	157.240.251.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.4	51185	157.240.251.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.4	51170	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.4	51194	104.19.130.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.4	51196	104.27.203.88	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.4	51195	104.19.130.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.4	51192	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.4	51191	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.4	51193	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.4	51198	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.4	51200	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.4	51201	88.221.124.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.4	51207	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.4	51208	104.244.42.129	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.4	51210	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.4	51213	142.0.197.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.4	51222	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.4	51224	104.21.73.79	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.4	51223	188.114.96.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.4	51229	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.4	51221	54.77.98.227	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.4	51219	157.240.251.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.4	51225	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.4	51220	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.4	51226	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.4	51227	188.42.63.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.4	51228	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.4	51231	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.4	51233	104.244.42.1	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.4	51235	104.16.203.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.4	51218	165.22.209.237	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.4	51234	169.150.247.39	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.4	51237	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.4	51236	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.4	51209	104.244.42.129	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.4	51241	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.4	51239	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.4	51243	104.16.203.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.4	51242	108.138.8.164	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.4	51252	104.244.42.1	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.4	51251	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.4	51250	173.0.146.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.4	51254	130.211.27.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.4	51253	169.197.150.7	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.4	51255	104.244.42.1	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.4	51258	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.4	51257	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.4	51261	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.4	51262	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.4	51259	104.16.203.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.4	51260	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.4	51266	104.22.54.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.4	51256	165.22.209.237	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.4	51271	104.22.52.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.4	51267	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.4	51276	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.4	51268	188.42.63.49	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.4	51269	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.4	51272	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.4	51277	188.42.63.48	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.4	51274	157.240.251.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.4	51275	157.240.251.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.4	51273	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.4	51278	188.42.63.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.4	51285	67.202.105.32	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.4	51280	172.217.16.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.4	51279	188.42.63.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.4	51265	52.49.45.15	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.4	51281	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.4	51282	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.4	51283	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.4	51286	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.4	51291	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.4	51288	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.4	51293	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.4	51290	34.241.181.187	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.4	51289	185.89.210.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.4	51295	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.4	51304	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.4	51296	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.4	51299	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.4	51297	52.95.115.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.4	51300	18.195.237.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.4	51305	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.4	51303	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.4	51302	46.228.174.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.4	51316	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.4	51308	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.4	51319	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.4	51307	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.4	51309	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.4	51310	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.4	51325	104.27.203.88	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.4	51326	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.4	51314	35.166.89.22	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.4	51312	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.4	51329	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.4	51321	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.4	51331	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.4	51311	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.4	51318	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.4	51317	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.4	51330	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.4	51323	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.4	51322	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.4	51320	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.4	51315	13.32.27.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.4	51313	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.4	51324	95.101.148.20	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.4	51327	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.4	51333	104.22.55.206	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.4	51328	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.4	51332	104.244.43.131	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.4	51336	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.4	51339	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.4	51340	80.77.87.166	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.4	51335	34.246.206.6	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.4	51343	185.184.8.90	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.4	51350	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.4	51342	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.4	51341	82.145.213.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.4	51351	54.164.74.54	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.4	51353	104.22.52.173	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.4	51352	142.250.185.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.4	51354	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.4	51356	52.214.77.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.4	51357	142.250.186.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.4	51358	142.0.197.196	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.4	51369	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.4	51360	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.4	51361	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.4	51370	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.4	51362	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.4	51375	172.64.151.101	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.4	51366	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.4	51365	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.4	51367	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.4	51378	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.4	51377	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.4	51380	52.46.155.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.4	51374	23.20.26.217	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.4	51376	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.4	51373	52.210.157.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.4	51383	52.214.77.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.4	51381	46.228.174.117	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.4	51390	35.186.253.211	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.4	51391	34.36.216.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.4	51386	52.46.155.104	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.4	51393	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.4	51389	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.4	51394	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.4	51396	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.4	51404	188.114.97.3	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.4	51408	35.244.174.68	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.4	51382	18.192.200.108	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.4	51388	35.71.131.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.4	51385	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.4	51395	3.71.149.231	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.4	51403	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.4	51397	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.4	51402	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.4	51392	54.157.60.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.4	51399	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.4	51406	145.40.97.66	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.4	51387	208.93.169.131	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.4	51398	46.228.164.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.4	51414	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.4	51410	185.89.210.82	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.4	51413	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.4	51412	142.250.186.162	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.4	51411	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.4	51416	104.16.202.119	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.4	51405	77.245.57.72	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.4	51417	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.4	51415	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.4	51421	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.4	51419	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.4	51430	35.244.174.68	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.4	51424	104.244.42.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.4	51426	104.244.42.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.4	51418	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.4	51425	104.244.42.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.4	51423	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.4	51435	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.4	51434	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.4	51442	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.4	51443	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.4	51432	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.4	51431	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.4	51248	104.244.42.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.4	51422	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.4	51444	67.202.105.21	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.4	51429	34.240.216.83	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.4	51450	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.4	51433	3.75.47.4	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.4	51448	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.4	51446	142.250.185.110	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.4	51447	34.251.66.169	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.4	51449	18.239.68.199	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.4	51452	104.244.42.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.4	51453	104.244.42.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.4	51455	35.244.174.68	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.4	51457	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.4	51467	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.4	51466	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.4	51472	104.244.43.131	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.4	51471	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.4	51474	104.19.133.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.4	51473	104.19.133.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.4	51462	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.4	51460	178.250.1.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.4	51475	52.49.45.15	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.4	51468	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.4	51458	157.240.251.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.4	51463	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.4	51461	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.4	51464	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.4	51469	18.159.201.246	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.4	51470	46.228.174.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.4	51477	3.33.220.150	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.4	51476	52.210.157.137	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.4	51479	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.4	51478	185.89.211.84	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.4	51480	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.4	51488	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.4	51491	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.4	51489	35.186.253.211	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.4	51486	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.4	51484	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.4	51482	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.4	51487	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.4	51485	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.4	51494	216.58.206.34	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.4	51483	89.149.192.200	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.4	51492	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.4	51490	107.178.254.65	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.4	51493	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.4	51500	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.4	51498	145.40.97.66	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.4	51505	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.4	51503	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.4	51496	157.240.0.35	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.4	51506	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.4	51504	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.4	51508	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.4	51509	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.4	51507	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.4	51512	52.46.143.56	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.4	51515	34.111.113.62	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.4	51502	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.4	51501	147.75.84.158	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.4	51516	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.4	51513	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.4	51511	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.4	51499	3.120.79.213	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.4	51517	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.4	51518	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.4	51519	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.4	51520	178.250.1.9	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.4	51525	192.132.33.69	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.4	51524	54.146.48.107	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.4	51529	35.244.159.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.4	51523	37.252.171.85	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.4	51526	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.4	51528	35.214.149.91	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1374	192.168.2.4	6635	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1375	192.168.2.4	63055	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1376	192.168.2.4	38410	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1377	192.168.2.4	9572	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1378	192.168.2.4	8676	77.245.57.72	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1379	192.168.2.4	53122	104.244.42.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1380	192.168.2.4	1209	104.244.42.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1381	192.168.2.4	9576	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.4	51028	74.119.117.16	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1383	192.168.2.4	27103	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.4	49763	104.19.131.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1385	192.168.2.4	19190	35.186.253.211	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.4	49772	104.19.129.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1387	192.168.2.4	34704	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1388	192.168.2.4	29065	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1389	192.168.2.4	43178	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1390	192.168.2.4	1630	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1391	192.168.2.4	41039	35.214.149.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1392	192.168.2.4	1163	104.244.42.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1393	192.168.2.4	1616	104.244.42.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1394	192.168.2.4	1906	89.149.192.200	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.4	49759	3.120.79.213	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1396	192.168.2.4	37299	3.120.79.213	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1397	192.168.2.4	19352	3.120.79.213	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1398	192.168.2.4	64060	35.244.174.68	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.4	49780	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1400	192.168.2.4	37613	142.250.185.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1401	192.168.2.4	40228	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1402	192.168.2.4	6905	52.210.157.137	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.4	49787	104.244.42.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1404	192.168.2.4	59865	35.214.149.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1405	192.168.2.4	55199	104.244.42.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.4	49775	34.117.239.71	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1407	192.168.2.4	43984	34.149.50.64	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1408	192.168.2.4	46692	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1409	192.168.2.4	26434	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1410	192.168.2.4	29311	54.77.179.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1411	192.168.2.4	55134	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1412	192.168.2.4	4876	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1413	192.168.2.4	41463	146.75.120.157	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1414	192.168.2.4	30482	18.185.176.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1415	192.168.2.4	16992	104.244.42.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1416	192.168.2.4	1971	172.240.155.100	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.4	51246	104.244.42.133	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1418	192.168.2.4	2700	38.91.45.7	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1419	192.168.2.4	10810	57.129.18.111	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1420	192.168.2.4	13593	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1421	192.168.2.4	25395	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1422	192.168.2.4	33710	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1423	192.168.2.4	59481	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1424	192.168.2.4	54843	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.4	49810	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1426	192.168.2.4	20273	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1427	192.168.2.4	12060	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1428	192.168.2.4	36794	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1429	192.168.2.4	25889	104.244.42.195	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1430	192.168.2.4	38290	104.244.42.133	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1431	192.168.2.4	29067	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1432	192.168.2.4	1295	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1433	192.168.2.4	59193	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1434	192.168.2.4	17851	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1435	192.168.2.4	64708	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1436	192.168.2.4	41126	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1437	192.168.2.4	32356	104.244.42.195	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1438	192.168.2.4	47641	35.210.53.219	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1439	192.168.2.4	65199	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1440	192.168.2.4	19581	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1441	192.168.2.4	51602	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1442	192.168.2.4	1067	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1443	192.168.2.4	41079	35.214.149.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1444	192.168.2.4	36662	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1445	192.168.2.4	21752	54.195.106.144	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1446	192.168.2.4	54928	99.80.151.237	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1447	192.168.2.4	24844	34.111.113.62	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1448	192.168.2.4	1861	3.76.153.167	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1449	192.168.2.4	3846	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1450	192.168.2.4	11682	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1451	192.168.2.4	64063	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1452	192.168.2.4	6031	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1453	192.168.2.4	40684	35.214.149.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1454	192.168.2.4	8822	178.250.1.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1455	192.168.2.4	58604	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1456	192.168.2.4	62943	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1457	192.168.2.4	26004	35.210.53.219	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1458	192.168.2.4	47535	104.19.131.76	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1459	192.168.2.4	59802	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1460	192.168.2.4	43673	104.244.42.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1461	192.168.2.4	55427	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.4	49852	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1463	192.168.2.4	36816	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1464	192.168.2.4	64399	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1465	192.168.2.4	22530	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1466	192.168.2.4	64755	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1467	192.168.2.4	19285	142.250.185.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1468	192.168.2.4	4346	81.17.55.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1469	192.168.2.4	30459	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1470	192.168.2.4	35521	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1471	192.168.2.4	35116	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1472	192.168.2.4	27314	104.244.42.197	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1473	192.168.2.4	6790	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1474	192.168.2.4	22340	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1475	192.168.2.4	38509	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1476	192.168.2.4	2203	104.244.42.3	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.4	49879	104.244.42.197	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1478	192.168.2.4	15436	104.244.42.3	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1479	192.168.2.4	26764	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1480	192.168.2.4	10651	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1481	192.168.2.4	45283	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1482	192.168.2.4	23145	142.250.184.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1483	192.168.2.4	53454	35.214.149.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.4	49883	54.217.173.39	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.4	49893	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1486	192.168.2.4	51994	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1487	192.168.2.4	56247	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1488	192.168.2.4	37513	54.217.173.39	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1489	192.168.2.4	54105	3.121.111.244	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1490	192.168.2.4	52990	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1491	192.168.2.4	13368	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1492	192.168.2.4	29397	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1493	192.168.2.4	12804	142.250.185.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1494	192.168.2.4	7951	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1495	192.168.2.4	14311	35.214.149.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1496	192.168.2.4	42635	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1497	192.168.2.4	22808	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1498	192.168.2.4	64073	142.250.184.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1499	192.168.2.4	12017	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1500	192.168.2.4	8719	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.4	51398	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1502	192.168.2.4	24268	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1503	192.168.2.4	42743	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1504	192.168.2.4	61483	142.250.185.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1505	192.168.2.4	19317	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.4	49916	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1507	192.168.2.4	51580	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1508	192.168.2.4	1824	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1509	192.168.2.4	59957	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1510	192.168.2.4	44639	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1511	192.168.2.4	46431	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1512	192.168.2.4	45129	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1513	192.168.2.4	5421	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1514	192.168.2.4	45006	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1515	192.168.2.4	12874	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1516	192.168.2.4	23981	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1517	192.168.2.4	23136	104.26.3.234	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1518	192.168.2.4	59848	104.244.42.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1519	192.168.2.4	12526	34.250.113.16	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1520	192.168.2.4	9666	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1521	192.168.2.4	42078	178.250.1.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1522	192.168.2.4	58618	157.240.0.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1523	192.168.2.4	13507	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1524	192.168.2.4	1400	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1525	192.168.2.4	11316	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1526	192.168.2.4	32511	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1527	192.168.2.4	60976	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1528	192.168.2.4	65496	104.244.42.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1529	192.168.2.4	28376	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1530	192.168.2.4	3955	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1531	192.168.2.4	4518	178.250.1.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1532	192.168.2.4	16008	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1533	192.168.2.4	21693	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1534	192.168.2.4	3096	104.26.3.234	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1535	192.168.2.4	32743	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1536	192.168.2.4	26058	108.138.8.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1537	192.168.2.4	57406	178.250.1.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1538	192.168.2.4	29677	157.240.251.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1539	192.168.2.4	26553	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.4	49959	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1541	192.168.2.4	11210	52.201.179.227	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1542	192.168.2.4	29163	178.250.1.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1543	192.168.2.4	46744	178.250.1.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1544	192.168.2.4	24721	46.228.174.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1545	192.168.2.4	8097	3.75.47.4	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.4	49960	51.75.86.98	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1547	192.168.2.4	46144	3.66.33.135	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1548	192.168.2.4	5183	46.228.174.115	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1549	192.168.2.4	22745	52.46.155.104	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1550	192.168.2.4	22013	37.252.171.85	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1551	192.168.2.4	60791	34.240.216.83	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.4	49969	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1553	192.168.2.4	60658	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1554	192.168.2.4	65140	162.19.138.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1555	192.168.2.4	38858	52.201.179.227	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1556	192.168.2.4	7739	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1557	192.168.2.4	41113	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1558	192.168.2.4	22669	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1559	192.168.2.4	22765	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1560	192.168.2.4	47934	23.20.26.217	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1561	192.168.2.4	15104	104.19.132.76	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1562	192.168.2.4	29488	104.19.132.76	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1563	192.168.2.4	5418	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1564	192.168.2.4	47402	178.250.1.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1565	192.168.2.4	49840	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1566	192.168.2.4	1563	64.58.232.179	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1567	192.168.2.4	7792	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1568	192.168.2.4	26614	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1569	192.168.2.4	65043	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1570	192.168.2.4	40092	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1571	192.168.2.4	9299	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.4	49986	104.244.42.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1573	192.168.2.4	21818	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1574	192.168.2.4	53920	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1575	192.168.2.4	32038	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1576	192.168.2.4	41490	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1577	192.168.2.4	11496	52.17.40.72	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1578	192.168.2.4	46005	104.244.42.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1579	192.168.2.4	13246	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.4	50004	34.120.63.153	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1581	192.168.2.4	17684	178.250.1.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1582	192.168.2.4	42541	104.19.132.76	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.4	50009	104.19.132.76	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1584	192.168.2.4	31867	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1585	192.168.2.4	51803	178.250.1.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1586	192.168.2.4	3755	142.250.185.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1587	192.168.2.4	54306	51.89.9.254	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1588	192.168.2.4	64358	18.185.176.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1589	192.168.2.4	30640	108.138.8.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1590	192.168.2.4	52831	52.21.87.204	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.4	49999	46.228.174.115	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1592	192.168.2.4	2221	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.4	50003	3.124.61.113	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1594	192.168.2.4	47399	52.17.40.72	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1595	192.168.2.4	15550	52.17.40.72	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1596	192.168.2.4	43449	3.65.80.227	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1597	192.168.2.4	4615	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1598	192.168.2.4	26528	162.19.138.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1599	192.168.2.4	42505	52.46.143.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1600	192.168.2.4	47068	142.250.185.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1601	192.168.2.4	29959	104.244.42.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1602	192.168.2.4	10544	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1603	192.168.2.4	44382	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1604	192.168.2.4	44609	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1605	192.168.2.4	7778	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1606	192.168.2.4	45303	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.4	51263	104.244.42.1	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.4	51245	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1609	192.168.2.4	4638	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1610	192.168.2.4	36661	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1611	192.168.2.4	23223	3.76.144.165	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1612	192.168.2.4	46993	52.44.96.219	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1613	192.168.2.4	43406	34.255.81.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.4	61699	46.228.164.13	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1615	192.168.2.4	30759	104.244.42.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1616	192.168.2.4	14813	34.255.81.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1617	192.168.2.4	62689	34.255.81.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.4	50398	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1619	192.168.2.4	20133	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1620	192.168.2.4	25190	23.20.26.217	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1621	192.168.2.4	58607	142.250.184.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1622	192.168.2.4	64030	162.19.138.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1623	192.168.2.4	48991	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1624	192.168.2.4	56286	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1625	192.168.2.4	14660	142.250.184.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1626	192.168.2.4	38851	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1627	192.168.2.4	17027	8.2.110.114	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1628	192.168.2.4	65352	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1629	192.168.2.4	29271	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1630	192.168.2.4	62479	146.75.120.159	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1631	192.168.2.4	49617	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1632	192.168.2.4	16109	142.250.184.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1633	192.168.2.4	33823	77.245.57.72	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1634	192.168.2.4	1139	52.212.196.90	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1635	192.168.2.4	51735	51.75.86.98	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.4	50063	142.250.184.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1637	192.168.2.4	38428	142.250.184.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.4	50062	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.4	50072	146.75.120.159	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1640	192.168.2.4	34705	3.75.47.4	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1641	192.168.2.4	36237	178.250.1.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1642	192.168.2.4	9617	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1643	192.168.2.4	33075	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.4	50075	198.134.116.50	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1645	192.168.2.4	35925	104.244.42.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1646	192.168.2.4	41799	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1647	192.168.2.4	24444	3.66.33.135	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1648	192.168.2.4	41346	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1649	192.168.2.4	6279	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1650	192.168.2.4	1517	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1651	192.168.2.4	8135	23.20.26.217	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1652	192.168.2.4	52271	77.245.57.72	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1653	192.168.2.4	48427	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.4	50082	51.89.9.254	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.4	50088	142.250.185.194	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1656	192.168.2.4	32052	178.250.1.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1657	192.168.2.4	8511	18.185.176.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1658	192.168.2.4	46968	162.19.138.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1659	192.168.2.4	14875	35.244.174.68	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1660	192.168.2.4	5243	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1661	192.168.2.4	45930	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1662	192.168.2.4	35144	216.58.206.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.4	50098	23.20.26.217	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1664	192.168.2.4	3658	34.250.113.16	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1665	192.168.2.4	61850	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1666	192.168.2.4	35285	142.250.185.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1667	192.168.2.4	11211	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1668	192.168.2.4	30078	96.46.186.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1669	192.168.2.4	3836	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1670	192.168.2.4	54509	23.20.26.217	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.4	50113	96.46.186.186	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1672	192.168.2.4	15881	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1673	192.168.2.4	37878	162.19.138.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1674	192.168.2.4	30228	34.36.216.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1675	192.168.2.4	18361	216.219.92.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1676	192.168.2.4	31037	23.20.26.217	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1677	192.168.2.4	37188	35.71.131.137	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1678	192.168.2.4	39838	18.211.202.82	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1679	192.168.2.4	49330	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.4	50122	52.17.40.72	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1681	192.168.2.4	40450	198.134.116.50	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.4	58654	8.2.110.114	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1683	192.168.2.4	32205	34.255.81.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1684	192.168.2.4	33440	80.77.87.162	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	02:26:41
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:26:43
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:26:46
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:26:53
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6096 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	02:26:54
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6456 --field-trial-handle=2000,i,17804766984535642108,16498945501277723346,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Chrome Cache Entry: 1027

Chrome Cache Entry: 1028

Windows Analysis Report
https://pjnewsletter.com/jewish-americans-send-powerful/?utm_medium=email&utm_source=actengage